Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/5417e4-d0b8-4304-ab26-4a9940e00366/1/A_JvJX_M8HUxzX5_6EFhtP9emmM.mft
File:                     A_JvJX_M8HUxzX5_6EFhtP9emmM.mft (raw, json)
Hash identifier:          eQfp0/I1pOKOgeKMsKxIEflbkSXlvN7/OIiU7pPefIE=
Subject key identifier:   46:F6:99:D8:A9:D3:87:B7:A7:17:EC:58:29:E8:74:12:70:F0:11:8E
Authority key identifier: 03:F2:6F:25:7F:CC:F0:75:31:CD:7E:7F:E8:41:61:B4:FF:5E:9A:63
Certificate issuer:       /CN=03f26f257fccf07531cd7e7fe84161b4ff5e9a63
Certificate serial:       0196CCF3CBFC8BF9818DA4FA6C5509D10ED5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A_JvJX_M8HUxzX5_6EFhtP9emmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/5417e4-d0b8-4304-ab26-4a9940e00366/1/A_JvJX_M8HUxzX5_6EFhtP9emmM.mft
Manifest number:          0AEB
Signing time:             Wed 14 May 2025 04:00:51 +0000
Manifest this update:     Wed 14 May 2025 04:00:51 +0000
Manifest next update:     Thu 15 May 2025 04:00:51 +0000
Files and hashes:         1: A_JvJX_M8HUxzX5_6EFhtP9emmM.crl (hash: gt02hwT8TIEHEn2RYq+qPBc9YNzcTEKpRsq3Yb0g1Qg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/5417e4-d0b8-4304-ab26-4a9940e00366/1/A_JvJX_M8HUxzX5_6EFhtP9emmM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/5417e4-d0b8-4304-ab26-4a9940e00366/1/A_JvJX_M8HUxzX5_6EFhtP9emmM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A_JvJX_M8HUxzX5_6EFhtP9emmM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cc:f3:cb:fc:8b:f9:81:8d:a4:fa:6c:55:09:d1:0e:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03f26f257fccf07531cd7e7fe84161b4ff5e9a63
        Validity
            Not Before: May 14 04:00:51 2025 GMT
            Not After : May 15 04:00:51 2025 GMT
        Subject: CN=46f699d8a9d387b7a717ec5829e8741270f0118e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:60:80:94:51:53:d8:1e:43:32:9b:4f:aa:a1:
                    b5:78:1c:f3:11:7d:47:f7:5f:4d:30:c2:97:3d:ea:
                    73:c2:c1:d9:ab:7a:48:0a:a7:8d:3d:1d:80:6f:ed:
                    5c:21:a9:35:fc:ae:36:1a:56:b0:3d:89:05:b4:a1:
                    dd:1c:7c:0d:d6:f9:76:40:23:36:c3:d5:3e:7e:75:
                    5e:84:e6:e1:e4:e6:bd:d4:f6:e4:1f:bd:0b:49:06:
                    2e:da:45:34:80:3d:ad:2e:ea:27:0a:95:fe:65:15:
                    de:d5:6f:1b:70:4f:2f:2d:0c:d0:48:76:ff:95:e4:
                    77:18:9d:0c:b0:18:49:9b:0e:79:e9:30:c0:db:31:
                    77:db:1f:e4:d8:2d:78:9d:0e:1c:f1:4d:55:6d:7c:
                    0f:82:00:c2:72:da:73:ee:cd:e6:b6:e0:bb:fa:91:
                    26:df:5d:b9:2b:9c:67:50:78:0a:1c:1b:9a:9f:6d:
                    48:1b:15:b5:fe:a7:00:a9:53:7c:fb:b1:b5:32:6e:
                    a6:b7:67:c0:1d:b9:ae:86:64:8b:a2:a2:82:2e:87:
                    8c:6a:4e:af:91:4b:1e:df:32:91:69:69:58:1b:7a:
                    bd:f6:f0:93:dc:d1:e2:23:2a:d8:c1:55:99:2c:b8:
                    fc:21:ad:20:da:3a:ec:76:5b:96:a3:50:35:14:6c:
                    1a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:F6:99:D8:A9:D3:87:B7:A7:17:EC:58:29:E8:74:12:70:F0:11:8E
            X509v3 Authority Key Identifier:
                keyid:03:F2:6F:25:7F:CC:F0:75:31:CD:7E:7F:E8:41:61:B4:FF:5E:9A:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_JvJX_M8HUxzX5_6EFhtP9emmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/5417e4-d0b8-4304-ab26-4a9940e00366/1/A_JvJX_M8HUxzX5_6EFhtP9emmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/5417e4-d0b8-4304-ab26-4a9940e00366/1/A_JvJX_M8HUxzX5_6EFhtP9emmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         eb:0c:ed:90:1c:14:46:fc:06:fa:9f:8a:2a:e1:dc:15:74:fe:
         4f:1d:44:dd:02:79:cb:f4:4e:d9:a8:bd:5d:8d:5b:95:57:37:
         28:61:e7:ca:eb:6d:81:31:2b:a3:8c:5e:a4:77:39:a9:99:e5:
         a2:51:c9:04:4e:68:a5:82:55:c0:93:24:50:f9:7d:9d:f6:9c:
         c6:7a:f0:f5:5d:b3:e3:b1:44:a0:99:ad:bc:64:66:5f:fd:b8:
         de:e7:fc:88:c3:50:41:d9:8d:9c:18:c3:22:07:0d:8e:35:2d:
         4d:aa:33:93:32:46:43:47:98:7c:7d:43:0c:b2:7e:1b:dd:6b:
         0f:d8:97:3d:43:7d:4f:3f:d9:35:9c:43:fe:1b:2b:e2:52:6e:
         9c:b5:0f:17:30:22:5a:65:44:08:b7:7f:77:fe:70:e5:c7:6f:
         3c:a0:fd:4a:dd:41:40:fd:71:16:0a:55:30:0b:e0:0c:66:b1:
         0c:6c:d1:4a:75:af:ac:7e:f9:82:b7:10:b0:73:a3:e6:67:ef:
         96:42:d5:a0:39:a2:06:07:1a:94:06:70:6f:2b:2e:63:8f:69:
         dc:fa:af:c0:ac:15:10:83:d5:61:59:36:11:dd:0b:48:e4:9f:
         d2:7f:85:d9:45:4d:3e:88:47:65:7e:f8:20:7d:07:ad:54:23:
         76:4d:df:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 09:04:40 2025 by rpki-client