Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/cb5183-d8d8-4425-b0ed-c2097031ed4b/1/at5urfJFy3ply0wF09VLzSYKB18.mft
File:                     at5urfJFy3ply0wF09VLzSYKB18.mft (raw, json)
Hash identifier:          aAPPfSv0Ns/Ur/cf6aJTpd8XWt5OSNhzvFa9Ck0b/Ls=
Subject key identifier:   79:BD:4D:9C:4A:9C:E9:3F:53:72:7B:D0:8C:CC:BD:1D:F0:6C:CD:12
Authority key identifier: 6A:DE:6E:AD:F2:45:CB:7A:65:CB:4C:05:D3:D5:4B:CD:26:0A:07:5F
Certificate issuer:       /CN=6ade6eadf245cb7a65cb4c05d3d54bcd260a075f
Certificate serial:       01968AA59879ABB25989AB2F1F346C15F31A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/at5urfJFy3ply0wF09VLzSYKB18.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/cb5183-d8d8-4425-b0ed-c2097031ed4b/1/at5urfJFy3ply0wF09VLzSYKB18.mft
Manifest number:          0268
Signing time:             Thu 01 May 2025 07:00:30 +0000
Manifest this update:     Thu 01 May 2025 07:00:30 +0000
Manifest next update:     Fri 02 May 2025 07:00:30 +0000
Files and hashes:         1: at5urfJFy3ply0wF09VLzSYKB18.crl (hash: lnBkxo/xLTm2HHxv8rEeW8EtWg7djDYOPapRayH9sCk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/cb5183-d8d8-4425-b0ed-c2097031ed4b/1/at5urfJFy3ply0wF09VLzSYKB18.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/cb5183-d8d8-4425-b0ed-c2097031ed4b/1/at5urfJFy3ply0wF09VLzSYKB18.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/at5urfJFy3ply0wF09VLzSYKB18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8a:a5:98:79:ab:b2:59:89:ab:2f:1f:34:6c:15:f3:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ade6eadf245cb7a65cb4c05d3d54bcd260a075f
        Validity
            Not Before: May  1 07:00:30 2025 GMT
            Not After : May  2 07:00:30 2025 GMT
        Subject: CN=79bd4d9c4a9ce93f53727bd08cccbd1df06ccd12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a5:88:40:e1:91:bb:85:5b:93:8b:96:0b:44:
                    28:aa:de:50:26:89:22:b2:39:b0:0b:4b:ff:61:98:
                    eb:18:6e:01:79:76:88:3c:cc:5d:59:73:ec:ce:cd:
                    e1:dd:21:af:39:fb:cf:a3:94:2d:97:9e:77:b4:32:
                    32:57:3e:e7:98:d9:30:c7:2a:56:4a:38:d6:77:ae:
                    b3:3c:2a:29:55:fb:0f:8e:f8:44:6d:23:65:fc:70:
                    0c:cb:a6:10:ef:39:09:29:d6:a9:c8:76:87:6f:56:
                    6d:52:9a:54:3a:0a:75:5d:82:04:09:19:72:f3:65:
                    8e:d9:61:af:ba:56:79:67:31:28:64:01:f2:bf:2a:
                    2f:da:44:ba:9e:d0:d1:f5:62:52:ea:e0:33:71:76:
                    e0:33:e6:09:95:a0:68:06:16:65:8b:91:e9:63:33:
                    df:b1:8e:65:63:43:59:0b:7c:8b:04:ac:0d:a9:cd:
                    61:97:b6:c7:f9:86:d1:9a:46:b9:22:f3:e8:48:30:
                    02:93:9e:49:0d:46:17:84:05:85:e0:ff:fb:1e:c4:
                    e8:ab:47:b3:a5:bc:95:b9:eb:0c:bf:e1:ba:e2:5d:
                    f2:9f:c6:15:fa:88:c5:81:77:f6:72:b0:d2:71:d0:
                    b4:16:ca:a9:92:aa:c2:71:a9:cd:c0:a3:ae:57:0a:
                    fb:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:BD:4D:9C:4A:9C:E9:3F:53:72:7B:D0:8C:CC:BD:1D:F0:6C:CD:12
            X509v3 Authority Key Identifier:
                keyid:6A:DE:6E:AD:F2:45:CB:7A:65:CB:4C:05:D3:D5:4B:CD:26:0A:07:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/at5urfJFy3ply0wF09VLzSYKB18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cb5183-d8d8-4425-b0ed-c2097031ed4b/1/at5urfJFy3ply0wF09VLzSYKB18.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cb5183-d8d8-4425-b0ed-c2097031ed4b/1/at5urfJFy3ply0wF09VLzSYKB18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:11:e6:6c:94:c5:09:2b:0b:91:9b:37:78:ba:a8:1d:54:ba:
         82:73:1a:9f:e5:e9:21:5f:16:b9:9d:f6:4d:b8:b9:80:82:66:
         3b:d7:d1:08:cc:b6:2a:6d:d8:06:42:10:48:e8:80:35:9d:a8:
         24:1e:40:3a:ce:0c:eb:b5:52:4a:4e:04:af:38:dc:ec:3b:b8:
         ce:d1:6f:37:04:fc:05:c7:85:81:a8:d5:e5:25:10:a7:27:ab:
         a9:95:c5:2c:dd:e9:e3:69:31:a6:66:26:8c:24:6b:4f:bb:52:
         4a:5a:91:5b:87:6e:47:82:1d:82:15:03:32:0e:f9:5d:d4:d2:
         30:a6:c0:68:87:ba:b8:b5:1b:6a:aa:8b:57:ca:22:44:be:a1:
         e9:d8:e9:4a:c1:53:67:a8:70:4f:a8:da:e3:d4:1f:d0:bc:78:
         21:1a:7b:15:26:22:c7:2b:52:43:b6:15:94:a5:37:f9:32:e4:
         97:2d:ec:f3:1b:48:41:b4:15:bd:53:dc:cb:c6:2d:d0:d8:d9:
         d9:d7:b5:ac:92:a0:4b:5d:d6:5a:2f:a6:8e:fd:9f:de:71:a9:
         81:26:0f:f5:ae:55:18:3f:d5:92:f9:b1:62:2d:73:93:b4:51:
         d6:03:b1:1f:cf:99:66:0c:a7:e3:70:fd:3b:01:ce:ee:07:e6:
         94:4c:ef:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:00:09 2025 by rpki-client