Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.mft
File:                     5hV1KKnM6SUY82vwqBt5AaZQrpQ.mft (raw, json)
Hash identifier:          Ql3J7yjOOLvwwe6GqLEOt3Bf/zvoJ6Stja5lPXFpVDk=
Subject key identifier:   60:CF:3B:37:BB:64:25:09:50:9D:D3:25:3F:9D:69:17:48:4B:8A:A5
Authority key identifier: E6:15:75:28:A9:CC:E9:25:18:F3:6B:F0:A8:1B:79:01:A6:50:AE:94
Certificate issuer:       /CN=e6157528a9cce92518f36bf0a81b7901a650ae94
Certificate serial:       0196C3F0BA3A4432B847EE4B66641DE65A27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5hV1KKnM6SUY82vwqBt5AaZQrpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.mft
Manifest number:          14C6
Signing time:             Mon 12 May 2025 10:00:55 +0000
Manifest this update:     Mon 12 May 2025 10:00:55 +0000
Manifest next update:     Tue 13 May 2025 10:00:55 +0000
Files and hashes:         1: 5hV1KKnM6SUY82vwqBt5AaZQrpQ.crl (hash: ZXqRXfjy6uJ6L0gUEEOZsF4g9SjzrXV0qK4Hjsv7dH0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5hV1KKnM6SUY82vwqBt5AaZQrpQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c3:f0:ba:3a:44:32:b8:47:ee:4b:66:64:1d:e6:5a:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6157528a9cce92518f36bf0a81b7901a650ae94
        Validity
            Not Before: May 12 10:00:55 2025 GMT
            Not After : May 13 10:00:55 2025 GMT
        Subject: CN=60cf3b37bb642509509dd3253f9d6917484b8aa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5d:4c:2b:13:0e:4a:92:fc:fc:90:1a:00:8a:
                    a3:79:eb:a8:ca:53:16:58:f0:aa:f7:43:93:c2:89:
                    5b:f5:8e:ea:0f:ae:4e:ad:82:46:d2:f6:ca:39:4f:
                    08:4f:2a:4e:a7:e8:98:99:eb:b1:c1:66:f5:5f:a7:
                    fb:52:d5:9f:27:5e:6b:88:fd:b8:cf:06:4d:42:da:
                    d0:b8:4f:b8:9f:0e:ca:a3:05:22:c1:db:8c:95:47:
                    35:8d:81:dd:d2:8f:9b:ea:5b:2f:e4:8e:25:ec:f1:
                    2f:41:d5:7b:73:88:a5:98:f0:2d:d7:f3:73:f0:52:
                    b8:ba:56:ae:4d:82:ce:25:a1:2b:fd:6d:60:dd:00:
                    6f:81:e1:63:1f:a0:6d:ef:95:a7:43:30:d3:04:60:
                    56:d7:d4:9e:9a:de:8d:b6:aa:0a:a7:b7:a4:23:64:
                    1a:a5:20:61:64:26:f1:4c:1b:19:f2:a0:08:6e:9c:
                    1a:cd:b6:b9:dc:c3:10:e0:83:fb:28:a6:d8:9b:e9:
                    4a:47:90:f9:4a:5f:68:85:67:ab:56:8d:62:bf:95:
                    05:39:2d:8d:f6:c9:de:4b:0c:16:13:1e:c5:bc:18:
                    d5:9b:07:bc:6b:ba:ff:c5:29:8c:99:94:e0:f6:b2:
                    68:b6:c7:4a:88:50:de:79:cb:c7:3b:7c:50:f3:ab:
                    b4:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:CF:3B:37:BB:64:25:09:50:9D:D3:25:3F:9D:69:17:48:4B:8A:A5
            X509v3 Authority Key Identifier:
                keyid:E6:15:75:28:A9:CC:E9:25:18:F3:6B:F0:A8:1B:79:01:A6:50:AE:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hV1KKnM6SUY82vwqBt5AaZQrpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:f4:db:c2:e8:f3:a7:63:22:25:ff:85:5b:b1:03:f2:d2:42:
         c5:39:14:be:8d:75:a6:af:d8:4a:ab:59:92:2f:aa:21:dc:4a:
         0b:ad:99:56:56:8f:74:bb:45:c4:bb:64:5b:9b:4e:f6:85:4b:
         52:4b:a5:23:35:f1:55:af:a7:8d:3f:1d:58:ff:12:96:cd:33:
         9a:50:f4:11:c6:1e:4e:34:3c:bf:fb:5d:8b:39:8b:a8:ce:47:
         18:b5:d0:55:b3:bf:93:4e:bd:30:74:c4:31:31:73:37:69:46:
         2a:42:0c:b2:86:58:27:e7:ea:a8:d1:2c:77:5d:9a:36:00:48:
         b6:22:1c:bd:90:a4:0b:04:68:2e:8e:68:3f:fe:1e:e5:a1:24:
         f8:50:78:61:ce:41:84:88:d2:5a:8c:79:42:62:c6:ef:4b:03:
         43:b5:d5:9f:92:3a:26:f6:5c:af:18:4d:0d:82:a5:63:61:58:
         08:d9:b5:e8:4e:81:e8:8a:1e:67:54:3c:42:ef:a7:de:38:d1:
         27:6c:8b:fb:b8:55:3f:3d:1a:6b:a8:50:5c:d3:ee:b5:bb:e7:
         c5:41:60:90:47:96:3d:ae:2a:f4:56:f0:aa:ae:b4:96:3b:14:
         e9:9b:f5:cb:ef:d5:0f:58:64:c2:24:3f:34:68:49:e9:74:b9:
         fc:a2:12:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:23:49 2025 by rpki-client