Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/22454c-48bd-4dab-95a0-56ac96596d0b/1/Mlpdv7OJlbWnn8HQ7jFEySeSTqU.mft
File:                     Mlpdv7OJlbWnn8HQ7jFEySeSTqU.mft (raw, json)
Hash identifier:          MLaQHxIiyS2Fd004vvoPzhdymBKiZP2F1uYNtvzX8D0=
Subject key identifier:   25:16:5D:44:04:CB:12:27:2F:94:B5:F1:8B:7E:F9:96:B8:63:15:63
Authority key identifier: 32:5A:5D:BF:B3:89:95:B5:A7:9F:C1:D0:EE:31:44:C9:27:92:4E:A5
Certificate issuer:       /CN=325a5dbfb38995b5a79fc1d0ee3144c927924ea5
Certificate serial:       01964BFE3AD8FDECF729851248570E51FEED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mlpdv7OJlbWnn8HQ7jFEySeSTqU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/22454c-48bd-4dab-95a0-56ac96596d0b/1/Mlpdv7OJlbWnn8HQ7jFEySeSTqU.mft
Manifest number:          14F5
Signing time:             Sat 19 Apr 2025 03:01:14 +0000
Manifest this update:     Sat 19 Apr 2025 03:01:14 +0000
Manifest next update:     Sun 20 Apr 2025 03:01:14 +0000
Files and hashes:         1: Mlpdv7OJlbWnn8HQ7jFEySeSTqU.crl (hash: gVFmGxJOc1k4aSnrbcJ9FX1sf1e6xH1ogNZe1oevJUk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/22454c-48bd-4dab-95a0-56ac96596d0b/1/Mlpdv7OJlbWnn8HQ7jFEySeSTqU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/22454c-48bd-4dab-95a0-56ac96596d0b/1/Mlpdv7OJlbWnn8HQ7jFEySeSTqU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mlpdv7OJlbWnn8HQ7jFEySeSTqU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 03:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4b:fe:3a:d8:fd:ec:f7:29:85:12:48:57:0e:51:fe:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=325a5dbfb38995b5a79fc1d0ee3144c927924ea5
        Validity
            Not Before: Apr 19 03:01:14 2025 GMT
            Not After : Apr 20 03:01:14 2025 GMT
        Subject: CN=25165d4404cb12272f94b5f18b7ef996b8631563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:85:48:8a:68:68:f9:51:12:7a:9f:53:6f:8f:
                    5c:1c:3d:95:d2:cb:c4:06:3f:dd:fc:4d:1a:65:1e:
                    0b:68:6b:e1:14:ce:81:ad:f6:5e:33:04:7d:26:a6:
                    5f:f0:4b:5e:20:0f:0b:cf:d4:28:bd:32:78:a3:30:
                    e7:ba:fa:9f:ac:06:b5:5a:90:80:7f:5c:a8:48:bb:
                    c5:2a:5b:5b:f5:89:fb:4e:ea:86:49:be:0c:57:24:
                    ec:d0:57:ff:f0:94:9f:20:cf:9c:bd:95:69:53:2f:
                    7e:48:99:16:4b:f1:69:2f:9f:4e:e7:77:c8:b0:10:
                    68:c0:61:6e:9b:df:b0:e1:e7:41:28:94:15:49:44:
                    5c:f9:04:6d:7f:5d:7b:93:e0:89:25:61:8d:36:38:
                    c0:fb:9a:08:42:63:d2:ab:69:db:54:6d:76:39:90:
                    6e:5a:27:84:76:d4:c4:5b:fa:f3:52:75:5f:92:7e:
                    fb:d0:cd:10:08:21:c3:67:d9:56:6b:c5:c5:11:c9:
                    c9:ae:c0:94:28:7a:53:59:cc:26:20:ab:35:56:f7:
                    95:5e:f9:93:d5:87:e2:cb:07:91:1f:91:01:ce:d4:
                    44:a9:23:d9:18:b0:23:b4:bc:ca:a2:86:76:43:ed:
                    1d:a0:05:e8:48:fd:21:99:06:6a:b4:74:61:09:38:
                    bc:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:16:5D:44:04:CB:12:27:2F:94:B5:F1:8B:7E:F9:96:B8:63:15:63
            X509v3 Authority Key Identifier:
                keyid:32:5A:5D:BF:B3:89:95:B5:A7:9F:C1:D0:EE:31:44:C9:27:92:4E:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mlpdv7OJlbWnn8HQ7jFEySeSTqU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/22454c-48bd-4dab-95a0-56ac96596d0b/1/Mlpdv7OJlbWnn8HQ7jFEySeSTqU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/22454c-48bd-4dab-95a0-56ac96596d0b/1/Mlpdv7OJlbWnn8HQ7jFEySeSTqU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:a7:f0:ab:fc:6a:82:05:10:1d:4f:61:58:89:74:17:62:ab:
         c9:8d:19:ee:cd:30:dc:81:b1:7f:e1:22:b5:3e:d1:70:39:7a:
         cf:9b:16:6b:12:f3:32:32:12:ca:59:a6:31:17:7d:39:68:85:
         35:69:44:65:04:d6:a9:7d:d4:fa:81:f9:a6:33:46:a5:b3:dd:
         16:53:0a:fc:2e:d2:e2:1d:9f:f8:75:92:f6:a4:e6:81:b3:4b:
         a4:c2:2c:02:da:bb:d6:df:6c:0e:59:fd:9f:5b:09:77:5d:55:
         68:bd:72:bc:85:c5:c8:6a:9f:3f:65:94:55:cb:50:91:e3:7e:
         b4:27:01:3c:37:4b:5c:b3:4d:23:7e:4c:42:26:09:24:34:5f:
         bf:fb:39:67:cb:f7:93:52:cf:9b:fa:bf:5e:4f:45:03:f0:8f:
         10:db:ac:d5:1e:10:49:ef:1b:5b:af:2a:73:0b:b4:f4:cb:2f:
         e1:21:18:81:ae:7c:88:5e:1b:2c:31:3a:79:f1:23:0b:79:40:
         49:1f:26:1b:bc:26:a7:25:67:23:2f:b3:ce:5e:fe:e8:f1:4d:
         fa:b6:87:93:9f:0b:8e:b2:6a:12:f8:40:ca:f9:73:7a:67:2e:
         5c:5f:8d:2e:8b:d1:9b:97:e4:51:91:c7:79:92:15:8c:8b:56:
         4f:d9:95:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 11:34:59 2025 by rpki-client