Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/653578-3f0a-4059-a71c-1316c4e6944a/1/F5oOISUfKMIyhkRiCw0nnKxg2Mw.mft
File:                     F5oOISUfKMIyhkRiCw0nnKxg2Mw.mft (raw, json)
Hash identifier:          tTntDjwlZ0RJrfmUq5Q1x0sQqU2n10bij1fgFfJYR6s=
Subject key identifier:   8C:CD:51:45:AD:B4:EE:E2:2D:CE:D3:0F:23:46:04:2C:92:00:63:C3
Authority key identifier: 17:9A:0E:21:25:1F:28:C2:32:86:44:62:0B:0D:27:9C:AC:60:D8:CC
Certificate issuer:       /CN=179a0e21251f28c2328644620b0d279cac60d8cc
Certificate serial:       01965A5E04E5592AA2EE174D1C741CC118D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F5oOISUfKMIyhkRiCw0nnKxg2Mw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/653578-3f0a-4059-a71c-1316c4e6944a/1/F5oOISUfKMIyhkRiCw0nnKxg2Mw.mft
Manifest number:          07ED
Signing time:             Mon 21 Apr 2025 22:00:33 +0000
Manifest this update:     Mon 21 Apr 2025 22:00:33 +0000
Manifest next update:     Tue 22 Apr 2025 22:00:33 +0000
Files and hashes:         1: F5oOISUfKMIyhkRiCw0nnKxg2Mw.crl (hash: Vsp/K5jpcmUTOJ3w+6AVWFdHpM3Xya+EHjdh9P4XB6E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/653578-3f0a-4059-a71c-1316c4e6944a/1/F5oOISUfKMIyhkRiCw0nnKxg2Mw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/653578-3f0a-4059-a71c-1316c4e6944a/1/F5oOISUfKMIyhkRiCw0nnKxg2Mw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F5oOISUfKMIyhkRiCw0nnKxg2Mw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:5a:5e:04:e5:59:2a:a2:ee:17:4d:1c:74:1c:c1:18:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=179a0e21251f28c2328644620b0d279cac60d8cc
        Validity
            Not Before: Apr 21 22:00:33 2025 GMT
            Not After : Apr 22 22:00:33 2025 GMT
        Subject: CN=8ccd5145adb4eee22dced30f2346042c920063c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7a:73:2a:f5:99:17:76:75:cc:b6:f2:54:4f:
                    ee:76:ea:71:65:01:d0:94:9a:72:33:1d:ec:86:dd:
                    98:a8:9f:87:61:d6:32:1e:57:0b:96:f4:b2:9c:8d:
                    49:fc:c5:e4:68:02:80:21:63:da:f1:81:6a:d9:ef:
                    b9:31:8d:d4:d4:4f:6c:ce:f1:51:ab:b0:ea:01:80:
                    db:60:ba:b9:8d:d4:f2:2a:43:11:66:9c:32:bb:d4:
                    14:a1:56:d0:6e:94:c9:18:15:c5:04:a0:21:05:4b:
                    82:94:e9:d1:e4:7d:0e:3a:13:09:02:73:e6:18:d1:
                    7b:63:3a:39:07:43:c9:08:90:59:94:3d:02:bf:ea:
                    78:1a:71:57:4c:95:59:72:43:da:77:4b:29:f3:12:
                    67:27:d7:c2:c0:d1:25:05:ea:52:09:f8:13:8e:5e:
                    8d:36:24:08:b6:48:0e:c9:a5:d3:75:b0:b0:04:a8:
                    f0:7f:44:f8:1e:49:ee:de:c7:39:08:12:de:b0:a3:
                    4d:03:be:fc:a0:0f:ba:5f:61:f2:57:54:30:65:87:
                    75:10:b3:e0:8b:43:ad:24:21:dd:4e:3c:82:96:58:
                    f8:71:e9:a8:ee:61:54:a4:f3:31:a0:6e:01:97:12:
                    ab:80:b5:01:16:fb:8f:f8:53:85:74:b6:32:ac:3e:
                    6b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:CD:51:45:AD:B4:EE:E2:2D:CE:D3:0F:23:46:04:2C:92:00:63:C3
            X509v3 Authority Key Identifier:
                keyid:17:9A:0E:21:25:1F:28:C2:32:86:44:62:0B:0D:27:9C:AC:60:D8:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5oOISUfKMIyhkRiCw0nnKxg2Mw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/653578-3f0a-4059-a71c-1316c4e6944a/1/F5oOISUfKMIyhkRiCw0nnKxg2Mw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/653578-3f0a-4059-a71c-1316c4e6944a/1/F5oOISUfKMIyhkRiCw0nnKxg2Mw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:b2:d0:98:5c:26:76:96:18:0d:b3:0e:ca:e2:41:95:c4:b0:
         8d:fb:16:a3:e0:0e:06:35:74:33:b4:bb:4a:ad:c1:31:f5:38:
         33:30:a9:4e:79:33:f1:a8:c2:88:01:c6:63:96:8c:92:da:ce:
         48:d1:9e:54:16:57:7f:a7:1a:a5:c4:89:ac:32:92:5c:c3:98:
         99:d4:54:23:aa:49:95:67:b2:d8:44:1f:a0:11:94:3a:df:9c:
         e4:39:64:0b:f0:d7:c0:93:81:6f:e6:89:5f:1c:f9:ac:c2:a7:
         53:9d:4a:a4:aa:18:55:83:de:1b:60:d7:fe:26:ca:c5:30:e9:
         d4:a1:c0:86:fe:31:62:f2:12:0c:75:22:b0:84:51:e2:1e:25:
         f8:7c:e7:64:11:92:52:35:0f:8b:89:09:6d:cb:23:5b:ab:da:
         24:aa:8c:5f:d4:fc:97:34:03:70:0e:c6:15:72:c1:ad:69:d6:
         0b:f1:c7:46:28:32:66:b1:44:0e:1d:ed:0f:4f:0f:61:56:06:
         2e:8d:75:dc:23:20:e7:5b:67:e1:18:63:46:1a:6f:e2:0d:05:
         ee:db:e7:80:2d:75:f4:1c:34:3e:7d:70:1f:a3:66:02:9a:5d:
         af:a2:bd:4f:1a:f7:fc:dc:85:95:4b:93:40:cd:a5:a2:73:a3:
         c4:70:9a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:19:42 2025 by rpki-client