Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/881543-2b29-4487-ba54-610da78be598/1/_mHZDno6nbbaJtAfLNuiI1G0eXg.mft
File:                     _mHZDno6nbbaJtAfLNuiI1G0eXg.mft (raw, json)
Hash identifier:          vjY0hJRE7f8z7TGnaVNT1szJ7ADLHs1SNktjWPUSRAI=
Subject key identifier:   53:CB:6B:96:41:1E:79:1D:9C:D5:2D:E0:29:76:6E:00:A0:A8:E3:60
Authority key identifier: FE:61:D9:0E:7A:3A:9D:B6:DA:26:D0:1F:2C:DB:A2:23:51:B4:79:78
Certificate issuer:       /CN=fe61d90e7a3a9db6da26d01f2cdba22351b47978
Certificate serial:       01965FBBF6BCC1AB2F755A484F3FAA33354E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_mHZDno6nbbaJtAfLNuiI1G0eXg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/881543-2b29-4487-ba54-610da78be598/1/_mHZDno6nbbaJtAfLNuiI1G0eXg.mft
Manifest number:          083B
Signing time:             Tue 22 Apr 2025 23:01:15 +0000
Manifest this update:     Tue 22 Apr 2025 23:01:15 +0000
Manifest next update:     Wed 23 Apr 2025 23:01:15 +0000
Files and hashes:         1: _mHZDno6nbbaJtAfLNuiI1G0eXg.crl (hash: CMQTOaFXVHJjpuFAImz/yFTn2779jcYDFcDZpxM2TWI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/881543-2b29-4487-ba54-610da78be598/1/_mHZDno6nbbaJtAfLNuiI1G0eXg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/881543-2b29-4487-ba54-610da78be598/1/_mHZDno6nbbaJtAfLNuiI1G0eXg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_mHZDno6nbbaJtAfLNuiI1G0eXg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Apr 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:5f:bb:f6:bc:c1:ab:2f:75:5a:48:4f:3f:aa:33:35:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe61d90e7a3a9db6da26d01f2cdba22351b47978
        Validity
            Not Before: Apr 22 23:01:15 2025 GMT
            Not After : Apr 23 23:01:15 2025 GMT
        Subject: CN=53cb6b96411e791d9cd52de029766e00a0a8e360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:08:73:c3:52:a7:0f:dc:a6:73:f9:79:23:c6:
                    08:3b:47:9e:0f:e0:50:55:f6:c1:b2:88:96:09:08:
                    95:41:45:f6:fa:7c:9d:0e:54:d3:72:ab:dc:82:f4:
                    61:9d:b6:c3:db:2c:fc:2a:40:ea:8b:23:2c:cc:c8:
                    62:b3:24:74:8e:6c:82:5d:16:88:f0:7f:56:25:68:
                    08:61:38:30:b5:71:fd:eb:f1:00:73:a6:79:49:28:
                    6b:33:68:96:9f:ed:8a:20:10:80:05:35:78:bb:c1:
                    0b:36:5b:b0:29:a4:ff:d6:ca:51:9e:9f:04:21:57:
                    22:a9:ff:f1:bf:91:a7:63:b6:dd:a6:7e:ee:5c:7e:
                    12:a9:87:54:35:c1:8b:e8:b8:98:a8:87:c6:e2:08:
                    83:8f:e6:c9:aa:ed:63:bf:fe:2e:11:88:85:c7:16:
                    3c:5a:8f:42:41:21:80:8d:77:ea:44:14:93:d8:ea:
                    3c:e5:62:b5:a0:11:44:be:d9:b8:04:ec:f8:b6:0b:
                    26:fb:06:73:20:11:1c:0e:02:fc:55:ea:5d:d7:da:
                    d2:28:9c:b4:69:98:c8:74:c0:6a:6b:fd:5c:72:f7:
                    e7:06:ff:05:62:29:e0:00:83:54:6b:d7:28:3c:80:
                    ab:56:cc:da:c0:96:52:af:b7:a2:08:b0:d9:5f:ee:
                    65:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:CB:6B:96:41:1E:79:1D:9C:D5:2D:E0:29:76:6E:00:A0:A8:E3:60
            X509v3 Authority Key Identifier:
                keyid:FE:61:D9:0E:7A:3A:9D:B6:DA:26:D0:1F:2C:DB:A2:23:51:B4:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_mHZDno6nbbaJtAfLNuiI1G0eXg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/881543-2b29-4487-ba54-610da78be598/1/_mHZDno6nbbaJtAfLNuiI1G0eXg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/881543-2b29-4487-ba54-610da78be598/1/_mHZDno6nbbaJtAfLNuiI1G0eXg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:1c:a0:c7:dd:92:55:dc:33:e1:a2:64:39:6d:9c:19:25:4d:
         a1:ce:d2:cf:fc:54:0f:b9:c8:08:bf:3e:c0:9c:b8:88:14:97:
         3a:58:b4:b9:b4:cb:83:b5:5e:78:45:e1:d3:ad:51:e8:00:99:
         d8:f2:54:f6:c4:c5:5f:3f:97:06:c7:86:c1:ed:82:e5:68:47:
         b5:eb:a1:4f:65:21:12:b9:20:e4:07:81:29:68:71:e0:df:58:
         b1:32:43:6c:27:9a:56:db:32:c3:5f:ba:cb:60:15:46:4a:d5:
         e2:d6:92:bd:78:e1:0c:3a:ef:86:7e:ce:13:ff:9a:d5:dd:b6:
         34:28:36:b4:79:8e:ce:41:25:30:0b:19:df:e8:dc:3d:f0:6c:
         0d:33:e0:b3:1a:02:f7:1c:f9:cb:52:18:de:60:8e:2d:d8:ef:
         05:7d:2f:0a:0e:ae:8c:a8:4e:24:85:e5:6d:49:53:e4:29:1b:
         b4:50:0e:bd:26:7a:32:ce:da:d5:9c:a8:1c:8a:ca:b3:ff:38:
         04:ed:87:fa:be:4f:fd:16:7f:60:cf:6b:82:cf:26:ce:91:04:
         28:2e:1d:a6:3d:53:4b:1d:fc:27:3b:20:d8:17:41:6c:3f:d3:
         d3:d5:a2:49:2c:63:83:32:fd:e5:b5:11:58:96:3f:fb:0b:47:
         63:b4:4f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 06:56:55 2025 by rpki-client