Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/b47bda-65b6-4a42-990f-024935ddb8c6/1/5e_Rhp7q_m-fA8s0GGibywxpE3A.mft
File:                     5e_Rhp7q_m-fA8s0GGibywxpE3A.mft (raw, json)
Hash identifier:          xRRrIo9Nqpw31zKuY1TIVMunPtaVGYrO4Mb43jMykGE=
Subject key identifier:   61:EC:15:B8:B7:A8:06:E4:34:64:C5:D8:82:27:8F:B9:7B:D1:F4:C6
Authority key identifier: E5:EF:D1:86:9E:EA:FE:6F:9F:03:CB:34:18:68:9B:CB:0C:69:13:70
Certificate issuer:       /CN=e5efd1869eeafe6f9f03cb3418689bcb0c691370
Certificate serial:       0196A27706194281EC82B371B1427650F331
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5e_Rhp7q_m-fA8s0GGibywxpE3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/b47bda-65b6-4a42-990f-024935ddb8c6/1/5e_Rhp7q_m-fA8s0GGibywxpE3A.mft
Manifest number:          0F41
Signing time:             Mon 05 May 2025 22:00:31 +0000
Manifest this update:     Mon 05 May 2025 22:00:31 +0000
Manifest next update:     Tue 06 May 2025 22:00:31 +0000
Files and hashes:         1: 5e_Rhp7q_m-fA8s0GGibywxpE3A.crl (hash: HaFTzQw6b1Dh5MIam3+DjOolX+pYJa4gcNc0tMkbcNE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/b47bda-65b6-4a42-990f-024935ddb8c6/1/5e_Rhp7q_m-fA8s0GGibywxpE3A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/b47bda-65b6-4a42-990f-024935ddb8c6/1/5e_Rhp7q_m-fA8s0GGibywxpE3A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5e_Rhp7q_m-fA8s0GGibywxpE3A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a2:77:06:19:42:81:ec:82:b3:71:b1:42:76:50:f3:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5efd1869eeafe6f9f03cb3418689bcb0c691370
        Validity
            Not Before: May  5 22:00:31 2025 GMT
            Not After : May  6 22:00:31 2025 GMT
        Subject: CN=61ec15b8b7a806e43464c5d882278fb97bd1f4c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:53:b5:a7:4c:86:02:0b:98:11:d0:ba:d1:53:
                    27:40:a1:03:d4:74:ef:b2:78:ba:2e:95:d1:0b:fb:
                    af:8b:04:c9:34:c1:2a:3c:6f:4a:80:3e:e0:fa:a4:
                    fa:18:a4:08:ab:f6:c8:28:28:1c:c6:17:29:f1:f1:
                    32:ac:ff:0b:e4:bf:1c:c9:d7:84:9f:14:a0:3a:f0:
                    d9:9f:8b:77:a6:24:52:3b:c7:df:6f:a4:dc:bc:3b:
                    6d:b5:f5:94:45:a6:8e:3a:ff:2c:85:9a:51:62:79:
                    8d:ca:11:9c:a0:35:71:e4:08:ba:89:eb:81:20:4f:
                    57:fd:ed:ec:45:f4:1f:ad:2e:ae:17:78:56:a4:c3:
                    6c:15:d8:1c:9a:87:f8:b5:6f:6e:0a:55:ff:22:97:
                    b5:1e:80:0b:d1:d5:48:fa:b8:0c:49:de:c0:30:0f:
                    07:b8:35:fa:69:e9:c7:ed:d2:38:27:d4:1d:21:8a:
                    3a:f4:fd:77:a1:d5:cc:c9:e1:88:bf:f0:07:4a:81:
                    f3:e8:3b:98:a5:5b:47:3b:f6:85:68:b9:17:9c:8f:
                    d1:2a:ab:51:74:a0:df:39:59:32:ab:13:0d:fe:9b:
                    7d:dc:c9:f5:4a:9a:30:00:25:de:5b:93:ed:cb:dd:
                    cd:b2:87:01:67:61:d8:55:e2:5e:01:a7:e0:3f:ac:
                    e7:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:EC:15:B8:B7:A8:06:E4:34:64:C5:D8:82:27:8F:B9:7B:D1:F4:C6
            X509v3 Authority Key Identifier:
                keyid:E5:EF:D1:86:9E:EA:FE:6F:9F:03:CB:34:18:68:9B:CB:0C:69:13:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e_Rhp7q_m-fA8s0GGibywxpE3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/b47bda-65b6-4a42-990f-024935ddb8c6/1/5e_Rhp7q_m-fA8s0GGibywxpE3A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/b47bda-65b6-4a42-990f-024935ddb8c6/1/5e_Rhp7q_m-fA8s0GGibywxpE3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:de:63:e4:0d:97:7e:e1:9b:54:5e:4d:a6:59:49:fc:f1:1a:
         eb:f7:45:d2:2c:1c:40:9e:cf:77:b6:55:1d:87:85:7f:f9:22:
         79:09:c5:55:9c:63:aa:76:6f:49:c7:ea:48:55:8a:ce:75:9a:
         4c:ee:16:08:db:db:23:79:05:bd:39:4c:13:58:c2:45:b9:04:
         50:ef:12:56:e8:ed:7c:36:1a:df:50:44:86:ff:97:d5:90:f8:
         9f:e1:6b:b8:01:a5:1d:7f:4d:2c:c5:60:1a:3e:92:12:25:f4:
         97:83:62:34:b0:a7:e2:e3:b6:45:0c:27:61:88:6d:42:33:c9:
         44:b7:9f:64:60:09:1c:60:b3:d8:ce:93:bc:6d:a3:16:a8:17:
         b9:29:6f:45:c8:ca:c8:e5:52:10:bc:1d:bb:c4:df:fa:c7:54:
         f5:8d:fe:70:d4:48:df:7e:6e:77:dc:f4:25:5d:e1:7d:af:dd:
         9d:cc:0c:86:7e:ee:03:f4:8c:b4:6d:fe:1b:44:c9:c0:58:fa:
         fc:78:76:e6:6a:05:85:6f:c6:ed:15:d4:2a:e5:01:6f:26:63:
         29:71:03:81:6e:d8:a8:29:06:cd:aa:92:97:07:11:93:30:a3:
         71:ed:94:64:47:63:be:31:6e:43:34:05:39:44:e7:36:49:ab:
         fc:09:bb:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 04:25:04 2025 by rpki-client