Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.mft
File:                     k6Ip4mayVYiZ81R-5j2E7WWUdos.mft (raw, json)
Hash identifier:          6JrfyTTnJEY/bbvVaR30QQBeJh6xh90frhUqrwfJmAY=
Subject key identifier:   5F:A7:D3:D9:4B:01:E4:94:70:C3:4C:68:EC:CA:5B:2D:E5:EA:50:3E
Authority key identifier: 93:A2:29:E2:66:B2:55:88:99:F3:54:7E:E6:3D:84:ED:65:94:76:8B
Certificate issuer:       /CN=93a229e266b2558899f3547ee63d84ed6594768b
Certificate serial:       0196C4274DE1C54B57BCDCA64B6DFB48A89B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k6Ip4mayVYiZ81R-5j2E7WWUdos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.mft
Manifest number:          1549
Signing time:             Mon 12 May 2025 11:00:32 +0000
Manifest this update:     Mon 12 May 2025 11:00:32 +0000
Manifest next update:     Tue 13 May 2025 11:00:32 +0000
Files and hashes:         1: k6Ip4mayVYiZ81R-5j2E7WWUdos.crl (hash: t0qKMFEJyiRlq8dC0OWaL2hg/Z2JzmvlSbpwdWWz2ZI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k6Ip4mayVYiZ81R-5j2E7WWUdos.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 11:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c4:27:4d:e1:c5:4b:57:bc:dc:a6:4b:6d:fb:48:a8:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93a229e266b2558899f3547ee63d84ed6594768b
        Validity
            Not Before: May 12 11:00:32 2025 GMT
            Not After : May 13 11:00:32 2025 GMT
        Subject: CN=5fa7d3d94b01e49470c34c68ecca5b2de5ea503e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d8:66:90:db:42:b3:9d:09:11:fa:bd:50:b8:
                    d0:88:1e:d1:33:42:46:5a:9b:5a:2d:83:fe:41:0b:
                    1d:ba:36:9d:f0:ec:7b:52:f6:67:16:95:48:28:96:
                    bc:29:9a:26:13:7d:60:ee:a6:df:24:47:b3:fc:de:
                    f0:06:aa:a9:8d:94:84:df:d8:21:c8:99:46:c4:f2:
                    71:01:8d:c2:73:f4:f9:0e:ae:37:68:52:a2:9f:b8:
                    1c:69:1c:3a:f5:eb:91:ae:f6:a1:79:b6:26:5a:12:
                    38:ba:c8:59:b3:d2:ca:41:37:da:2f:82:4b:71:d1:
                    f6:4a:ce:81:da:ab:e6:99:58:79:24:e6:56:61:01:
                    49:1b:f4:6e:77:a9:2d:07:22:52:88:db:c5:00:6b:
                    11:f5:ea:09:44:25:39:2d:7e:9b:8c:9d:21:29:a1:
                    a3:9d:b2:cb:a0:38:0d:99:9f:5e:4d:3f:c2:3b:38:
                    23:c4:ab:bb:a9:96:36:8b:12:4f:53:b7:bd:56:66:
                    4b:36:81:05:80:2b:f8:f9:22:75:bc:b7:45:01:eb:
                    5b:87:34:ec:ef:af:d4:c0:44:52:e3:0e:ac:fc:b8:
                    54:07:1d:48:5e:dc:ab:80:6d:b1:79:c8:56:ce:0c:
                    68:c4:76:1e:08:91:af:1d:73:aa:59:f9:7a:36:7b:
                    6e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:A7:D3:D9:4B:01:E4:94:70:C3:4C:68:EC:CA:5B:2D:E5:EA:50:3E
            X509v3 Authority Key Identifier:
                keyid:93:A2:29:E2:66:B2:55:88:99:F3:54:7E:E6:3D:84:ED:65:94:76:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6Ip4mayVYiZ81R-5j2E7WWUdos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:f6:60:83:93:fa:5e:83:14:99:d8:39:fc:17:71:65:e2:aa:
         6c:b0:02:29:52:16:a9:d4:89:76:06:c3:b2:17:69:37:3b:98:
         ef:69:63:dd:47:e2:9d:d2:b6:3f:9c:fe:77:e8:a3:d0:fa:75:
         65:a5:46:f6:94:7b:67:02:06:d4:4d:ee:a8:1e:07:3b:70:3a:
         a6:7f:5e:db:e0:ed:f0:03:5c:e7:28:82:5c:2e:07:f0:e2:e6:
         86:1f:a8:19:94:79:5f:92:f7:1a:e9:0a:78:8e:7d:b6:85:64:
         26:bb:67:dc:bb:44:60:61:eb:4c:59:6c:87:7b:f8:64:bf:3e:
         e5:a2:ed:6a:df:3f:4d:c0:05:e7:6e:17:8c:f1:70:73:0f:d2:
         bd:b0:e7:ff:63:38:fc:0d:46:9d:fe:90:1a:9c:f3:9f:56:91:
         ec:20:81:5a:cb:f2:de:7e:66:f2:d8:e5:7b:56:ce:c7:2e:32:
         0c:4f:c3:f8:f6:f4:89:f8:a5:e6:10:10:47:52:6e:9c:9a:a8:
         de:09:80:bb:ea:15:f8:cd:5c:74:cb:da:39:0d:62:65:ad:c1:
         d1:e5:84:12:0c:21:b7:39:ca:f0:cb:ae:ca:f9:d4:10:fe:49:
         38:25:34:bd:eb:90:56:8a:56:81:b3:2a:e4:73:dc:a0:a6:1f:
         14:05:02:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:47:32 2025 by rpki-client