Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/e2e443-1462-4c4e-bc33-b29eff091bc6/1/TE38e6TewmWW3IrCMFqR7Y6SnGk.mft
File:                     TE38e6TewmWW3IrCMFqR7Y6SnGk.mft (raw, json)
Hash identifier:          8Ol4lNMScOyLzD7fJexzPtx6qaaytsJlFgEHV0LBJn4=
Subject key identifier:   7E:2B:6C:B4:1E:C6:FF:5D:2C:55:03:32:B7:09:47:65:CA:9D:29:2F
Authority key identifier: 4C:4D:FC:7B:A4:DE:C2:65:96:DC:8A:C2:30:5A:91:ED:8E:92:9C:69
Certificate issuer:       /CN=4c4dfc7ba4dec26596dc8ac2305a91ed8e929c69
Certificate serial:       01969E9A992E8F3F7174503E4ECA6A72A2C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TE38e6TewmWW3IrCMFqR7Y6SnGk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/e2e443-1462-4c4e-bc33-b29eff091bc6/1/TE38e6TewmWW3IrCMFqR7Y6SnGk.mft
Manifest number:          0F56
Signing time:             Mon 05 May 2025 04:00:53 +0000
Manifest this update:     Mon 05 May 2025 04:00:53 +0000
Manifest next update:     Tue 06 May 2025 04:00:53 +0000
Files and hashes:         1: TE38e6TewmWW3IrCMFqR7Y6SnGk.crl (hash: IaIEeZRk82N4F1Nk3nfuonDvOiF0EJmvd4dZ2rvJrFg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/e2e443-1462-4c4e-bc33-b29eff091bc6/1/TE38e6TewmWW3IrCMFqR7Y6SnGk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/e2e443-1462-4c4e-bc33-b29eff091bc6/1/TE38e6TewmWW3IrCMFqR7Y6SnGk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TE38e6TewmWW3IrCMFqR7Y6SnGk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9e:9a:99:2e:8f:3f:71:74:50:3e:4e:ca:6a:72:a2:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c4dfc7ba4dec26596dc8ac2305a91ed8e929c69
        Validity
            Not Before: May  5 04:00:53 2025 GMT
            Not After : May  6 04:00:53 2025 GMT
        Subject: CN=7e2b6cb41ec6ff5d2c550332b7094765ca9d292f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ae:c2:f8:15:84:5a:30:ed:42:a2:4a:5e:6c:
                    e4:6c:77:f3:bf:34:ff:38:5d:38:2b:bb:5d:47:e6:
                    fb:4d:a0:e0:92:41:83:b0:90:ca:f6:67:5c:b9:43:
                    6c:e0:74:6b:b4:4a:1b:d9:b4:62:6f:f5:5d:f9:1a:
                    35:91:df:f2:fd:6f:b0:5a:3b:77:5e:fd:dd:24:44:
                    b1:67:28:0b:04:ba:15:b5:4f:41:30:23:73:8c:f9:
                    e8:15:fa:29:98:e5:20:17:57:1a:8b:1b:56:81:1e:
                    d4:19:08:cc:36:43:14:a6:22:36:8b:00:56:ee:f2:
                    93:91:4b:46:9c:8e:41:31:9a:4f:66:b4:76:4d:ce:
                    33:2c:d5:1a:c0:ee:9c:a3:39:98:a1:6c:a3:db:d9:
                    11:01:85:8e:83:06:3e:1a:57:52:3c:33:be:76:27:
                    5b:65:96:3e:ae:43:1c:71:87:28:7d:99:10:a3:ac:
                    bd:b5:e2:e1:a7:62:73:f5:a6:00:9e:47:f4:7a:30:
                    04:e5:ca:16:e5:ab:ba:2d:53:69:b2:8f:c0:e8:2d:
                    72:67:68:d5:1b:9f:08:ce:5b:42:d6:86:47:ac:0c:
                    1b:59:36:a1:9e:d7:83:84:4e:59:41:23:de:c7:54:
                    d7:8c:72:0a:df:a8:ec:c4:8e:0c:8d:24:d0:37:d2:
                    b0:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:2B:6C:B4:1E:C6:FF:5D:2C:55:03:32:B7:09:47:65:CA:9D:29:2F
            X509v3 Authority Key Identifier:
                keyid:4C:4D:FC:7B:A4:DE:C2:65:96:DC:8A:C2:30:5A:91:ED:8E:92:9C:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TE38e6TewmWW3IrCMFqR7Y6SnGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/e2e443-1462-4c4e-bc33-b29eff091bc6/1/TE38e6TewmWW3IrCMFqR7Y6SnGk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/e2e443-1462-4c4e-bc33-b29eff091bc6/1/TE38e6TewmWW3IrCMFqR7Y6SnGk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:18:88:d9:51:44:1b:2d:f5:57:df:3e:e8:4b:fa:c8:9d:d9:
         07:9b:17:1c:18:f5:ee:81:32:41:81:b6:f3:76:62:0a:f7:cf:
         b3:8c:50:90:c9:a9:a7:2e:d2:54:2d:08:80:03:c3:e4:70:67:
         01:2a:31:89:ed:da:34:f9:91:bc:1c:b0:c7:16:1b:41:29:b0:
         cb:62:1d:b1:20:4b:5a:c6:5f:88:05:2f:2f:ff:80:1b:a2:67:
         01:3a:cb:3a:77:26:c4:77:ed:72:2e:98:1b:b9:f7:a2:86:f0:
         df:3f:bc:fb:61:8e:0a:d7:a2:6b:cd:3c:23:f3:18:e8:b9:fd:
         71:3d:ca:19:df:91:a8:84:88:ef:7c:01:fe:5b:0b:d4:25:32:
         24:1c:70:8c:6e:f2:9d:fd:43:20:c6:00:4b:8c:a5:d1:56:24:
         a6:eb:9a:63:47:a9:b9:cd:47:2d:7f:e9:48:9d:b1:26:35:26:
         22:01:af:d5:3f:21:59:09:43:d9:a4:4e:24:72:15:94:1a:06:
         8a:b3:49:88:86:f0:f4:84:9c:14:23:bc:ef:c4:c5:a8:ba:61:
         c5:ea:51:39:a6:05:d0:cf:d8:3f:d5:32:85:8d:6c:61:64:5f:
         4f:9e:4b:f7:33:a5:73:59:f9:23:b8:8d:6a:f7:fb:57:32:20:
         83:df:d8:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:27:12 2025 by rpki-client