Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
File:                     kTkWd63vei6bCw5A6TssSvxNs14.mft (raw, json)
Hash identifier:          q4ZS60fkLxnGFb25t5sq8Yx8ReFNj9ixJVfIEWs31aI=
Subject key identifier:   6E:34:AC:DB:FE:9F:FB:3C:0A:6F:CF:49:6C:21:2D:06:AF:86:BC:63
Authority key identifier: 91:39:16:77:AD:EF:7A:2E:9B:0B:0E:40:E9:3B:2C:4A:FC:4D:B3:5E
Certificate issuer:       /CN=91391677adef7a2e9b0b0e40e93b2c4afc4db35e
Certificate serial:       0196A654172A4EF4BA857821B52C29B47735
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
Manifest number:          0E84
Signing time:             Tue 06 May 2025 16:00:50 +0000
Manifest this update:     Tue 06 May 2025 16:00:50 +0000
Manifest next update:     Wed 07 May 2025 16:00:50 +0000
Files and hashes:         1: kTkWd63vei6bCw5A6TssSvxNs14.crl (hash: +LpUR9kYbd1Xf1SsUNpVWh6lYR75iEMoeEORH/h7ku8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 16:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a6:54:17:2a:4e:f4:ba:85:78:21:b5:2c:29:b4:77:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91391677adef7a2e9b0b0e40e93b2c4afc4db35e
        Validity
            Not Before: May  6 16:00:50 2025 GMT
            Not After : May  7 16:00:50 2025 GMT
        Subject: CN=6e34acdbfe9ffb3c0a6fcf496c212d06af86bc63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fc:1c:12:56:ca:93:70:7d:66:d5:e4:90:ef:
                    b7:5d:72:9f:82:e5:c8:db:65:ec:3a:9b:df:10:51:
                    6b:00:b5:5d:b5:42:43:ac:8a:a0:37:14:22:f6:5f:
                    69:59:b7:d6:97:19:e8:3d:c0:73:f4:5d:4c:b2:93:
                    73:74:71:d2:e3:45:af:1e:01:2d:6c:bd:90:75:a6:
                    e7:03:15:09:dc:9e:01:06:62:89:9c:b4:31:44:01:
                    8d:e6:2f:2d:ef:f0:c7:1e:af:a8:7c:13:11:8a:b5:
                    0b:4d:77:ce:0d:41:73:74:46:b9:4a:c0:7c:74:29:
                    ec:a6:09:ad:9b:b1:37:f8:7e:d5:b6:9b:ae:22:f0:
                    eb:32:8f:52:4c:84:fe:e4:6e:24:c4:58:c9:52:01:
                    19:d7:3e:3d:4d:6e:2d:3d:40:db:8b:2b:fe:3b:15:
                    36:66:69:1e:b5:09:3a:58:3b:01:05:21:f4:22:fe:
                    9f:30:e3:6c:b7:6e:56:4a:8f:4c:10:14:43:22:b3:
                    98:00:59:84:a0:c1:ae:5c:01:a2:b9:2b:45:9c:df:
                    24:a6:ed:6c:6f:21:c1:8e:60:a2:c1:f4:95:6c:eb:
                    20:a3:b2:a6:c3:a1:f8:d0:56:b2:8a:97:88:06:6d:
                    1a:c4:9b:16:63:27:24:7f:bd:97:a3:fe:dc:1c:41:
                    29:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:34:AC:DB:FE:9F:FB:3C:0A:6F:CF:49:6C:21:2D:06:AF:86:BC:63
            X509v3 Authority Key Identifier:
                keyid:91:39:16:77:AD:EF:7A:2E:9B:0B:0E:40:E9:3B:2C:4A:FC:4D:B3:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:bb:16:e3:38:c1:82:bd:d0:b7:43:5f:95:f1:95:a4:c1:b0:
         a4:3f:86:c0:33:c3:f6:b6:25:e2:cd:bb:57:0e:91:5d:d2:2e:
         30:7f:8a:95:39:ee:87:b6:a0:84:62:fc:e7:f1:41:02:90:1b:
         aa:36:32:15:51:ab:f7:69:5b:c2:ab:8d:a6:9c:0d:14:a0:47:
         b4:53:ed:d3:33:cb:f0:94:f2:18:b2:2a:aa:a5:1f:72:8c:99:
         e4:d7:e4:56:d0:52:18:f9:af:da:11:79:82:9b:8b:3e:7c:d6:
         60:19:65:97:65:1d:c5:24:bd:77:46:95:60:58:46:f9:6d:29:
         ec:8a:52:7f:cb:28:ee:26:9f:69:96:83:7c:09:bc:80:08:da:
         78:2c:d9:22:85:19:6e:22:25:31:03:32:ca:f9:d8:ec:0d:02:
         c8:94:02:54:ee:70:29:ac:2c:b9:f2:4d:c9:70:e8:b9:94:5f:
         b0:92:65:79:4f:5c:f8:c0:3a:8f:81:2b:9b:83:d4:ab:77:47:
         6b:0c:ca:94:68:8c:2a:3e:f2:9a:87:ef:87:7b:36:78:19:2e:
         73:4f:68:fc:45:0b:b6:47:df:fe:2f:9b:e4:f2:34:56:f2:69:
         4e:ed:0f:77:77:04:e9:b9:58:35:f9:57:91:79:a7:73:b4:7d:
         60:30:18:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 01:19:55 2025 by rpki-client