Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/1a3f4b-b08a-45ab-a476-d7b28d2a82b1/1/ahxIGdDhnfp0DYRRrxOY0jDG2E4.mft
File:                     ahxIGdDhnfp0DYRRrxOY0jDG2E4.mft (raw, json)
Hash identifier:          Zo0V+cQzOsgN6uZFEd/9k9srS4EERT8EkptySO+5QYs=
Subject key identifier:   54:7D:69:21:64:D4:5C:41:F4:19:B3:F1:93:41:72:81:85:45:35:D7
Authority key identifier: 6A:1C:48:19:D0:E1:9D:FA:74:0D:84:51:AF:13:98:D2:30:C6:D8:4E
Certificate issuer:       /CN=6a1c4819d0e19dfa740d8451af1398d230c6d84e
Certificate serial:       0196D43F81C8297C45E1A09BD98B016D74CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ahxIGdDhnfp0DYRRrxOY0jDG2E4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/1a3f4b-b08a-45ab-a476-d7b28d2a82b1/1/ahxIGdDhnfp0DYRRrxOY0jDG2E4.mft
Manifest number:          013E
Signing time:             Thu 15 May 2025 14:00:53 +0000
Manifest this update:     Thu 15 May 2025 14:00:53 +0000
Manifest next update:     Fri 16 May 2025 14:00:53 +0000
Files and hashes:         1: ahxIGdDhnfp0DYRRrxOY0jDG2E4.crl (hash: vgaw5sigWrHT/pQQGLnxGHwo410ViMLFTVlRJ8Q6hsY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/1a3f4b-b08a-45ab-a476-d7b28d2a82b1/1/ahxIGdDhnfp0DYRRrxOY0jDG2E4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/1a3f4b-b08a-45ab-a476-d7b28d2a82b1/1/ahxIGdDhnfp0DYRRrxOY0jDG2E4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ahxIGdDhnfp0DYRRrxOY0jDG2E4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 May 2025 14:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:d4:3f:81:c8:29:7c:45:e1:a0:9b:d9:8b:01:6d:74:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a1c4819d0e19dfa740d8451af1398d230c6d84e
        Validity
            Not Before: May 15 14:00:53 2025 GMT
            Not After : May 16 14:00:53 2025 GMT
        Subject: CN=547d692164d45c41f419b3f193417281854535d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5b:73:98:3d:b3:1d:62:1a:5e:87:a6:db:23:
                    9c:ab:de:3d:5c:19:6f:95:b4:de:90:9d:61:95:00:
                    f4:13:6f:a0:bd:81:9a:19:ce:c3:ae:ae:5a:ef:37:
                    f9:e6:b5:ea:2e:da:ab:03:28:57:81:6a:d2:a4:b3:
                    2b:99:0e:a2:a0:6e:e1:49:24:38:7f:b7:3b:9f:e3:
                    89:3c:24:7e:53:c1:49:78:96:af:ea:65:44:d3:bb:
                    83:c4:8f:f3:50:3b:94:80:47:90:89:64:7b:23:c1:
                    e4:80:f5:94:31:31:ba:28:ae:43:02:49:e6:42:7f:
                    54:12:67:72:44:79:f9:41:ae:11:0d:c1:68:44:8f:
                    5f:c8:b6:99:bd:b2:49:31:19:2f:67:0c:7c:1e:ec:
                    14:83:85:11:d1:82:48:d3:ef:c4:4e:d5:00:51:a3:
                    f1:9f:d6:50:b1:4a:cf:b2:e9:b3:ab:88:14:35:96:
                    d0:c6:03:80:10:0a:5d:45:b5:4f:a8:ac:5c:27:05:
                    71:20:71:2b:c2:53:d8:cf:0f:31:d9:f6:07:9f:08:
                    af:6d:96:e4:5e:41:8c:22:55:19:b6:c8:4c:dc:b5:
                    54:72:5b:94:b9:92:6d:9f:4d:18:0c:38:32:75:89:
                    16:1c:91:b5:e1:0b:45:71:f7:1f:c1:b4:12:4d:1c:
                    7b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:7D:69:21:64:D4:5C:41:F4:19:B3:F1:93:41:72:81:85:45:35:D7
            X509v3 Authority Key Identifier:
                keyid:6A:1C:48:19:D0:E1:9D:FA:74:0D:84:51:AF:13:98:D2:30:C6:D8:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahxIGdDhnfp0DYRRrxOY0jDG2E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1a3f4b-b08a-45ab-a476-d7b28d2a82b1/1/ahxIGdDhnfp0DYRRrxOY0jDG2E4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1a3f4b-b08a-45ab-a476-d7b28d2a82b1/1/ahxIGdDhnfp0DYRRrxOY0jDG2E4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:13:37:90:64:90:79:07:b8:5e:10:28:52:b0:d6:cc:18:b4:
         12:b0:be:e2:a9:2b:5d:43:94:7f:12:b6:8e:8c:65:15:ef:6b:
         1d:db:2b:d4:37:26:29:53:bc:c4:7b:2c:08:6e:66:58:95:de:
         66:2f:99:0e:1e:dd:aa:a2:30:f0:11:bb:78:25:c5:f8:1d:c0:
         e0:bd:22:8c:10:a5:6e:05:84:43:57:e9:11:15:26:f6:7f:b9:
         e8:bf:4d:86:1a:f3:9d:de:8f:2e:58:6e:a6:31:9e:49:4a:45:
         08:09:be:29:6f:38:db:ab:ea:c8:be:8a:16:f6:da:2c:89:2a:
         a4:fe:7c:88:ee:72:9f:78:c9:55:62:bb:5e:7c:a5:e4:f3:bf:
         e9:b1:49:36:dc:b7:48:d9:a3:a3:93:70:86:f8:46:3c:71:0f:
         c1:47:66:0a:7e:06:d6:e0:be:e5:7f:b9:da:43:33:48:66:fc:
         1f:8a:f0:e2:3b:64:d4:89:ff:89:9d:2f:91:79:e5:b4:aa:8d:
         62:3b:a1:9e:d6:5b:38:2f:30:93:6c:bf:76:0b:e1:cc:9b:8e:
         4c:0e:41:12:06:bf:e0:cf:ca:0e:e7:d6:43:21:d7:51:66:17:
         87:31:3a:ed:e6:fb:eb:c2:e4:93:fa:f0:84:13:e1:f6:6f:6b:
         5a:7d:de:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:46:55 2025 by rpki-client