Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/eb62f7-8bec-4fc9-94cb-9e169d5e0a58/1/eNDmeWDvds5jPJ_md02H22m4m3U.mft
File:                     eNDmeWDvds5jPJ_md02H22m4m3U.mft (raw, json)
Hash identifier:          m7/yR/WvigUGDX8goikASa2z6/VaQVviHJfL0n3gXyU=
Subject key identifier:   A7:7D:23:53:C2:A0:8B:2A:8E:26:4F:F4:A6:19:F0:A9:82:EE:4C:FF
Authority key identifier: 78:D0:E6:79:60:EF:76:CE:63:3C:9F:E6:77:4D:87:DB:69:B8:9B:75
Certificate issuer:       /CN=78d0e67960ef76ce633c9fe6774d87db69b89b75
Certificate serial:       0194C42C6873B60136145A3EDD9A4950D90E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eNDmeWDvds5jPJ_md02H22m4m3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/eb62f7-8bec-4fc9-94cb-9e169d5e0a58/1/eNDmeWDvds5jPJ_md02H22m4m3U.mft
Manifest number:          142C
Signing time:             Sun 02 Feb 2025 01:00:32 +0000
Manifest this update:     Sun 02 Feb 2025 01:00:32 +0000
Manifest next update:     Mon 03 Feb 2025 01:00:32 +0000
Files and hashes:         1: eNDmeWDvds5jPJ_md02H22m4m3U.crl (hash: GWVJSAMYT8x/ddNxfSmalg47/xt/OJY1KkIzxt8SIBY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/eb62f7-8bec-4fc9-94cb-9e169d5e0a58/1/eNDmeWDvds5jPJ_md02H22m4m3U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/eb62f7-8bec-4fc9-94cb-9e169d5e0a58/1/eNDmeWDvds5jPJ_md02H22m4m3U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eNDmeWDvds5jPJ_md02H22m4m3U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Feb 2025 00:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c4:2c:68:73:b6:01:36:14:5a:3e:dd:9a:49:50:d9:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78d0e67960ef76ce633c9fe6774d87db69b89b75
        Validity
            Not Before: Feb  2 01:00:32 2025 GMT
            Not After : Feb  3 01:00:32 2025 GMT
        Subject: CN=a77d2353c2a08b2a8e264ff4a619f0a982ee4cff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:05:e7:9d:f1:05:ef:bc:24:68:65:2d:4b:96:
                    03:7f:1d:eb:cd:a5:82:9d:8a:f4:38:96:c9:10:9a:
                    d3:61:02:3e:95:29:0b:ab:08:70:cc:69:bc:3c:94:
                    b2:54:b7:22:ad:0b:31:33:13:5c:7a:63:15:61:58:
                    e4:f9:03:0c:30:24:0b:c8:49:bd:29:21:6b:02:22:
                    89:42:c2:45:fa:1d:ee:13:ce:ed:79:cc:f7:4f:89:
                    b4:79:d9:c2:14:69:cf:5c:6e:3c:f1:ef:00:32:2c:
                    56:5f:54:ab:da:b1:05:00:fc:06:ff:eb:12:9c:b1:
                    c7:0b:0c:cd:4a:6b:f2:b3:ab:02:20:4c:43:80:31:
                    d2:af:dd:01:2c:86:0c:29:33:ae:05:db:ce:8b:7a:
                    43:eb:df:bb:50:98:74:27:24:56:c7:ef:25:23:0a:
                    37:0f:98:d5:2e:38:1a:6f:4a:77:78:92:3f:d4:d6:
                    6b:3a:93:25:19:bd:b7:e1:de:59:10:60:4d:2d:c5:
                    43:fc:a2:a4:82:48:dc:29:59:4f:14:cf:0a:a5:03:
                    3a:6a:af:50:e1:ea:e2:14:50:14:14:fc:65:a1:73:
                    4d:4c:f3:54:2a:87:95:12:21:f4:75:9b:5d:6c:9e:
                    a2:86:af:af:88:ef:68:37:2e:0c:87:8b:90:5e:c7:
                    ae:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:7D:23:53:C2:A0:8B:2A:8E:26:4F:F4:A6:19:F0:A9:82:EE:4C:FF
            X509v3 Authority Key Identifier:
                keyid:78:D0:E6:79:60:EF:76:CE:63:3C:9F:E6:77:4D:87:DB:69:B8:9B:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNDmeWDvds5jPJ_md02H22m4m3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/eb62f7-8bec-4fc9-94cb-9e169d5e0a58/1/eNDmeWDvds5jPJ_md02H22m4m3U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/eb62f7-8bec-4fc9-94cb-9e169d5e0a58/1/eNDmeWDvds5jPJ_md02H22m4m3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:f6:cb:b8:39:18:19:04:00:4f:db:9d:98:82:9d:0d:70:61:
         66:22:43:c9:26:d6:fc:41:3e:13:5e:8e:27:f7:f9:61:0c:a2:
         66:db:70:1c:62:5e:a5:99:21:90:11:04:0a:fb:75:8e:c0:af:
         58:20:d6:1c:6d:a3:32:fd:b5:e5:e8:24:f1:44:bc:33:7d:8c:
         fd:94:29:e7:15:94:a7:c1:8f:1e:18:ed:c2:19:fe:cf:b5:69:
         55:51:21:2b:cd:86:79:f4:80:68:91:c1:4f:da:4b:cb:a7:e2:
         86:31:b6:da:84:57:22:34:39:67:57:b9:ca:ba:85:e2:e6:d9:
         43:d3:48:46:6c:ee:22:d0:6f:c5:9c:b5:5c:b7:b8:00:47:48:
         96:e6:23:b5:44:9f:82:74:94:cf:73:71:22:df:ff:eb:49:21:
         4e:47:95:a1:5c:2e:6f:e7:15:59:5d:50:06:b1:05:33:ac:29:
         3b:d4:c4:07:48:d2:f6:4a:87:88:89:07:31:24:e9:60:8f:60:
         48:56:ed:22:84:3b:cc:49:fe:4c:ff:4e:72:d4:1b:fa:a9:cd:
         d4:f3:55:a5:18:d4:ca:10:f5:00:3a:14:62:01:b8:11:0d:bb:
         2b:47:32:fc:58:8a:b8:20:42:9f:81:24:c4:f9:e9:b4:e7:15:
         dc:b6:02:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:02:50 2025 by rpki-client