Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a6f608-3203-47f7-bbca-0a75749f7148/1/0PeTlppshIPMNmeTRFD2Z4_Rl1g.mft
File:                     0PeTlppshIPMNmeTRFD2Z4_Rl1g.mft (raw, json)
Hash identifier:          2OIHFdWQTofRKcu7V4TSMxrYofI+y0TB3FFoy4xvRxA=
Subject key identifier:   46:1F:57:33:20:CA:2F:2D:82:50:8A:85:87:07:6B:DF:D5:BC:20:72
Authority key identifier: D0:F7:93:96:9A:6C:84:83:CC:36:67:93:44:50:F6:67:8F:D1:97:58
Certificate issuer:       /CN=d0f793969a6c8483cc3667934450f6678fd19758
Certificate serial:       019674FA0BCC0E670405A728B574A491C237
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0PeTlppshIPMNmeTRFD2Z4_Rl1g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/a6f608-3203-47f7-bbca-0a75749f7148/1/0PeTlppshIPMNmeTRFD2Z4_Rl1g.mft
Manifest number:          053A
Signing time:             Sun 27 Apr 2025 02:01:06 +0000
Manifest this update:     Sun 27 Apr 2025 02:01:06 +0000
Manifest next update:     Mon 28 Apr 2025 02:01:06 +0000
Files and hashes:         1: 0PeTlppshIPMNmeTRFD2Z4_Rl1g.crl (hash: GSto+WsgN1+4tkc6doUUR8TS9z4egKb19nefh86GORk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/a6f608-3203-47f7-bbca-0a75749f7148/1/0PeTlppshIPMNmeTRFD2Z4_Rl1g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/a6f608-3203-47f7-bbca-0a75749f7148/1/0PeTlppshIPMNmeTRFD2Z4_Rl1g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0PeTlppshIPMNmeTRFD2Z4_Rl1g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 02:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:fa:0b:cc:0e:67:04:05:a7:28:b5:74:a4:91:c2:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0f793969a6c8483cc3667934450f6678fd19758
        Validity
            Not Before: Apr 27 02:01:06 2025 GMT
            Not After : Apr 28 02:01:06 2025 GMT
        Subject: CN=461f573320ca2f2d82508a8587076bdfd5bc2072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:bb:d7:6b:51:10:e7:b7:be:da:3c:ff:96:f5:
                    92:b7:1e:e0:b4:4e:aa:20:a3:98:1e:df:68:f8:07:
                    f8:0b:f1:81:ef:0d:6b:3f:c9:6e:2f:eb:56:a2:dc:
                    b4:3d:b9:66:38:a5:a3:04:8a:0f:39:a9:22:e5:f3:
                    02:9a:00:0b:33:bc:d6:cf:65:b6:c5:e6:9b:c4:6c:
                    a9:4d:68:d2:26:cd:87:f1:84:ba:b1:c0:39:92:ae:
                    41:8f:72:10:9f:f7:34:d0:1a:89:db:38:76:2c:29:
                    2b:e9:39:2a:92:5b:18:5b:f6:20:ca:2f:c0:7c:17:
                    71:8e:0e:f8:94:ae:a2:d7:71:bc:d6:8c:65:bd:1b:
                    67:4f:fe:a8:e5:4e:87:d9:4e:c5:ea:0e:08:c2:b5:
                    c9:df:22:58:31:a8:a7:7d:e7:2e:da:4b:80:41:42:
                    28:d0:fb:e1:85:b7:6a:c6:55:bc:7d:86:71:15:c5:
                    c7:43:83:9f:1f:98:8a:ef:14:f4:76:e0:a0:96:d2:
                    b7:96:b9:19:cf:b7:de:af:54:4b:77:51:8b:f0:d8:
                    d7:ff:ea:95:04:45:4c:df:37:72:b7:33:ad:d7:c9:
                    35:2d:dd:7c:8b:3b:97:79:78:d4:46:89:73:61:ac:
                    37:65:03:86:64:4d:91:c2:85:66:e2:4b:2d:a7:2b:
                    91:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:1F:57:33:20:CA:2F:2D:82:50:8A:85:87:07:6B:DF:D5:BC:20:72
            X509v3 Authority Key Identifier:
                keyid:D0:F7:93:96:9A:6C:84:83:CC:36:67:93:44:50:F6:67:8F:D1:97:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PeTlppshIPMNmeTRFD2Z4_Rl1g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a6f608-3203-47f7-bbca-0a75749f7148/1/0PeTlppshIPMNmeTRFD2Z4_Rl1g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a6f608-3203-47f7-bbca-0a75749f7148/1/0PeTlppshIPMNmeTRFD2Z4_Rl1g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:90:d6:bc:e6:8f:a4:16:c9:76:bc:2e:77:7a:96:36:a2:21:
         e8:d4:bc:5b:5f:c1:c5:69:8f:f3:39:90:43:54:9d:bc:06:92:
         9d:f4:66:fe:8f:bc:d1:83:1c:80:81:9c:a0:e4:dc:0d:0a:90:
         bf:3a:61:7e:e5:e8:d6:68:3a:2d:5d:7a:df:cf:38:64:9e:1e:
         0e:ae:6c:96:24:20:4a:5c:4d:b7:3f:f8:bb:f0:e4:c1:c1:f9:
         c9:8c:e5:af:cc:dc:45:83:67:96:86:51:31:6c:37:f7:1a:06:
         b9:04:71:8a:ff:86:2e:91:03:f2:08:e3:e6:77:d4:86:d0:13:
         35:30:46:1a:6b:dc:30:f8:95:c1:ac:8c:01:d1:b0:42:a0:8b:
         8e:4e:e0:16:53:74:96:d6:26:7c:0e:3c:6f:d6:80:a6:2f:7b:
         ac:d5:84:11:54:e7:ed:a9:9c:e2:de:79:55:95:56:fe:98:cd:
         33:59:18:27:b9:22:9b:91:7b:d1:d8:a6:64:d1:1a:62:9b:1b:
         e7:b6:63:25:3c:69:12:4e:60:81:7d:e2:58:0f:b2:c7:bb:aa:
         da:8d:77:15:d8:d6:8e:4e:57:1f:11:70:13:4b:e6:4c:09:5f:
         e2:30:bc:67:31:b5:4c:a6:bc:8a:5d:91:6c:e6:cd:7d:c7:1b:
         59:10:4e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:39:12 2025 by rpki-client