Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.mft
File:                     5XB6RVkqydFxmoV2lgMXeCm0bgo.mft (raw, json)
Hash identifier:          GjGBEehtkLmaiwSaQYN88jDiRWyt+BVLVz48Z5Y18Kw=
Subject key identifier:   65:60:20:68:55:D5:D3:9B:48:83:54:EF:7D:E6:E5:A5:18:E1:63:9B
Authority key identifier: E5:70:7A:45:59:2A:C9:D1:71:9A:85:76:96:03:17:78:29:B4:6E:0A
Certificate issuer:       /CN=e5707a45592ac9d1719a85769603177829b46e0a
Certificate serial:       0196B6352AE29D77B5357FBDCE23A661DEF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5XB6RVkqydFxmoV2lgMXeCm0bgo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.mft
Manifest number:          0B2E
Signing time:             Fri 09 May 2025 18:00:59 +0000
Manifest this update:     Fri 09 May 2025 18:00:59 +0000
Manifest next update:     Sat 10 May 2025 18:00:59 +0000
Files and hashes:         1: 5XB6RVkqydFxmoV2lgMXeCm0bgo.crl (hash: NiSflQFTsR7pz9p9YwlGFESex4doRO0wA7voc7Ge2Yc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5XB6RVkqydFxmoV2lgMXeCm0bgo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 17:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b6:35:2a:e2:9d:77:b5:35:7f:bd:ce:23:a6:61:de:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5707a45592ac9d1719a85769603177829b46e0a
        Validity
            Not Before: May  9 18:00:59 2025 GMT
            Not After : May 10 18:00:59 2025 GMT
        Subject: CN=6560206855d5d39b488354ef7de6e5a518e1639b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:46:c7:06:f7:57:9c:1f:10:64:59:30:b8:87:
                    9f:a8:16:af:7b:a0:a9:78:18:15:e5:f4:52:ec:6f:
                    3c:35:84:47:0b:4e:c4:49:e3:71:9f:93:99:4f:06:
                    1b:da:8f:7f:6d:9a:43:47:34:40:16:24:01:75:74:
                    2b:65:97:6f:d3:90:e5:3a:bf:54:1f:02:f7:a2:12:
                    7b:1d:ac:45:7d:9f:d5:35:b4:48:fc:80:33:bb:c6:
                    1f:12:41:0b:2d:dd:76:11:8a:d1:c0:b2:ce:36:db:
                    7f:37:a9:8e:4c:bf:66:58:f7:80:b5:be:57:f7:1e:
                    74:c3:c3:c2:52:60:8d:ca:f8:43:3e:ca:4d:94:f0:
                    9f:61:9f:0f:e7:cf:82:39:a3:2d:3a:7f:61:1c:6f:
                    4b:99:6a:f0:bf:87:07:d2:09:32:d2:f2:66:96:d0:
                    5b:29:f9:4a:22:4c:2a:07:42:bc:62:26:83:0b:80:
                    31:02:5f:36:2e:ed:b2:30:a1:65:95:3f:fd:40:b7:
                    9c:f5:e0:1a:0b:66:0b:5c:33:0f:e8:a0:69:32:59:
                    e3:8b:82:fd:a7:30:e2:16:3c:73:2a:90:09:62:32:
                    0f:1a:63:36:98:f8:8a:e6:13:b3:04:15:59:a4:f7:
                    54:4e:68:34:6a:80:32:f1:a5:49:67:5e:cf:95:61:
                    c6:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:60:20:68:55:D5:D3:9B:48:83:54:EF:7D:E6:E5:A5:18:E1:63:9B
            X509v3 Authority Key Identifier:
                keyid:E5:70:7A:45:59:2A:C9:D1:71:9A:85:76:96:03:17:78:29:B4:6E:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XB6RVkqydFxmoV2lgMXeCm0bgo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:19:be:94:3c:65:7d:8f:52:03:84:d4:27:37:53:bd:ce:25:
         7f:be:c6:7c:c1:62:b4:f4:e3:e0:b0:10:42:6d:b5:e9:d8:c9:
         73:0f:c7:1d:dd:09:cb:3d:39:c7:3a:6e:32:01:80:23:3e:37:
         09:37:fe:61:ca:58:ec:32:7c:e3:c2:ec:7f:fa:cc:2e:10:ae:
         53:09:82:f8:65:7a:fc:d8:73:69:22:b0:c8:14:80:b1:75:f9:
         d1:27:70:81:73:ff:ec:64:b6:45:12:b2:d0:d1:cd:c2:a5:3b:
         49:68:b3:b6:04:ec:e1:79:53:39:45:73:83:18:2d:07:7b:ed:
         86:dc:20:0f:ba:3e:b2:fa:b2:22:dc:7f:4c:d5:a2:33:e3:1c:
         bb:ae:75:66:56:04:c2:16:3d:2b:d9:2e:e1:52:c5:08:41:58:
         15:09:45:10:2c:9b:57:6e:0f:86:cd:db:57:b1:50:8f:87:72:
         fb:42:3d:94:b1:99:99:87:63:5a:9c:5b:1d:36:e2:37:f1:3c:
         2c:5c:09:7d:51:c3:d8:92:2f:23:9c:90:d2:c5:6c:f0:42:fa:
         2f:2b:d6:fa:75:d8:1f:79:82:f7:db:ca:bf:6c:77:fd:7c:71:
         07:2a:80:a2:74:b3:1e:22:70:92:5f:1a:42:b7:00:5b:0a:0d:
         15:c4:74:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 23:55:45 2025 by rpki-client