Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/0d0724-55f5-4755-99c2-612651ae3eb3/1/Htw6l_HMrvfxCGmRz3sQpBDOGUI.mft
File:                     Htw6l_HMrvfxCGmRz3sQpBDOGUI.mft (raw, json)
Hash identifier:          X80a/GnqLqmpwCnRlzlX0DUlCnYL/Pia9M0MzsPOTW0=
Subject key identifier:   86:2B:F6:0E:68:5E:B4:12:95:A2:85:C7:04:B5:64:F7:7E:A4:A5:05
Authority key identifier: 1E:DC:3A:97:F1:CC:AE:F7:F1:08:69:91:CF:7B:10:A4:10:CE:19:42
Certificate issuer:       /CN=1edc3a97f1ccaef7f1086991cf7b10a410ce1942
Certificate serial:       0196AF56E86FA56562ED0010121831167770
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Htw6l_HMrvfxCGmRz3sQpBDOGUI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/0d0724-55f5-4755-99c2-612651ae3eb3/1/Htw6l_HMrvfxCGmRz3sQpBDOGUI.mft
Manifest number:          143F
Signing time:             Thu 08 May 2025 10:00:30 +0000
Manifest this update:     Thu 08 May 2025 10:00:30 +0000
Manifest next update:     Fri 09 May 2025 10:00:30 +0000
Files and hashes:         1: Htw6l_HMrvfxCGmRz3sQpBDOGUI.crl (hash: lbVMUCvPwG/asd3/o9UjQXAA/14wZZETjMxDQMz4eWU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/0d0724-55f5-4755-99c2-612651ae3eb3/1/Htw6l_HMrvfxCGmRz3sQpBDOGUI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/0d0724-55f5-4755-99c2-612651ae3eb3/1/Htw6l_HMrvfxCGmRz3sQpBDOGUI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Htw6l_HMrvfxCGmRz3sQpBDOGUI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:af:56:e8:6f:a5:65:62:ed:00:10:12:18:31:16:77:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1edc3a97f1ccaef7f1086991cf7b10a410ce1942
        Validity
            Not Before: May  8 10:00:30 2025 GMT
            Not After : May  9 10:00:30 2025 GMT
        Subject: CN=862bf60e685eb41295a285c704b564f77ea4a505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:d2:09:24:e6:13:e6:40:56:89:dc:95:04:a3:
                    92:a4:4e:3b:c3:5a:ee:b7:ca:32:e7:14:0e:7f:97:
                    1a:86:49:7d:39:e1:31:60:61:56:6a:02:96:b4:53:
                    4c:ee:79:ba:54:06:30:c8:99:13:ae:15:6e:11:39:
                    74:15:b4:14:d3:3b:4e:ce:26:11:57:bf:5d:53:5d:
                    84:86:50:c7:0c:25:fa:e6:a6:d1:5c:59:a9:85:89:
                    76:a4:0e:b2:de:d6:9f:12:53:17:57:73:ec:b2:47:
                    8d:17:bd:e8:f2:f0:63:af:5d:4d:30:c5:e0:6f:53:
                    32:a4:e4:93:5d:79:9d:0f:29:23:cd:ae:0b:f6:a6:
                    e5:fe:bb:77:0b:70:6d:41:96:86:4c:bb:ab:32:de:
                    76:b3:26:60:ff:20:82:d1:af:99:a9:21:fc:5e:48:
                    82:1e:6e:b7:d1:0a:2f:e0:78:b4:5c:82:7a:0a:e6:
                    88:9a:7d:85:57:09:aa:32:b4:c5:cb:90:53:7d:51:
                    ea:da:21:6e:e9:1c:9d:de:70:37:12:29:d7:f6:86:
                    eb:f6:20:31:63:17:8c:83:4b:e1:d5:10:61:2a:59:
                    38:05:00:1f:4e:cb:24:e2:b7:78:3e:ee:ea:19:38:
                    a0:4c:2e:13:6c:8f:97:c9:5a:cf:fb:c9:54:7d:3e:
                    a7:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:2B:F6:0E:68:5E:B4:12:95:A2:85:C7:04:B5:64:F7:7E:A4:A5:05
            X509v3 Authority Key Identifier:
                keyid:1E:DC:3A:97:F1:CC:AE:F7:F1:08:69:91:CF:7B:10:A4:10:CE:19:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Htw6l_HMrvfxCGmRz3sQpBDOGUI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/0d0724-55f5-4755-99c2-612651ae3eb3/1/Htw6l_HMrvfxCGmRz3sQpBDOGUI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/0d0724-55f5-4755-99c2-612651ae3eb3/1/Htw6l_HMrvfxCGmRz3sQpBDOGUI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:05:30:f3:a6:49:dc:da:3b:49:f4:d0:b5:33:a9:72:99:ea:
         69:f8:22:3d:34:5e:30:65:6e:74:95:32:54:84:43:29:18:e8:
         c6:2b:13:25:2f:48:a2:18:4c:19:8d:0b:49:83:fe:f4:95:d8:
         ad:50:ea:57:bf:60:50:ab:ae:5c:55:d2:c5:2b:15:68:08:63:
         96:a0:1d:1a:b9:16:00:4c:c9:3c:57:09:3f:ef:6a:9c:c8:ca:
         1e:46:a3:a5:f0:02:c8:2a:31:8c:21:79:f0:c6:87:90:a6:c8:
         d7:61:a2:4c:f2:2f:54:62:43:3c:e8:c5:11:c8:fd:a4:52:27:
         74:dc:cd:e1:8f:cd:bf:e4:8d:2a:41:9b:bf:d4:3b:0b:ad:66:
         04:01:e5:a3:f5:c4:ea:c3:d0:64:9a:28:56:58:ec:7f:4d:ce:
         15:19:7c:b5:2a:63:49:18:d0:77:ec:52:bb:ba:d8:fc:d7:10:
         81:f8:c4:3d:0b:ec:6c:b8:4e:b6:6b:97:1e:1a:4f:df:a8:a4:
         19:2e:93:08:a4:45:17:25:11:24:32:94:5f:17:7f:b8:e3:5c:
         48:c2:b9:dc:bf:c3:90:d3:a7:01:ec:e0:5b:4b:a0:06:87:1a:
         e0:c6:6c:6b:02:b3:6b:11:f2:cb:8e:fa:97:5b:26:fd:aa:cf:
         04:85:69:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 14:57:11 2025 by rpki-client