Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.mft
File:                     tt41SvltyILzXBLU9fpnUHY6tyA.mft (raw, json)
Hash identifier:          mDzqf+43EpNWJw/YoNxr34DHd26eLBjmhm6VFd/QlSA=
Subject key identifier:   E3:F2:03:80:AF:A5:A5:CC:39:21:52:B2:10:55:09:DF:68:EC:CF:E7
Authority key identifier: B6:DE:35:4A:F9:6D:C8:82:F3:5C:12:D4:F5:FA:67:50:76:3A:B7:20
Certificate issuer:       /CN=b6de354af96dc882f35c12d4f5fa6750763ab720
Certificate serial:       0196CB0594B21C1A16B50653F6741330390D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tt41SvltyILzXBLU9fpnUHY6tyA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.mft
Manifest number:          0C61
Signing time:             Tue 13 May 2025 19:01:02 +0000
Manifest this update:     Tue 13 May 2025 19:01:02 +0000
Manifest next update:     Wed 14 May 2025 19:01:02 +0000
Files and hashes:         1: tt41SvltyILzXBLU9fpnUHY6tyA.crl (hash: XNCJMkl3OteZjnSVSvYrMF3eO9rBeJm3qSXqd9P39EY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tt41SvltyILzXBLU9fpnUHY6tyA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 19:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cb:05:94:b2:1c:1a:16:b5:06:53:f6:74:13:30:39:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6de354af96dc882f35c12d4f5fa6750763ab720
        Validity
            Not Before: May 13 19:01:02 2025 GMT
            Not After : May 14 19:01:02 2025 GMT
        Subject: CN=e3f20380afa5a5cc392152b2105509df68eccfe7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:97:a0:4c:3e:bb:84:1a:3c:27:5c:86:80:86:
                    01:6e:10:3d:5b:9a:75:3d:15:da:fd:c0:5e:7d:e1:
                    14:46:2b:05:85:5e:88:b3:db:66:be:cf:e5:dd:38:
                    80:8c:b9:c2:fa:3d:be:07:8b:d6:f2:e5:85:05:c3:
                    bd:7d:04:45:93:58:32:d6:50:7b:4e:6d:0f:e8:c2:
                    fc:15:74:11:4e:69:6c:20:2b:40:c4:d5:7b:ec:ab:
                    50:26:19:14:d5:f9:31:60:f3:f5:16:98:57:48:36:
                    de:30:10:b8:a8:d0:bf:da:1b:ec:48:71:34:59:cc:
                    24:5c:e7:4b:ed:6f:ce:a8:12:32:21:3e:ad:9a:d6:
                    93:d1:17:c9:71:3f:d6:ec:4b:5c:6e:c3:83:6c:80:
                    87:50:99:b6:ee:82:16:63:5c:b9:9b:28:35:10:91:
                    39:55:aa:10:80:a1:c9:a3:a2:e5:36:b5:c0:b3:f3:
                    e7:bc:e4:1f:c2:d1:6a:ea:5c:ce:68:fe:d9:3f:32:
                    1e:2b:09:9b:e8:c8:ea:fd:b1:80:1c:d1:44:3f:55:
                    90:b6:c4:3a:e0:52:2f:1c:c6:a5:ee:a4:b5:80:ba:
                    b8:50:b6:62:c2:6c:6d:fe:7e:ec:50:05:5b:04:68:
                    54:b0:45:40:74:e5:91:7a:89:b3:d0:51:1e:49:40:
                    f1:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:F2:03:80:AF:A5:A5:CC:39:21:52:B2:10:55:09:DF:68:EC:CF:E7
            X509v3 Authority Key Identifier:
                keyid:B6:DE:35:4A:F9:6D:C8:82:F3:5C:12:D4:F5:FA:67:50:76:3A:B7:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tt41SvltyILzXBLU9fpnUHY6tyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:92:fa:0c:d6:27:1f:28:70:15:e2:f4:8e:d8:92:9c:d2:19:
         d5:b1:84:81:da:7a:5a:38:39:ee:35:16:95:dd:56:37:8e:b6:
         fd:de:ce:12:87:41:27:6f:3e:d3:f1:8e:d6:b8:2b:2e:d7:01:
         51:36:96:1d:ac:e4:3b:18:99:3b:d2:f3:61:0a:5d:3d:11:7b:
         18:c2:ea:4d:e6:cc:c3:bb:3b:fa:66:11:f1:f9:f5:72:2c:85:
         31:f4:1c:47:b3:e0:c4:61:9b:5e:47:31:65:93:67:0d:11:3e:
         ad:c4:21:fe:54:d9:8f:a9:aa:9c:56:60:dd:79:71:91:04:b0:
         b1:b1:df:39:35:d1:5c:99:a6:60:ab:fa:f7:e5:73:eb:b3:8a:
         51:9f:46:de:81:f1:3a:97:6a:06:f1:48:7b:a2:72:0a:66:71:
         2d:9a:b4:8d:5d:a4:62:cc:56:05:97:2e:cd:e5:b5:d2:82:03:
         43:75:3e:30:1e:bf:18:9d:6e:3b:08:19:d2:23:bd:4c:de:ac:
         a9:61:3f:6b:12:e8:f0:fc:1c:56:e4:84:f4:55:ca:a6:43:11:
         0b:46:42:bb:70:39:0f:b8:26:fe:92:f5:b6:6e:1d:42:7f:dc:
         b4:92:6c:50:ff:cc:16:7a:6d:3e:c1:4e:98:10:e0:b9:1b:7f:
         07:8e:bd:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 06:01:45 2025 by rpki-client