Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.mft
File:                     Eo8OWwwd7ABR_l5uvrWOdgfzFLI.mft (raw, json)
Hash identifier:          EFOJluNBUyUxdhGBpftah1/cx3SRuXqL9EpbPPbBJNM=
Subject key identifier:   6A:F8:EC:0A:77:34:FE:41:C4:C7:81:38:AE:14:B5:A7:AE:DB:8E:F7
Authority key identifier: 12:8F:0E:5B:0C:1D:EC:00:51:FE:5E:6E:BE:B5:8E:76:07:F3:14:B2
Certificate issuer:       /CN=128f0e5b0c1dec0051fe5e6ebeb58e7607f314b2
Certificate serial:       0196C5A8357624A51C8FBBD41230C4C9D408
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.mft
Manifest number:          1537
Signing time:             Mon 12 May 2025 18:00:57 +0000
Manifest this update:     Mon 12 May 2025 18:00:57 +0000
Manifest next update:     Tue 13 May 2025 18:00:57 +0000
Files and hashes:         1: Eo8OWwwd7ABR_l5uvrWOdgfzFLI.crl (hash: G75mdRZ/yZocRjh/aG3fWWpb3GnPx9zIN3dlFl6hFY0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 14:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c5:a8:35:76:24:a5:1c:8f:bb:d4:12:30:c4:c9:d4:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=128f0e5b0c1dec0051fe5e6ebeb58e7607f314b2
        Validity
            Not Before: May 12 18:00:57 2025 GMT
            Not After : May 13 18:00:57 2025 GMT
        Subject: CN=6af8ec0a7734fe41c4c78138ae14b5a7aedb8ef7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6e:14:ec:20:3d:56:68:4f:ee:a2:ec:41:b5:
                    1f:4e:1a:ad:4b:e8:24:2d:12:fb:fa:ce:db:1d:dc:
                    6c:57:39:50:8c:61:b7:3a:05:82:b8:7e:69:cc:be:
                    44:ba:07:b6:af:6c:b4:33:43:07:82:22:4e:11:fe:
                    41:8d:ce:2f:50:da:72:c0:c4:2a:fd:98:75:72:63:
                    7e:38:42:2a:8b:6e:3c:33:09:01:ac:b9:f9:5a:40:
                    0b:0d:fb:40:f5:fc:60:95:20:aa:48:14:55:3a:6f:
                    29:24:5c:32:b4:a7:8a:71:b6:ee:08:33:a1:ed:ff:
                    23:85:65:56:45:3e:a2:1c:65:69:5b:79:6a:a0:41:
                    df:6c:88:53:43:61:df:ef:75:52:c0:09:fe:de:7b:
                    59:82:9a:d0:46:e1:c9:fe:a5:17:4c:ce:8b:1c:1c:
                    76:3c:08:ff:2f:cc:70:6e:5f:70:61:78:eb:4f:5b:
                    58:b5:32:32:de:dc:98:a1:b1:f6:31:cc:c8:81:15:
                    b2:bb:27:a8:c5:e6:a9:ca:cf:e9:a5:f8:66:62:51:
                    19:94:91:fd:39:61:21:48:90:3a:77:dd:5f:31:7c:
                    4e:4c:61:fb:3f:a3:73:18:f1:6f:6d:38:10:41:b9:
                    3d:7c:d6:9e:84:5b:0c:63:98:cb:90:ee:ca:a6:67:
                    39:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:F8:EC:0A:77:34:FE:41:C4:C7:81:38:AE:14:B5:A7:AE:DB:8E:F7
            X509v3 Authority Key Identifier:
                keyid:12:8F:0E:5B:0C:1D:EC:00:51:FE:5E:6E:BE:B5:8E:76:07:F3:14:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:d2:f8:27:3f:8d:b3:db:83:d6:38:2d:fb:56:d5:d2:76:c8:
         63:db:58:12:cd:9b:94:ae:20:29:d5:36:5e:06:97:cb:6d:d6:
         a6:40:ae:7c:ae:dd:03:66:6d:bf:7f:60:40:93:8d:a1:a3:d6:
         da:e6:4b:44:ff:19:43:3f:57:ff:fc:e8:29:01:79:78:c0:fa:
         fe:40:58:45:4a:19:98:c7:08:00:29:0b:be:ba:21:06:f5:4b:
         37:78:16:99:d6:79:a1:67:35:cc:4b:d7:d0:c5:82:30:ca:20:
         ba:e4:84:21:06:67:16:7e:28:2b:1a:f8:a2:16:71:a7:f2:79:
         d3:69:f9:17:c9:0b:c2:ab:7d:4c:1d:f4:1d:c7:8b:a2:c8:a2:
         6a:43:b5:ed:ec:a2:fa:26:49:08:af:42:3e:20:d2:14:c5:38:
         1e:83:23:14:22:96:48:7a:cb:1c:5d:77:a9:36:1d:0f:a8:75:
         a7:05:f1:97:22:60:8e:30:6b:7d:92:51:f7:0e:d0:4a:58:58:
         41:0f:1b:ea:f0:73:52:54:a0:60:f4:aa:0b:6c:a1:0b:c6:78:
         89:0e:a7:a7:21:f9:42:1f:ee:ab:f5:e2:c8:75:d7:cf:5a:5e:
         80:ec:25:79:9e:d9:4b:ca:ac:6d:e8:a8:43:bc:00:06:ae:fb:
         48:18:13:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:31:13 2025 by rpki-client