Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.mft
File:                     7rkpOOqM96P2CZym1uPlonuJfPA.mft (raw, json)
Hash identifier:          lUgNahBZ2wDFWYp3sBs4I6tGUrn5jrkmlk5exCvS4LA=
Subject key identifier:   FE:89:E4:85:C9:F9:29:A9:5C:60:51:1F:29:19:89:75:49:E6:18:B5
Authority key identifier: EE:B9:29:38:EA:8C:F7:A3:F6:09:9C:A6:D6:E3:E5:A2:7B:89:7C:F0
Certificate issuer:       /CN=eeb92938ea8cf7a3f6099ca6d6e3e5a27b897cf0
Certificate serial:       0196C2021BD095BD7E0023C7C2F6610F64B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7rkpOOqM96P2CZym1uPlonuJfPA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.mft
Manifest number:          0515
Signing time:             Mon 12 May 2025 01:00:40 +0000
Manifest this update:     Mon 12 May 2025 01:00:40 +0000
Manifest next update:     Tue 13 May 2025 01:00:40 +0000
Files and hashes:         1: 7rkpOOqM96P2CZym1uPlonuJfPA.crl (hash: 3r6648mCx8uErYFw+w2EEKK3qE4U5pw4iG6JeKwuHb8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7rkpOOqM96P2CZym1uPlonuJfPA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c2:02:1b:d0:95:bd:7e:00:23:c7:c2:f6:61:0f:64:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eeb92938ea8cf7a3f6099ca6d6e3e5a27b897cf0
        Validity
            Not Before: May 12 01:00:40 2025 GMT
            Not After : May 13 01:00:40 2025 GMT
        Subject: CN=fe89e485c9f929a95c60511f2919897549e618b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:2b:0b:45:b7:57:a9:26:ee:de:6d:f9:ef:08:
                    02:4a:f4:fb:4e:2e:13:9c:5b:64:1e:c6:13:f4:fc:
                    85:ff:87:38:69:40:23:d2:92:d0:28:f9:3d:60:3a:
                    31:8d:21:27:b4:af:c3:8f:a3:d7:42:8b:4b:e9:54:
                    02:1e:ea:fd:54:01:4e:af:e5:06:13:a9:0f:91:0f:
                    d2:c3:34:15:f1:7e:91:81:8a:95:88:74:d4:ff:ad:
                    f1:02:19:11:a3:da:bc:d5:66:9d:75:09:d7:ca:2c:
                    a2:e1:d8:d1:9e:fc:21:fb:88:f6:39:4a:5f:b9:5a:
                    4a:19:5d:d7:50:b7:d2:7a:ff:42:54:c0:c1:4b:1a:
                    07:8c:bb:c3:26:3b:c5:c6:d8:8a:8b:81:4b:19:ec:
                    6b:5c:81:ff:ce:79:04:74:05:23:53:97:cb:b3:1a:
                    78:97:1c:d3:5e:2e:ef:ba:bb:d9:4c:d0:3d:ee:27:
                    c8:56:00:24:d6:4b:0e:47:7c:b0:aa:df:df:ed:30:
                    af:de:33:40:0c:e4:39:f7:53:c7:45:05:6a:2a:be:
                    30:12:ec:1b:94:c1:bf:aa:f9:fe:0c:2b:46:6a:ff:
                    68:9f:ba:f9:e7:b9:b5:42:8c:25:e1:7d:b5:c6:cb:
                    d0:08:e5:a7:12:54:fa:c5:1d:ef:34:60:d2:97:23:
                    14:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:89:E4:85:C9:F9:29:A9:5C:60:51:1F:29:19:89:75:49:E6:18:B5
            X509v3 Authority Key Identifier:
                keyid:EE:B9:29:38:EA:8C:F7:A3:F6:09:9C:A6:D6:E3:E5:A2:7B:89:7C:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rkpOOqM96P2CZym1uPlonuJfPA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:0f:3d:3a:1b:39:4e:7b:61:b2:42:79:a6:6c:7b:68:bc:e4:
         7c:34:ca:52:8a:66:6d:d5:7a:35:7f:a7:a5:f6:80:55:25:0f:
         35:a7:b5:64:35:8d:28:5a:2f:66:17:54:fc:2d:c7:04:2e:e3:
         87:f4:0a:3a:54:14:8b:f3:38:6a:bb:f2:ad:e4:c5:ff:7d:30:
         3e:38:92:ab:16:20:82:bc:d7:6f:bf:18:20:19:ea:bb:c2:aa:
         de:f2:22:dd:37:a1:ed:ec:a1:1e:ba:80:1f:32:7c:26:6d:ca:
         ec:a9:e2:c1:d0:f6:d6:fe:da:d5:68:31:91:eb:45:f1:f4:c1:
         8c:1c:ff:b8:37:0a:bf:93:53:7b:86:e3:57:1f:4f:55:7e:41:
         a0:4b:b2:59:45:85:09:b6:8e:a4:4d:68:6d:a0:2b:07:7c:a4:
         d3:19:a2:fc:06:ab:be:a3:79:13:71:e3:7d:b2:58:6b:63:f1:
         33:c9:69:58:3b:26:a5:35:fb:1a:d5:6a:60:5d:46:2f:3d:47:
         b5:9e:fe:94:a2:37:2b:2b:4c:0f:a4:6e:7c:44:58:af:67:d6:
         bb:4c:c0:ab:ed:e1:bd:71:7b:0e:25:da:c6:c9:f7:51:a6:92:
         0a:41:4c:84:43:58:1c:13:d9:4a:7a:71:6b:20:63:de:ef:53:
         57:a8:cd:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:06:30 2025 by rpki-client