Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/22454c-48bd-4dab-95a0-56ac96596d0b/1/Mlpdv7OJlbWnn8HQ7jFEySeSTqU.mft
File:                     Mlpdv7OJlbWnn8HQ7jFEySeSTqU.mft (raw, json)
Hash identifier:          +rKXFyIiyL9YNIuZF9/rybb8c4EyNp8b9gZDpT1db6A=
Subject key identifier:   30:17:3F:74:0D:13:0A:73:95:16:B4:CA:9A:32:82:A6:5C:BE:93:3E
Authority key identifier: 32:5A:5D:BF:B3:89:95:B5:A7:9F:C1:D0:EE:31:44:C9:27:92:4E:A5
Certificate issuer:       /CN=325a5dbfb38995b5a79fc1d0ee3144c927924ea5
Certificate serial:       01974CD6D7BF3B5E8EC5E61DF83202631683
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mlpdv7OJlbWnn8HQ7jFEySeSTqU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/22454c-48bd-4dab-95a0-56ac96596d0b/1/Mlpdv7OJlbWnn8HQ7jFEySeSTqU.mft
Manifest number:          157A
Signing time:             Sun 08 Jun 2025 00:00:37 +0000
Manifest this update:     Sun 08 Jun 2025 00:00:37 +0000
Manifest next update:     Mon 09 Jun 2025 00:00:37 +0000
Files and hashes:         1: Mlpdv7OJlbWnn8HQ7jFEySeSTqU.crl (hash: 3LAu+kwfNIles/FPTa8CTYEKD7x68Y/RRxS6yYYomd0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/22454c-48bd-4dab-95a0-56ac96596d0b/1/Mlpdv7OJlbWnn8HQ7jFEySeSTqU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/22454c-48bd-4dab-95a0-56ac96596d0b/1/Mlpdv7OJlbWnn8HQ7jFEySeSTqU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mlpdv7OJlbWnn8HQ7jFEySeSTqU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:d6:d7:bf:3b:5e:8e:c5:e6:1d:f8:32:02:63:16:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=325a5dbfb38995b5a79fc1d0ee3144c927924ea5
        Validity
            Not Before: Jun  8 00:00:37 2025 GMT
            Not After : Jun  9 00:00:37 2025 GMT
        Subject: CN=30173f740d130a739516b4ca9a3282a65cbe933e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:16:3a:9f:25:58:be:c4:ff:c9:28:ac:b7:56:
                    49:a0:6f:8e:51:1f:2a:db:47:9b:e1:eb:4b:a0:71:
                    e7:b5:36:ca:cd:12:7c:db:d8:99:34:d6:53:6c:a6:
                    a1:d6:dc:53:b1:cb:22:1b:94:fe:5c:30:a5:e7:14:
                    a5:73:22:22:64:c9:48:06:56:ef:28:b6:84:53:07:
                    5a:62:f0:67:84:b9:09:53:ac:f4:46:bd:ee:ec:c2:
                    4d:aa:9b:5d:dd:4c:00:a6:6f:5f:32:ee:00:d0:ed:
                    26:0b:33:09:8b:e7:a0:73:5e:77:ab:b8:03:dc:36:
                    83:c6:87:89:40:08:48:84:43:0c:e8:e6:5d:93:c2:
                    2a:24:45:22:5f:c1:39:46:20:a6:9c:2e:b2:9a:11:
                    73:3d:86:57:fd:94:27:bb:27:06:10:e7:20:72:83:
                    75:eb:d5:ce:81:54:b7:de:81:1e:e2:d4:00:d4:56:
                    dc:28:35:e0:b3:aa:20:b7:29:36:3b:a0:41:61:ce:
                    a8:07:86:ed:25:a9:66:74:27:58:d7:6e:f6:65:ef:
                    5b:b1:b9:57:9b:47:b0:7f:63:78:45:72:01:f8:58:
                    71:3e:70:35:db:61:23:34:34:2e:76:31:02:b7:95:
                    0a:c1:b2:4c:09:84:f8:00:ad:96:fe:ae:92:7e:b6:
                    3b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:17:3F:74:0D:13:0A:73:95:16:B4:CA:9A:32:82:A6:5C:BE:93:3E
            X509v3 Authority Key Identifier:
                keyid:32:5A:5D:BF:B3:89:95:B5:A7:9F:C1:D0:EE:31:44:C9:27:92:4E:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mlpdv7OJlbWnn8HQ7jFEySeSTqU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/22454c-48bd-4dab-95a0-56ac96596d0b/1/Mlpdv7OJlbWnn8HQ7jFEySeSTqU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/22454c-48bd-4dab-95a0-56ac96596d0b/1/Mlpdv7OJlbWnn8HQ7jFEySeSTqU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:5f:25:dc:30:4d:c1:03:4d:a1:2e:12:49:9e:56:fc:e5:d1:
         d1:24:97:b9:16:04:3b:5c:8f:27:96:ef:47:b6:f1:fa:5b:d3:
         17:14:4c:16:1a:0d:e6:ef:36:09:6c:16:29:9e:6f:35:d1:60:
         6d:c3:5b:65:14:15:be:82:33:53:97:ca:56:97:f3:10:23:6a:
         56:3f:69:d8:d5:11:ba:5b:19:00:a0:0d:53:57:3b:16:48:66:
         4a:16:58:8e:18:11:f2:2c:ac:16:d6:c4:be:29:c6:85:50:1f:
         12:68:04:de:ed:ba:3f:1b:57:fd:97:89:fe:57:5c:a7:ed:c6:
         82:1b:f2:dd:ce:cc:1e:f0:26:ef:04:bb:e2:ac:af:eb:1d:b0:
         14:b3:53:b1:18:6c:b9:8d:c3:98:0e:67:c9:ba:43:e2:24:f1:
         78:d9:29:9a:b4:2a:08:e2:ae:2e:f7:de:05:ca:9d:96:58:0d:
         54:d7:05:c2:54:b3:1a:42:8a:d8:ab:1a:7a:29:40:0b:7b:be:
         95:da:f2:05:f9:ea:6a:c7:24:92:1e:b0:bf:3c:0a:78:a5:20:
         9a:4a:c2:cd:ad:35:ea:16:79:eb:46:fd:84:00:37:f1:97:f6:
         bd:b0:15:33:7e:66:61:f9:82:fb:67:c2:3e:09:4c:a0:dd:db:
         1b:c0:ec:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:36:41 2025 by rpki-client