Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2590fb-b05e-4441-add1-f8355b78db24/1/biw-HNO4VNZu9GxWd-9y0sWjZpc.mft
File:                     biw-HNO4VNZu9GxWd-9y0sWjZpc.mft (raw, json)
Hash identifier:          AuSF3hcTQCDTvrth0lK/KNRfOEjzXRGUqfts8/Pjdxw=
Subject key identifier:   52:E3:75:71:E0:0D:28:6A:96:CB:38:E5:F8:FC:B3:DD:9A:8E:71:87
Authority key identifier: 6E:2C:3E:1C:D3:B8:54:D6:6E:F4:6C:56:77:EF:72:D2:C5:A3:66:97
Certificate issuer:       /CN=6e2c3e1cd3b854d66ef46c5677ef72d2c5a36697
Certificate serial:       0196C27028A5A4F8465D7BBC047B1DF743EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/biw-HNO4VNZu9GxWd-9y0sWjZpc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/2590fb-b05e-4441-add1-f8355b78db24/1/biw-HNO4VNZu9GxWd-9y0sWjZpc.mft
Manifest number:          06F0
Signing time:             Mon 12 May 2025 03:00:52 +0000
Manifest this update:     Mon 12 May 2025 03:00:52 +0000
Manifest next update:     Tue 13 May 2025 03:00:52 +0000
Files and hashes:         1: biw-HNO4VNZu9GxWd-9y0sWjZpc.crl (hash: g3ZhOIiWYIZpWgSIPJ4KGnd/dU+eJMVF+esNd118Big=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/2590fb-b05e-4441-add1-f8355b78db24/1/biw-HNO4VNZu9GxWd-9y0sWjZpc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/2590fb-b05e-4441-add1-f8355b78db24/1/biw-HNO4VNZu9GxWd-9y0sWjZpc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/biw-HNO4VNZu9GxWd-9y0sWjZpc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c2:70:28:a5:a4:f8:46:5d:7b:bc:04:7b:1d:f7:43:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e2c3e1cd3b854d66ef46c5677ef72d2c5a36697
        Validity
            Not Before: May 12 03:00:52 2025 GMT
            Not After : May 13 03:00:52 2025 GMT
        Subject: CN=52e37571e00d286a96cb38e5f8fcb3dd9a8e7187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ed:14:48:03:d1:41:3f:3c:b1:ca:b7:39:07:
                    63:06:ea:44:d2:c1:0d:26:bb:c3:5e:89:7f:3d:9e:
                    21:0a:8f:06:d8:86:bd:69:bd:8e:59:bc:c1:6d:db:
                    af:bd:ef:6e:b9:10:a3:b4:94:46:52:db:6d:8d:cc:
                    7f:44:6d:46:33:66:7d:ed:60:ed:ea:9b:6d:57:c8:
                    06:c1:e6:03:cd:75:5f:57:24:ff:63:49:9c:cb:d2:
                    f9:7e:55:05:2a:da:46:18:11:cc:77:43:95:e2:3f:
                    9e:b5:16:eb:11:62:40:27:31:49:3e:f1:51:9d:42:
                    ca:35:34:c6:de:c8:ef:5c:95:a2:ef:83:85:dc:75:
                    95:ce:a5:11:12:4c:c5:72:8e:69:5b:3c:cb:e7:84:
                    33:2d:36:23:5f:af:1d:0a:ea:28:e9:16:0c:65:2b:
                    cb:23:f1:11:67:f9:f2:b7:4f:44:16:0a:7e:c0:8d:
                    84:99:3b:35:0e:cf:ff:b2:41:97:fd:4d:2f:3d:5b:
                    1e:89:80:4d:38:d7:07:4d:05:d8:2e:e8:5e:5b:78:
                    15:98:43:c7:76:f8:a5:42:c6:19:cc:4b:f7:73:5e:
                    72:8e:7a:0c:a6:36:df:99:07:0a:e2:57:05:be:3d:
                    e7:3f:dd:2c:36:2a:0e:33:41:ea:a9:98:45:9d:d3:
                    fd:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:E3:75:71:E0:0D:28:6A:96:CB:38:E5:F8:FC:B3:DD:9A:8E:71:87
            X509v3 Authority Key Identifier:
                keyid:6E:2C:3E:1C:D3:B8:54:D6:6E:F4:6C:56:77:EF:72:D2:C5:A3:66:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/biw-HNO4VNZu9GxWd-9y0sWjZpc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2590fb-b05e-4441-add1-f8355b78db24/1/biw-HNO4VNZu9GxWd-9y0sWjZpc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2590fb-b05e-4441-add1-f8355b78db24/1/biw-HNO4VNZu9GxWd-9y0sWjZpc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:1f:72:e3:0d:41:28:20:7c:e2:93:f5:73:4f:d2:43:2c:ee:
         5d:d7:7b:1c:42:5b:61:d4:05:2d:f2:0c:fd:1d:c0:de:50:7c:
         3c:82:b1:80:e7:e3:cc:0e:24:2b:18:3e:95:84:65:7d:5c:b8:
         ce:5d:67:1f:52:e7:49:2a:4e:78:22:18:5c:d6:ba:a5:1b:6a:
         f7:f9:77:82:4e:18:93:41:ea:43:7e:ed:93:d1:79:b0:7c:c8:
         b2:6a:15:5f:ff:f5:8f:87:ab:b9:9e:8d:9d:78:dd:e9:2e:8c:
         b4:27:1e:3c:32:48:5b:aa:01:cd:8a:78:3d:55:b0:4f:82:4c:
         b2:c4:11:fa:e6:c9:cc:6f:75:ad:15:f9:c6:4e:49:06:87:72:
         c4:58:59:c1:03:25:ca:43:4f:93:8b:71:aa:ce:ae:f8:01:12:
         77:3c:ea:9d:89:7a:8a:a2:a4:d6:0a:e0:a9:24:68:7d:dc:0b:
         15:ae:78:f9:6a:1e:1b:04:8f:0d:e7:56:d3:cb:13:cc:4e:18:
         0a:c6:5d:90:f1:63:59:33:21:5a:60:07:1b:f4:94:90:8b:74:
         f8:5d:b3:45:6f:8c:62:85:d4:80:80:e8:8a:15:1e:9a:1a:22:
         2b:be:40:3b:4d:75:aa:17:ad:62:85:36:2c:9c:7f:a5:71:1b:
         1e:57:93:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:41:16 2025 by rpki-client