Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft
File:                     AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft (raw, json)
Hash identifier:          cLzvAhUFqj8n6WIoxIN9IWjbqcaRubnUeaZp+J2AqLg=
Subject key identifier:   57:EC:80:10:32:AF:79:50:6C:99:49:93:57:CF:56:D4:72:C1:64:01
Authority key identifier: 02:41:06:3B:2D:57:E4:EF:AE:F6:82:4F:62:3D:46:5A:1C:37:B8:43
Certificate issuer:       /CN=0241063b2d57e4efaef6824f623d465a1c37b843
Certificate serial:       0196A0897071F14D7DB7402803A527238994
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AkEGOy1X5O-u9oJPYj1GWhw3uEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft
Manifest number:          0C16
Signing time:             Mon 05 May 2025 13:01:23 +0000
Manifest this update:     Mon 05 May 2025 13:01:23 +0000
Manifest next update:     Tue 06 May 2025 13:01:23 +0000
Files and hashes:         1: AkEGOy1X5O-u9oJPYj1GWhw3uEM.crl (hash: f8Movb4gDeULe/cLnmb1hHtfiTntESjZGHynI3A2P4s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AkEGOy1X5O-u9oJPYj1GWhw3uEM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 13:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a0:89:70:71:f1:4d:7d:b7:40:28:03:a5:27:23:89:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0241063b2d57e4efaef6824f623d465a1c37b843
        Validity
            Not Before: May  5 13:01:23 2025 GMT
            Not After : May  6 13:01:23 2025 GMT
        Subject: CN=57ec801032af79506c99499357cf56d472c16401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:39:31:d7:84:29:1b:63:3b:10:c1:91:34:b0:
                    54:98:b4:d4:cb:df:1b:24:5d:4d:bc:c7:05:47:1d:
                    8f:12:4a:cc:de:b9:3d:73:f7:45:48:1f:ad:3f:94:
                    70:d1:f0:84:2d:ed:fb:e2:b7:74:66:bd:37:d5:18:
                    b5:cb:c1:1f:9c:b5:d9:95:a5:9b:33:84:a1:d4:a7:
                    6d:4b:ec:09:37:5f:71:de:37:a6:6b:e5:43:37:a0:
                    c7:17:ad:87:da:64:7b:fb:b1:b0:3b:fa:d6:b9:a1:
                    3d:16:3c:2d:82:66:87:b2:70:59:b3:3a:43:8f:f6:
                    d0:91:d2:5f:70:b1:2e:85:fa:15:ab:4e:10:0d:5e:
                    69:93:42:25:b5:d5:e7:28:82:31:36:6d:33:e0:26:
                    26:2d:3a:5e:f8:85:d4:29:d3:ae:63:3c:f6:ef:b5:
                    3c:91:61:f6:87:0e:ac:48:b4:f4:df:f1:25:a7:02:
                    a4:a2:d4:b7:34:35:aa:2c:ce:55:ff:19:ff:83:da:
                    34:37:92:8c:9e:98:51:3e:cd:09:5b:c0:bf:d6:b9:
                    3d:a3:15:d2:a2:f8:7a:68:ef:fa:e8:8d:2a:aa:9d:
                    f1:51:18:33:fb:45:ed:94:eb:c3:55:00:6d:3a:30:
                    5a:15:db:6d:71:f5:e8:c3:2e:25:57:9e:03:3f:5f:
                    d9:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:EC:80:10:32:AF:79:50:6C:99:49:93:57:CF:56:D4:72:C1:64:01
            X509v3 Authority Key Identifier:
                keyid:02:41:06:3B:2D:57:E4:EF:AE:F6:82:4F:62:3D:46:5A:1C:37:B8:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AkEGOy1X5O-u9oJPYj1GWhw3uEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:5f:56:ec:e9:11:fc:e6:98:4f:7d:26:29:1d:7c:58:fd:5b:
         eb:77:80:a2:a0:a9:2f:72:4d:36:88:da:23:a9:c9:54:d5:84:
         08:11:82:99:63:b6:dd:c8:4f:a2:7e:80:de:af:cd:6c:65:98:
         ef:57:37:8f:de:fb:75:cb:b1:db:b4:5a:3c:01:9d:29:c2:e1:
         16:6c:58:a8:38:34:b9:37:dd:a6:f1:1f:50:7a:a7:f6:db:e0:
         37:70:0a:cd:a9:b7:3d:94:b7:e1:a8:3d:ed:1b:65:86:4f:b1:
         dd:9f:52:3d:ab:98:fb:48:29:3a:8d:f4:fb:6e:31:ff:43:17:
         1b:8d:81:f6:a5:9a:d2:c5:48:2f:2a:e9:d4:cb:f1:ad:14:6f:
         ef:21:dd:fc:28:1a:75:c3:e3:e0:9d:97:fa:21:d2:bf:9e:e0:
         cb:6a:e1:ca:12:e4:dc:6a:9d:b3:29:fc:fc:2f:cb:56:ee:ed:
         33:a1:fc:6c:31:11:c7:a1:24:48:d4:b7:aa:1f:db:c0:c0:44:
         0b:4c:9c:25:4a:f4:cc:bc:a5:61:2a:91:f1:37:b4:7a:e4:ef:
         48:56:6d:d9:80:d5:70:14:8d:92:36:19:84:67:a0:14:7b:61:
         1f:ca:8f:f6:17:96:d3:45:0c:c9:1e:f2:a8:36:1d:2a:3c:49:
         57:61:df:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 23:09:20 2025 by rpki-client