Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/uo1nmL3QsriAXUOzRV92c5uUbx0.mft
File:                     uo1nmL3QsriAXUOzRV92c5uUbx0.mft (raw, json)
Hash identifier:          rlts5ZcrJXltMMGEvyMojacug0S7RpJEugSDp2N3KcM=
Subject key identifier:   67:C2:0F:CA:09:02:F6:F6:52:51:8A:77:E9:60:2F:9C:27:5A:53:51
Authority key identifier: BA:8D:67:98:BD:D0:B2:B8:80:5D:43:B3:45:5F:76:73:9B:94:6F:1D
Certificate issuer:       /CN=ba8d6798bdd0b2b8805d43b3455f76739b946f1d
Certificate serial:       019641E8C54A2EB5EB2D7AD15E587ED238E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uo1nmL3QsriAXUOzRV92c5uUbx0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/uo1nmL3QsriAXUOzRV92c5uUbx0.mft
Manifest number:          1483
Signing time:             Thu 17 Apr 2025 04:01:35 +0000
Manifest this update:     Thu 17 Apr 2025 04:01:35 +0000
Manifest next update:     Fri 18 Apr 2025 04:01:35 +0000
Files and hashes:         1: uo1nmL3QsriAXUOzRV92c5uUbx0.crl (hash: E+gpBo11zUSWmzMEsM8b7pihaZACI4ZSG3+0HP1ptfI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/uo1nmL3QsriAXUOzRV92c5uUbx0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/uo1nmL3QsriAXUOzRV92c5uUbx0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uo1nmL3QsriAXUOzRV92c5uUbx0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:41:e8:c5:4a:2e:b5:eb:2d:7a:d1:5e:58:7e:d2:38:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba8d6798bdd0b2b8805d43b3455f76739b946f1d
        Validity
            Not Before: Apr 17 04:01:35 2025 GMT
            Not After : Apr 18 04:01:35 2025 GMT
        Subject: CN=67c20fca0902f6f652518a77e9602f9c275a5351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c9:1f:8a:ba:27:24:08:22:7b:18:2d:ac:b4:
                    18:f9:4a:6a:f3:0c:dd:bf:d2:9a:b5:bf:0a:49:73:
                    f5:f5:af:c6:7c:5f:42:e2:91:46:ba:0b:ce:0e:1f:
                    d2:4e:70:a2:e6:28:b3:34:96:ca:b8:04:65:42:35:
                    32:90:22:6d:66:7b:a7:87:55:b7:2a:42:33:4c:53:
                    f6:99:35:f7:6f:4b:21:39:9a:5a:6f:36:15:92:a6:
                    46:df:16:10:37:d4:19:78:74:cd:27:f5:5c:24:3b:
                    70:96:ff:6f:1a:a1:8e:bd:0e:90:f4:da:e9:24:10:
                    10:29:23:71:b0:1c:c2:a6:ad:d3:79:9d:62:66:64:
                    23:d8:a9:9a:30:36:73:18:68:c8:85:41:4c:e9:90:
                    12:5f:2f:e1:bf:a4:de:c4:30:e6:aa:b2:25:0e:a4:
                    fc:e7:ed:42:3b:4a:9d:5f:eb:68:0f:74:53:93:1c:
                    6c:14:86:c8:19:9b:97:e2:ad:73:03:ba:77:97:13:
                    1a:12:27:09:29:5c:ce:f6:a1:18:3c:bf:e0:99:60:
                    74:87:9a:bd:d2:fb:df:93:2e:45:26:ca:a0:f1:8e:
                    9a:16:26:68:25:d6:5f:78:e4:83:36:e3:90:78:09:
                    3f:89:54:2a:71:ca:7c:88:00:13:37:85:8b:a3:14:
                    f6:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:C2:0F:CA:09:02:F6:F6:52:51:8A:77:E9:60:2F:9C:27:5A:53:51
            X509v3 Authority Key Identifier:
                keyid:BA:8D:67:98:BD:D0:B2:B8:80:5D:43:B3:45:5F:76:73:9B:94:6F:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uo1nmL3QsriAXUOzRV92c5uUbx0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/uo1nmL3QsriAXUOzRV92c5uUbx0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/uo1nmL3QsriAXUOzRV92c5uUbx0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:79:a2:43:66:7d:39:ae:1d:03:20:cb:0b:6d:f5:75:87:48:
         e6:19:03:03:e1:0c:e9:46:3c:b7:4e:13:48:df:e2:8d:87:57:
         0d:47:82:10:b7:8a:60:d3:7a:38:d2:19:f4:36:85:66:08:1f:
         f8:32:80:0f:2a:8f:8b:03:05:2a:65:68:61:60:f6:a7:c6:b8:
         e1:f1:74:a9:f9:d4:97:a7:9c:4f:71:21:41:fc:b6:98:ea:4e:
         1a:d4:34:31:d4:5e:cb:4d:22:1d:88:94:63:03:c3:c1:12:84:
         e7:6d:40:4e:29:22:36:07:94:16:49:c9:ef:38:c3:cc:a0:12:
         75:24:24:43:67:b6:47:34:e2:b1:1a:af:90:7f:5f:9c:eb:30:
         02:cb:e4:ba:df:76:29:8b:f1:db:81:76:6a:64:3f:a8:54:06:
         87:25:fb:d0:1f:de:3b:af:27:f3:40:bc:9f:03:c2:bc:83:b9:
         2e:50:bc:52:4d:6c:75:d1:d7:c1:fe:2a:35:72:32:83:46:90:
         a1:b3:69:19:4b:7d:cc:8e:c4:d7:95:31:8a:a7:53:f2:9e:98:
         29:94:b6:25:70:5a:73:f3:45:e4:4c:4b:8b:9a:32:f0:13:69:
         3a:60:eb:d6:be:d1:1a:19:f0:6e:08:60:da:ba:2d:59:d9:55:
         73:8f:a3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:57:08 2025 by rpki-client