Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/8d00c2-71db-4fee-b6cb-c75c6d20d32c/1/5cN18687kSQJ3YNgp0CRNVaTcUE.mft
File:                     5cN18687kSQJ3YNgp0CRNVaTcUE.mft (raw, json)
Hash identifier:          9tMUlHKxXByn6j2IqlAtOoMLyzeuChk3Zpgb5J21/Kk=
Subject key identifier:   D0:EC:C6:F3:4B:D2:ED:BD:CE:67:08:1A:7C:90:6B:97:36:78:1D:22
Authority key identifier: E5:C3:75:F3:AF:3B:91:24:09:DD:83:60:A7:40:91:35:56:93:71:41
Certificate issuer:       /CN=e5c375f3af3b912409dd8360a740913556937141
Certificate serial:       0196C0B85FDA5EDDD4C5504C324223C5B0C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5cN18687kSQJ3YNgp0CRNVaTcUE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/8d00c2-71db-4fee-b6cb-c75c6d20d32c/1/5cN18687kSQJ3YNgp0CRNVaTcUE.mft
Manifest number:          0472
Signing time:             Sun 11 May 2025 19:00:30 +0000
Manifest this update:     Sun 11 May 2025 19:00:30 +0000
Manifest next update:     Mon 12 May 2025 19:00:30 +0000
Files and hashes:         1: 5cN18687kSQJ3YNgp0CRNVaTcUE.crl (hash: PxBjPPYE2XwDe94g4xzuCB+SsVEES61vcbSzDM7Skes=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/8d00c2-71db-4fee-b6cb-c75c6d20d32c/1/5cN18687kSQJ3YNgp0CRNVaTcUE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/8d00c2-71db-4fee-b6cb-c75c6d20d32c/1/5cN18687kSQJ3YNgp0CRNVaTcUE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5cN18687kSQJ3YNgp0CRNVaTcUE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c0:b8:5f:da:5e:dd:d4:c5:50:4c:32:42:23:c5:b0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5c375f3af3b912409dd8360a740913556937141
        Validity
            Not Before: May 11 19:00:30 2025 GMT
            Not After : May 12 19:00:30 2025 GMT
        Subject: CN=d0ecc6f34bd2edbdce67081a7c906b9736781d22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:38:d8:5c:1c:36:29:54:06:c5:f6:77:cc:7c:
                    e6:68:1c:1a:7f:2e:70:76:59:16:ea:fb:9d:8b:24:
                    f5:0d:6e:6b:2f:e1:39:ec:ae:98:86:a6:d0:7b:aa:
                    aa:5e:0e:65:86:3f:92:2f:47:07:64:52:3d:b1:d9:
                    0b:18:8d:e7:67:65:f2:31:e1:ab:d1:e4:2f:40:9c:
                    85:fb:be:28:09:df:e5:3f:48:8f:f0:f5:0d:81:5b:
                    b4:f3:a7:85:b8:13:38:f6:1d:1c:3b:07:d1:e9:e0:
                    c2:b7:84:54:b8:e5:fa:77:a2:3b:0e:52:01:5d:39:
                    61:ff:5f:c7:54:61:e2:aa:5f:99:5c:47:36:05:25:
                    81:bf:da:92:41:e0:a8:9c:db:6b:c8:28:be:ce:2f:
                    41:22:da:16:e1:a1:8a:94:60:55:98:28:e0:e7:a3:
                    96:11:ab:91:58:80:30:4b:6a:bf:4f:78:f6:7e:53:
                    bd:c6:dc:36:42:23:3b:f4:e3:90:d2:ee:97:aa:4d:
                    f8:ac:c1:e8:82:06:47:47:4e:cc:d4:68:6f:46:51:
                    73:98:f3:c7:73:b5:5d:22:b0:bc:1d:58:c3:a1:82:
                    2d:3e:47:a1:23:0d:1d:64:41:01:08:bf:c4:c3:f3:
                    6b:b5:0f:6d:c0:7a:fb:3c:fa:93:1c:7c:2f:1c:33:
                    11:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:EC:C6:F3:4B:D2:ED:BD:CE:67:08:1A:7C:90:6B:97:36:78:1D:22
            X509v3 Authority Key Identifier:
                keyid:E5:C3:75:F3:AF:3B:91:24:09:DD:83:60:A7:40:91:35:56:93:71:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cN18687kSQJ3YNgp0CRNVaTcUE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/8d00c2-71db-4fee-b6cb-c75c6d20d32c/1/5cN18687kSQJ3YNgp0CRNVaTcUE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/8d00c2-71db-4fee-b6cb-c75c6d20d32c/1/5cN18687kSQJ3YNgp0CRNVaTcUE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:52:7f:85:7c:85:4d:fb:2a:5b:04:37:7b:99:0a:d9:0d:39:
         35:80:46:2e:45:22:42:3e:7c:19:4b:9d:35:d8:6e:9d:49:32:
         5a:7e:5d:8f:d4:fd:d8:b1:50:18:32:2d:58:db:6c:cb:0a:10:
         bb:18:d8:a4:83:56:83:22:81:82:5f:06:a4:3f:fd:80:34:c8:
         82:8c:b0:bd:7a:1c:15:d1:e5:3a:8b:10:b7:49:2f:54:9a:d8:
         b3:2a:a7:e8:9a:b8:a6:0e:e6:5d:9a:6e:a1:e8:28:b3:46:08:
         00:24:55:20:82:c8:9b:3e:54:98:7a:f4:f5:6d:31:3b:36:62:
         60:c8:6e:39:cf:a0:9d:e6:61:c2:ca:18:83:0a:99:f1:ba:82:
         f1:9e:90:0e:38:71:35:a7:89:8d:7d:37:20:68:bc:6f:3d:85:
         04:23:14:60:a3:13:f6:29:fd:a2:9e:91:1f:29:05:84:d6:86:
         06:e7:d7:63:69:0e:c3:6c:2b:d8:7a:90:01:32:5f:cb:7c:3d:
         09:a8:c1:25:07:d2:0a:a1:f4:0c:ea:fa:58:23:b2:c1:7a:28:
         cc:c6:a9:f5:f1:18:27:1e:0d:a2:8a:d3:c1:92:67:b4:8d:31:
         f3:9d:32:d7:3c:ed:7c:4c:b2:86:09:5d:52:a4:20:fa:9a:07:
         80:af:1d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 23:08:15 2025 by rpki-client