Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.mft
File:                     MLepUygLb5mPwRxHy-kbgmM2TrA.mft (raw, json)
Hash identifier:          0DGdyeZ+WpBXrX4QQATKZLX8Sbzy4X9d/SbNDZkAQRM=
Subject key identifier:   09:55:1F:49:73:70:32:BE:28:A4:C7:18:51:43:C4:40:62:EF:C9:0B
Authority key identifier: 30:B7:A9:53:28:0B:6F:99:8F:C1:1C:47:CB:E9:1B:82:63:36:4E:B0
Certificate issuer:       /CN=30b7a953280b6f998fc11c47cbe91b8263364eb0
Certificate serial:       019674C2450FB55F72F1B4C91BC789085E82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MLepUygLb5mPwRxHy-kbgmM2TrA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.mft
Manifest number:          03EB
Signing time:             Sun 27 Apr 2025 01:00:10 +0000
Manifest this update:     Sun 27 Apr 2025 01:00:10 +0000
Manifest next update:     Mon 28 Apr 2025 01:00:10 +0000
Files and hashes:         1: MLepUygLb5mPwRxHy-kbgmM2TrA.crl (hash: asHol8Uh4V8QcX9kT0bZeO2Gv8kLhjlBphjXNAkVMJk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MLepUygLb5mPwRxHy-kbgmM2TrA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:c2:45:0f:b5:5f:72:f1:b4:c9:1b:c7:89:08:5e:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30b7a953280b6f998fc11c47cbe91b8263364eb0
        Validity
            Not Before: Apr 27 01:00:10 2025 GMT
            Not After : Apr 28 01:00:10 2025 GMT
        Subject: CN=09551f49737032be28a4c7185143c44062efc90b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6e:73:9c:e3:3f:92:58:d2:0f:0e:7c:03:66:
                    c3:18:e8:ea:76:f9:15:40:01:88:db:29:d5:2c:e2:
                    ba:93:0e:5a:02:98:56:36:b1:1b:a7:7f:2b:47:dd:
                    ed:38:8c:d9:18:82:bf:ea:1b:90:c9:1e:51:76:8a:
                    51:47:29:bc:76:72:3f:72:1d:af:28:d6:c8:01:52:
                    91:5a:e0:c1:84:c8:d3:3c:a2:a1:81:ba:5b:2d:29:
                    00:2d:e9:a6:a7:89:30:53:ba:1a:68:83:e4:97:12:
                    3f:1e:59:8b:29:f1:fa:a0:3c:0c:ce:ed:b2:5d:66:
                    08:71:4c:24:f2:64:e1:fa:fc:8b:39:51:35:b1:1b:
                    25:9b:ed:37:b0:96:97:95:0c:6a:10:0d:32:e0:44:
                    01:ad:7b:24:88:ce:f4:59:e4:f3:c5:ad:28:d6:e6:
                    09:e6:92:b1:7b:4c:0e:ed:e7:6f:1c:f9:f3:26:f6:
                    8b:c3:53:31:fe:ef:6b:a5:45:79:dc:47:3e:2a:f1:
                    8d:40:4c:23:a3:ad:26:bc:86:b3:4e:c0:0d:1c:12:
                    27:6b:71:24:da:e0:f9:d1:c8:b5:0e:39:4c:e1:14:
                    4d:90:37:51:6f:c8:e7:27:1e:f8:ed:ea:2e:f9:15:
                    72:7e:c6:0b:4a:01:40:f7:d0:d5:40:fe:fd:99:ca:
                    81:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:55:1F:49:73:70:32:BE:28:A4:C7:18:51:43:C4:40:62:EF:C9:0B
            X509v3 Authority Key Identifier:
                keyid:30:B7:A9:53:28:0B:6F:99:8F:C1:1C:47:CB:E9:1B:82:63:36:4E:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MLepUygLb5mPwRxHy-kbgmM2TrA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:48:46:86:9f:8e:b5:01:00:72:4a:fb:b4:93:01:78:fb:33:
         1c:70:a4:0d:5d:7d:84:70:fa:ec:4e:ef:94:75:41:0d:8e:36:
         ff:9b:95:a9:71:ce:ed:f2:4e:94:ac:f5:ec:ea:be:08:8a:d2:
         75:bc:c9:f4:a5:8c:de:4c:01:6a:95:7b:04:a4:f6:f4:3d:18:
         28:89:ae:45:11:08:d1:99:f6:7f:46:7e:b5:a0:14:31:86:c8:
         bb:93:73:73:54:56:5a:ca:29:e6:60:75:e0:06:76:72:cd:0e:
         89:5f:8f:ea:e3:c9:55:7e:be:d2:31:6a:d2:d5:da:75:b1:a6:
         8e:d1:8a:67:31:4b:77:69:44:1b:f3:3f:3e:fe:ba:a3:bd:a8:
         96:0f:10:55:bc:ad:ec:f7:6a:52:1e:4f:7a:b4:e6:e7:a8:ef:
         45:b5:67:c6:b5:57:62:c7:ce:b7:87:ea:05:02:73:d6:b0:a0:
         8a:2a:e7:d9:a5:bd:95:30:86:6b:ec:af:bd:90:01:97:76:4c:
         99:80:6d:18:dd:d2:56:f5:37:d7:88:6e:fe:19:35:33:0a:20:
         21:90:70:82:81:c2:d6:07:be:bb:96:c9:4d:8e:91:f9:cc:39:
         46:29:f8:a7:43:3d:3e:63:cb:c9:d7:e0:73:53:a2:d9:4e:74:
         9d:dc:04:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:42:42 2025 by rpki-client