Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.mft
File:                     5318qB7lnVNFA7L3tj22K11ExW4.mft (raw, json)
Hash identifier:          w7vvO/8UvXNmYQyTxNq1dBS1vJXQI9PBP/SN2QGLGpw=
Subject key identifier:   74:7D:99:57:53:04:4A:72:90:1A:99:49:A2:CA:44:49:CA:C5:02:20
Authority key identifier: E7:7D:7C:A8:1E:E5:9D:53:45:03:B2:F7:B6:3D:B6:2B:5D:44:C5:6E
Certificate issuer:       /CN=e77d7ca81ee59d534503b2f7b63db62b5d44c56e
Certificate serial:       0195903DBBD07C59BA85CA431C363854FCCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5318qB7lnVNFA7L3tj22K11ExW4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.mft
Manifest number:          0D00
Signing time:             Thu 13 Mar 2025 16:01:59 +0000
Manifest this update:     Thu 13 Mar 2025 16:01:59 +0000
Manifest next update:     Fri 14 Mar 2025 16:01:59 +0000
Files and hashes:         1: 5318qB7lnVNFA7L3tj22K11ExW4.crl (hash: KWPMKnukPn/fq8IDZD5l/sIcmDdX97O+wHPQcVu1jqY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5318qB7lnVNFA7L3tj22K11ExW4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Mar 2025 09:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:90:3d:bb:d0:7c:59:ba:85:ca:43:1c:36:38:54:fc:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e77d7ca81ee59d534503b2f7b63db62b5d44c56e
        Validity
            Not Before: Mar 13 16:01:59 2025 GMT
            Not After : Mar 14 16:01:59 2025 GMT
        Subject: CN=747d995753044a72901a9949a2ca4449cac50220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8f:d2:3d:0c:69:95:d1:18:f8:4b:4d:48:95:
                    8f:2b:1f:2c:d7:8b:51:24:70:ac:2e:fe:74:fe:d2:
                    43:6d:fd:5f:03:c5:78:57:91:f7:1e:99:d2:bf:18:
                    b5:b7:48:66:1f:80:f1:bb:ed:4a:f0:a5:e2:d2:f3:
                    a9:81:d5:57:a0:65:3a:f8:78:19:6a:c1:78:9a:9d:
                    4c:79:46:02:fc:48:fc:8d:3e:27:d7:ca:d9:6e:64:
                    c2:e3:69:85:68:3f:10:33:49:94:65:97:eb:a1:25:
                    42:d1:5b:e5:1f:c1:db:e8:ce:58:b7:b1:9a:9a:f7:
                    d8:98:68:a8:21:c4:73:c3:95:b0:80:f9:83:84:0e:
                    af:f4:80:b6:eb:58:f3:a3:7c:57:75:90:88:d8:7a:
                    fb:5b:21:b5:73:9e:08:43:07:f3:a4:9e:dd:0b:98:
                    b4:45:58:09:89:0a:12:e4:a7:a6:e8:90:b6:c0:7b:
                    40:7a:31:ea:eb:41:18:c1:14:d3:86:35:d3:de:2b:
                    91:a0:5a:bb:b0:f0:ff:17:ef:3c:05:93:39:46:b5:
                    00:e9:b5:c6:fe:a0:23:d3:3f:c7:14:2d:5d:49:e9:
                    30:2a:82:94:59:1b:e7:06:0f:af:69:4e:25:ea:56:
                    fe:68:51:65:8a:85:1b:80:a9:07:2d:48:cd:f2:10:
                    ba:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:7D:99:57:53:04:4A:72:90:1A:99:49:A2:CA:44:49:CA:C5:02:20
            X509v3 Authority Key Identifier:
                keyid:E7:7D:7C:A8:1E:E5:9D:53:45:03:B2:F7:B6:3D:B6:2B:5D:44:C5:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5318qB7lnVNFA7L3tj22K11ExW4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:53:87:f9:66:67:a9:e1:df:9f:d8:e9:b2:87:16:83:0e:ae:
         65:0a:b0:b0:99:82:88:4f:aa:01:b5:77:cd:26:08:44:79:55:
         bf:49:57:e0:f8:fc:31:8a:92:12:8a:66:9f:e1:ce:2f:58:2a:
         c8:51:8c:90:88:a3:5a:35:81:9d:ce:8a:f6:db:c5:39:fe:71:
         27:52:94:55:35:32:30:31:3a:de:a0:5f:ed:e3:02:cf:fd:24:
         af:af:f0:28:7e:dc:a2:6c:0b:6f:97:c5:27:0c:ce:b5:59:1f:
         19:20:0d:1a:81:9b:89:30:0c:6f:1b:1f:56:72:3a:3c:8f:ec:
         84:d7:4a:3a:7d:cd:db:d5:5e:1f:cc:b4:6f:0f:a8:4c:1f:ce:
         46:43:10:dd:77:05:1c:2d:95:10:58:b2:ef:98:62:d2:5e:de:
         5b:ee:48:af:2b:17:55:e5:82:6b:f1:a8:e2:dc:74:1b:1d:fc:
         53:98:33:2f:a3:c7:5d:61:c8:fb:4a:c2:67:78:37:bf:dd:5a:
         7b:b8:e9:6f:2c:9e:87:ae:d9:42:10:cf:f4:02:66:29:74:8e:
         d4:c6:01:7d:10:75:a8:76:49:48:7b:00:a7:86:52:1e:17:f3:
         c3:42:36:43:ae:c4:81:be:63:e3:8e:8b:8b:12:b6:b9:7d:3a:
         e5:38:a8:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:22:25 2025 by rpki-client