Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f3e344-e506-4cd9-941b-944d88109841/1/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.mft
File:                     5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.mft (raw, json)
Hash identifier:          zNCAP48q4Kok4xIuImQKSrQIzWR8U1F4O0zZPa1UMgM=
Subject key identifier:   D1:44:87:90:1C:21:58:98:04:B5:64:D6:43:0D:AB:19:A8:B4:CA:49
Authority key identifier: E4:7E:92:BF:41:A5:A7:74:51:1F:B7:23:AF:94:AF:F0:D3:51:26:02
Certificate issuer:       /CN=e47e92bf41a5a774511fb723af94aff0d3512602
Certificate serial:       0196BCA4BA9D9EE3FE179FD3653AE0EF28AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/f3e344-e506-4cd9-941b-944d88109841/1/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.mft
Manifest number:          036B
Signing time:             Sun 11 May 2025 00:00:34 +0000
Manifest this update:     Sun 11 May 2025 00:00:34 +0000
Manifest next update:     Mon 12 May 2025 00:00:34 +0000
Files and hashes:         1: 5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.crl (hash: VVGvZrKCmS1KnNP/39auDks9p3QLrxgKRb06qNaOvaM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/f3e344-e506-4cd9-941b-944d88109841/1/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/f3e344-e506-4cd9-941b-944d88109841/1/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bc:a4:ba:9d:9e:e3:fe:17:9f:d3:65:3a:e0:ef:28:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e47e92bf41a5a774511fb723af94aff0d3512602
        Validity
            Not Before: May 11 00:00:34 2025 GMT
            Not After : May 12 00:00:34 2025 GMT
        Subject: CN=d14487901c21589804b564d6430dab19a8b4ca49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ee:cf:0a:19:9d:a0:04:b8:54:aa:54:7d:b0:
                    51:77:5f:5d:fb:ce:10:a1:13:8d:cd:cd:c7:42:1a:
                    2c:0b:41:e0:8b:54:ee:63:76:40:2f:89:80:2e:c3:
                    7d:59:22:19:fc:7a:86:e9:2b:7a:8c:11:8a:81:fd:
                    2b:e5:e4:9f:fb:b8:9b:b8:03:27:6c:c3:11:ef:7a:
                    bc:ef:8a:6d:80:55:37:c3:b2:7f:98:23:cc:54:b6:
                    07:46:52:29:60:56:71:87:f0:5f:6c:c7:0b:10:7a:
                    6a:a4:f7:06:f7:b7:15:9a:21:81:85:ec:09:03:e3:
                    de:d7:bf:5f:f3:4d:56:64:24:c3:45:e7:6c:4f:a5:
                    d4:c1:8c:92:72:cd:4b:00:04:a4:90:05:af:f4:7c:
                    eb:6d:d0:9d:e1:2e:bb:24:34:4c:1e:db:ef:4a:0a:
                    ea:54:9a:14:17:a8:e5:28:2d:54:67:ad:f7:4b:5c:
                    c4:b9:76:5e:61:42:0c:15:d2:ae:a5:c5:a4:80:82:
                    21:af:dc:79:67:54:c3:34:c1:52:4a:88:ca:28:5c:
                    83:b1:ef:f8:8d:26:f2:3c:cc:1d:8c:d6:95:c8:f8:
                    30:9d:b7:ba:73:57:b3:3d:13:93:43:40:37:84:73:
                    63:a6:84:34:e5:2d:c3:2d:64:f7:f3:95:bc:11:ed:
                    5c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:44:87:90:1C:21:58:98:04:B5:64:D6:43:0D:AB:19:A8:B4:CA:49
            X509v3 Authority Key Identifier:
                keyid:E4:7E:92:BF:41:A5:A7:74:51:1F:B7:23:AF:94:AF:F0:D3:51:26:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f3e344-e506-4cd9-941b-944d88109841/1/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f3e344-e506-4cd9-941b-944d88109841/1/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:fc:51:9d:26:2b:52:43:54:38:9b:8f:11:d4:bf:79:be:9b:
         f4:56:01:07:82:31:ac:ce:64:e8:a3:a4:d5:ed:25:02:78:f0:
         0c:a2:4a:d1:3f:35:67:30:9d:36:f0:b2:8c:d0:3d:73:c2:85:
         9f:96:0b:56:3f:6e:54:ea:5f:3c:ab:a8:e7:e4:d7:f6:cf:ae:
         e2:05:53:d3:4d:9f:1a:0f:a7:23:47:4a:dc:a8:89:e0:26:a7:
         a3:20:9a:d8:38:de:e4:56:4a:0a:4b:dd:21:69:0f:0c:8c:7b:
         2c:27:94:0c:7c:8b:6e:6c:da:f6:d7:ea:8d:9d:a5:8e:3a:14:
         b4:ba:cd:5d:c8:dd:c8:b2:2c:64:14:45:8c:1d:af:e4:51:63:
         30:28:b5:85:8e:8a:2c:c0:92:a5:83:af:2b:cd:1a:11:77:dc:
         e8:34:b2:e0:26:b7:04:79:0f:79:76:1a:eb:df:85:e9:63:aa:
         c0:a1:27:ce:b6:23:03:7c:b5:3b:66:86:75:e7:5f:de:1c:2f:
         a4:cb:fd:54:29:16:b4:ee:9d:b8:e3:76:95:a7:62:d9:26:bf:
         ed:b8:f2:1b:80:62:c6:27:18:5d:65:af:df:a5:df:c1:2f:9c:
         3f:07:05:84:f6:14:b2:96:6c:fb:96:47:a0:f7:14:7e:0a:5d:
         c1:c6:10:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:29:43 2025 by rpki-client