Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.mft
File:                     zEHDryzVmGV10bz2Xsnod2Zu3jY.mft (raw, json)
Hash identifier:          YTyey1T38Lev8edTFMmk1tmFBIRqCSZImCNKXOGXhIk=
Subject key identifier:   CB:A6:B4:9E:E3:94:23:F7:22:EB:4B:19:02:FB:25:8B:26:A5:35:EF
Authority key identifier: CC:41:C3:AF:2C:D5:98:65:75:D1:BC:F6:5E:C9:E8:77:66:6E:DE:36
Certificate issuer:       /CN=cc41c3af2cd5986575d1bcf65ec9e877666ede36
Certificate serial:       0196A0899F67371B46934C77091897F2A710
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zEHDryzVmGV10bz2Xsnod2Zu3jY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.mft
Manifest number:          11B6
Signing time:             Mon 05 May 2025 13:01:35 +0000
Manifest this update:     Mon 05 May 2025 13:01:35 +0000
Manifest next update:     Tue 06 May 2025 13:01:35 +0000
Files and hashes:         1: zEHDryzVmGV10bz2Xsnod2Zu3jY.crl (hash: Yc5SCeFr6oInQt1fYGOskav85jH2rnRwzJ04ebTzgFI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zEHDryzVmGV10bz2Xsnod2Zu3jY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a0:89:9f:67:37:1b:46:93:4c:77:09:18:97:f2:a7:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc41c3af2cd5986575d1bcf65ec9e877666ede36
        Validity
            Not Before: May  5 13:01:35 2025 GMT
            Not After : May  6 13:01:35 2025 GMT
        Subject: CN=cba6b49ee39423f722eb4b1902fb258b26a535ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:2b:34:be:4e:0b:14:36:83:2d:b6:28:0b:69:
                    1e:3a:55:92:81:2f:c0:b1:93:16:b2:28:ba:86:09:
                    10:07:7e:60:65:3d:87:ea:1e:e5:3a:53:18:eb:45:
                    82:9a:2d:33:7b:f0:0a:6d:69:f0:3c:77:2d:be:79:
                    8e:e2:3f:8e:0f:b0:14:f7:ea:82:5d:81:37:f9:a4:
                    2e:1c:0b:32:17:d8:7e:4e:cf:f7:6d:51:5f:e0:a3:
                    4f:b2:d7:93:85:3b:2b:a8:ff:61:66:2d:10:63:42:
                    12:4e:d9:57:55:13:33:0c:7d:47:cf:1f:c1:e0:84:
                    aa:e6:18:c0:d4:b0:ad:12:b1:99:9e:ad:27:cb:fa:
                    aa:1d:e9:90:14:74:a9:b5:b9:a3:1f:35:4c:e8:05:
                    d3:a2:e1:11:ce:63:47:66:e8:93:6e:f8:ef:b6:30:
                    45:0d:8d:34:c1:5d:c7:c2:d4:2e:d5:23:13:77:28:
                    b9:c7:2d:5f:dc:99:c7:2f:ab:b7:fc:c6:4d:a5:69:
                    3d:6e:dd:86:83:22:d8:7d:8f:d4:65:f4:c6:07:77:
                    33:52:e6:b8:43:1e:cd:b5:81:4a:3e:cf:24:8f:5e:
                    45:5e:c3:de:15:b1:b0:de:79:3c:86:84:97:69:c7:
                    9c:0e:a8:1f:18:88:0d:8a:04:09:96:63:dd:40:d5:
                    69:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:A6:B4:9E:E3:94:23:F7:22:EB:4B:19:02:FB:25:8B:26:A5:35:EF
            X509v3 Authority Key Identifier:
                keyid:CC:41:C3:AF:2C:D5:98:65:75:D1:BC:F6:5E:C9:E8:77:66:6E:DE:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEHDryzVmGV10bz2Xsnod2Zu3jY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:c6:36:60:a4:93:03:2d:e8:2e:ac:c0:6f:68:bf:69:ea:cb:
         8a:61:8f:b8:da:01:5f:3f:24:98:e9:1e:df:2e:03:db:58:03:
         77:21:82:9f:92:ee:eb:00:93:e6:fe:25:b2:f9:45:0d:ef:90:
         19:f3:d3:a6:ec:ee:3b:ea:c2:f1:74:24:4f:e4:f8:44:95:0d:
         8c:0e:8b:f4:b5:8a:00:67:a4:67:06:ac:eb:71:30:b5:55:30:
         86:aa:86:f9:5f:e1:11:0a:11:d2:ba:72:70:d2:12:fb:20:bf:
         5f:00:55:18:bd:77:1f:29:00:cc:16:2f:c6:7d:2e:b2:cc:e6:
         cd:02:3e:de:74:45:ad:80:43:a2:a5:f4:bc:88:02:d0:23:cd:
         fd:21:f0:2e:ef:69:22:76:9e:ec:98:3a:ea:36:2b:c3:32:da:
         44:0b:a4:7d:54:5e:85:f1:89:88:16:7a:54:92:f6:8a:9b:e0:
         2d:7a:85:a3:60:cc:79:7c:37:49:d3:e7:25:73:c3:3a:6d:66:
         00:6b:57:6a:61:8d:5a:ee:f9:8b:a3:d2:12:7e:d7:0e:be:2c:
         99:4c:e3:7d:e8:ec:4d:fa:c3:6c:42:ce:55:e3:02:5b:30:f1:
         9c:10:b1:45:d6:05:43:13:c3:eb:69:af:b7:be:53:20:9c:f3:
         f9:e6:57:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 17:39:55 2025 by rpki-client