Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.mft
File:                     r6seSN7xSynSHTQjTESOqAjmGL8.mft (raw, json)
Hash identifier:          lteNL3r2KH2L1Vqo+A2GA69k5HnDfsWkVURJDMc7Byg=
Subject key identifier:   41:45:58:81:67:7F:F5:A3:63:FE:AD:DC:C1:01:E0:83:DF:35:80:3F
Authority key identifier: AF:AB:1E:48:DE:F1:4B:29:D2:1D:34:23:4C:44:8E:A8:08:E6:18:BF
Certificate issuer:       /CN=afab1e48def14b29d21d34234c448ea808e618bf
Certificate serial:       0196A50A701F76532FF19DE07A8AE5A959E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r6seSN7xSynSHTQjTESOqAjmGL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.mft
Manifest number:          0C0C
Signing time:             Tue 06 May 2025 10:00:46 +0000
Manifest this update:     Tue 06 May 2025 10:00:46 +0000
Manifest next update:     Wed 07 May 2025 10:00:46 +0000
Files and hashes:         1: r6seSN7xSynSHTQjTESOqAjmGL8.crl (hash: Nqf/ZIrM7T1skVi04XyRBkDnjSyPS/gItM+hgKQcvdk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r6seSN7xSynSHTQjTESOqAjmGL8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a5:0a:70:1f:76:53:2f:f1:9d:e0:7a:8a:e5:a9:59:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afab1e48def14b29d21d34234c448ea808e618bf
        Validity
            Not Before: May  6 10:00:46 2025 GMT
            Not After : May  7 10:00:46 2025 GMT
        Subject: CN=41455881677ff5a363feaddcc101e083df35803f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f4:37:6c:2c:fb:17:04:e3:c9:1e:15:7a:7d:
                    f3:b6:fa:8f:41:6a:f0:79:fc:aa:1b:1a:4c:96:40:
                    39:eb:be:5a:ec:0e:03:63:cf:5c:ff:4a:14:63:f2:
                    60:5c:36:63:91:18:bb:07:52:8c:14:1f:37:e8:71:
                    59:d3:a7:12:78:bb:39:80:12:a8:f6:85:c7:b9:d2:
                    f6:1a:28:39:4f:8c:51:9b:c1:b5:8b:56:48:25:97:
                    f5:26:f9:ba:e0:52:8b:d2:5b:db:d0:a2:3a:7a:cb:
                    a1:22:6e:f4:6e:e5:91:e3:6e:c9:ce:d5:ff:76:52:
                    9b:9f:f2:6c:4d:b5:57:5a:72:c6:d1:3d:13:9d:42:
                    a8:27:1a:fd:2b:26:fc:40:aa:00:ce:dd:de:a3:e8:
                    13:d0:06:72:73:31:2f:68:d0:5b:44:f5:c9:ac:e3:
                    6f:a0:7f:06:e7:b0:af:04:1d:ee:f6:9a:1b:c4:c1:
                    63:cf:bb:e2:1a:e0:af:fd:9a:1a:7c:38:ce:28:a1:
                    1a:10:c5:f5:1c:be:20:b6:e4:0c:bd:ac:2e:15:30:
                    f3:b8:78:af:92:ca:78:0c:1e:da:f2:9a:42:2a:b6:
                    d7:90:d2:09:1a:8e:76:a3:c9:c5:a0:5f:c2:c0:53:
                    8e:6f:b3:21:39:4d:20:78:1a:aa:9b:8b:f4:1b:d6:
                    28:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:45:58:81:67:7F:F5:A3:63:FE:AD:DC:C1:01:E0:83:DF:35:80:3F
            X509v3 Authority Key Identifier:
                keyid:AF:AB:1E:48:DE:F1:4B:29:D2:1D:34:23:4C:44:8E:A8:08:E6:18:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6seSN7xSynSHTQjTESOqAjmGL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:4d:95:a6:26:24:e6:85:3a:48:9a:a0:8c:98:82:d2:e0:84:
         69:0a:00:7a:d6:13:7d:ab:4e:cf:37:a3:55:4d:7a:95:11:2f:
         53:34:24:75:21:fc:5d:db:6d:87:5e:14:93:89:58:2c:ad:be:
         8f:a9:fb:fd:1d:b8:56:7b:8c:09:e5:c4:6c:7f:e5:86:7c:75:
         44:31:c6:bf:a7:f0:53:e6:2f:21:41:41:55:ff:c9:49:64:69:
         82:c6:a8:07:bb:fa:b7:7a:57:0e:6e:99:42:4c:9f:c5:0b:fb:
         83:5b:ac:08:37:8e:46:5e:64:5d:1a:ed:19:8e:9b:bb:d7:4b:
         de:c6:a1:04:c6:a5:85:d5:1f:d3:a0:9b:ce:59:70:0d:bc:17:
         11:6a:ed:a2:06:d0:af:f8:22:4f:a6:3d:cb:45:c9:f3:21:a6:
         71:c3:01:a8:a0:67:fc:78:3f:90:f7:c0:24:9d:b0:1c:f1:9b:
         ee:b0:d3:40:71:e5:a4:aa:17:1c:a1:49:40:7d:8c:14:b0:1c:
         ee:a2:9e:ab:c9:24:7d:0f:e9:31:e0:7e:60:c0:ca:b7:c6:26:
         91:bd:01:2d:ec:c2:bb:07:e6:64:b4:32:32:1d:cf:bb:04:28:
         9d:bb:2c:ef:e4:5c:62:57:64:1c:04:84:29:17:41:02:43:a1:
         3c:06:32:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 14:19:11 2025 by rpki-client