Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d76585-95fc-4803-ba6e-75c0d78eb07d/1/E6i_s_VHVL0ykYDlk3UCZe9-OZk.mft
File:                     E6i_s_VHVL0ykYDlk3UCZe9-OZk.mft (raw, json)
Hash identifier:          Z9U4VAxjpAVp3q2pLqd26eUorYb3YtthIbG1atxvRDc=
Subject key identifier:   81:99:E7:08:B5:0F:BF:1A:E6:E0:A0:D7:03:CC:1C:51:D5:2A:3A:87
Authority key identifier: 13:A8:BF:B3:F5:47:54:BD:32:91:80:E5:93:75:02:65:EF:7E:39:99
Certificate issuer:       /CN=13a8bfb3f54754bd329180e593750265ef7e3999
Certificate serial:       0196D1AC05C4D6246E82D22A08331B2B0833
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E6i_s_VHVL0ykYDlk3UCZe9-OZk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/d76585-95fc-4803-ba6e-75c0d78eb07d/1/E6i_s_VHVL0ykYDlk3UCZe9-OZk.mft
Manifest number:          0F32
Signing time:             Thu 15 May 2025 02:00:33 +0000
Manifest this update:     Thu 15 May 2025 02:00:33 +0000
Manifest next update:     Fri 16 May 2025 02:00:33 +0000
Files and hashes:         1: E6i_s_VHVL0ykYDlk3UCZe9-OZk.crl (hash: RDSLaknJiBJtvOSMsNoJ5ucuFVT/rv7laiw6i9fUeuw=)
                          2: SA2FPjcpG1kQYsbun59Q7-Ncc5U.roa (hash: sLqwzq191GZfL/xfEdWZKrffVvqlf65Ic2rl/WtgP8Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/d76585-95fc-4803-ba6e-75c0d78eb07d/1/E6i_s_VHVL0ykYDlk3UCZe9-OZk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/d76585-95fc-4803-ba6e-75c0d78eb07d/1/E6i_s_VHVL0ykYDlk3UCZe9-OZk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E6i_s_VHVL0ykYDlk3UCZe9-OZk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:d1:ac:05:c4:d6:24:6e:82:d2:2a:08:33:1b:2b:08:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13a8bfb3f54754bd329180e593750265ef7e3999
        Validity
            Not Before: May 15 02:00:33 2025 GMT
            Not After : May 16 02:00:33 2025 GMT
        Subject: CN=8199e708b50fbf1ae6e0a0d703cc1c51d52a3a87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5e:a9:ff:0e:57:08:b7:24:d5:74:5f:03:cb:
                    2a:64:2d:81:a4:46:a8:7c:26:32:3b:d2:f2:4f:b6:
                    e4:63:13:e1:10:2c:0b:b2:bd:4e:64:b8:d7:f0:38:
                    6d:16:f5:f7:54:13:17:e9:fd:ea:e8:69:b1:67:1a:
                    74:23:3d:15:33:59:86:5a:8c:3d:0e:bc:32:4d:ce:
                    c8:d1:3f:60:17:23:96:7f:27:c9:93:1c:a6:85:93:
                    04:25:a8:e3:f1:aa:d7:dd:b9:a4:46:7c:b5:22:55:
                    09:93:da:71:e2:da:9b:71:f5:9d:35:97:e5:da:6f:
                    2f:d8:ab:b3:b3:64:b7:ca:77:92:4b:cc:17:3c:6e:
                    31:37:4e:94:bd:15:92:20:c6:5a:3b:c9:97:f4:5a:
                    55:f5:36:24:e4:27:83:da:20:25:5c:29:8c:c3:12:
                    1b:3a:ae:b9:32:e2:c1:3b:d9:50:24:19:5b:f9:d7:
                    fd:ae:15:e4:f6:24:c4:a5:63:d5:04:fb:a4:41:0a:
                    13:bc:d9:ab:54:1a:0d:57:ce:6b:1a:5e:95:42:b5:
                    b9:72:f3:de:0f:e3:50:99:bd:3c:e0:51:84:cd:47:
                    3f:51:3f:71:5c:2a:df:1d:be:79:d4:f1:02:e3:f6:
                    03:f5:5d:43:e5:16:d3:17:f7:4a:08:78:1b:f0:7e:
                    56:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:99:E7:08:B5:0F:BF:1A:E6:E0:A0:D7:03:CC:1C:51:D5:2A:3A:87
            X509v3 Authority Key Identifier:
                keyid:13:A8:BF:B3:F5:47:54:BD:32:91:80:E5:93:75:02:65:EF:7E:39:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E6i_s_VHVL0ykYDlk3UCZe9-OZk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d76585-95fc-4803-ba6e-75c0d78eb07d/1/E6i_s_VHVL0ykYDlk3UCZe9-OZk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d76585-95fc-4803-ba6e-75c0d78eb07d/1/E6i_s_VHVL0ykYDlk3UCZe9-OZk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:88:dd:85:45:60:4b:62:88:54:77:43:b4:b4:51:dc:bb:65:
         ce:db:8a:a5:a5:54:97:ea:dc:98:f0:4d:d4:67:10:94:b2:02:
         a9:35:3b:a8:0e:3f:65:9d:7e:f9:30:9e:3e:23:dd:85:ba:9c:
         59:00:ac:e4:53:7a:04:37:f7:d2:3b:5d:0f:d5:91:dc:19:13:
         20:b2:36:c3:6e:c3:80:aa:48:75:ae:ea:ea:58:36:89:24:cd:
         98:58:40:34:f3:72:90:d2:75:65:cb:f9:ea:9d:cd:f4:ef:07:
         c4:ed:d4:b8:58:92:ca:ce:e2:6a:7c:c6:70:1b:48:45:5a:40:
         2a:a9:30:70:49:a3:91:15:d1:b7:ee:27:55:2a:65:c1:3e:84:
         60:de:d9:80:e6:71:86:6f:97:db:ef:4a:24:0e:77:f9:d9:4c:
         52:15:93:e7:54:41:db:80:fc:49:77:9d:70:ec:1c:f1:e1:b5:
         0c:7c:67:e3:7f:f1:6a:92:33:39:9b:35:d4:b1:4d:60:4b:61:
         82:bd:10:bf:fa:35:70:80:48:f0:8b:ab:1d:8e:83:92:58:71:
         86:7e:32:57:57:67:a9:09:04:3c:14:c2:21:62:90:29:bb:c2:
         94:b2:cf:cf:c7:4b:7c:ce:5c:eb:5e:3f:23:a7:b4:b1:98:8a:
         a2:cf:91:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 08:50:22 2025 by rpki-client