Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/826de6-5039-4037-8802-5e2cbf942405/1/12TH8_eLh21rBDwWzdvd6x55W5w.mft
File:                     12TH8_eLh21rBDwWzdvd6x55W5w.mft (raw, json)
Hash identifier:          UN1jcakaROo/D6AqE+4uV8/AZBJfVPBfKd6cKjIbTJA=
Subject key identifier:   EA:7F:53:D6:05:F8:DD:2C:DA:07:40:A1:F4:FA:30:D1:A5:32:39:05
Authority key identifier: D7:64:C7:F3:F7:8B:87:6D:6B:04:3C:16:CD:DB:DD:EB:1E:79:5B:9C
Certificate issuer:       /CN=d764c7f3f78b876d6b043c16cddbddeb1e795b9c
Certificate serial:       0196D36340CFAF203C5C79FBBE954D7B8037
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/12TH8_eLh21rBDwWzdvd6x55W5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/826de6-5039-4037-8802-5e2cbf942405/1/12TH8_eLh21rBDwWzdvd6x55W5w.mft
Manifest number:          053F
Signing time:             Thu 15 May 2025 10:00:19 +0000
Manifest this update:     Thu 15 May 2025 10:00:19 +0000
Manifest next update:     Fri 16 May 2025 10:00:19 +0000
Files and hashes:         1: 12TH8_eLh21rBDwWzdvd6x55W5w.crl (hash: epRLh2/srNZ2FIjKuom+rneMWktQfXByY9IQ+eVn1dQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/826de6-5039-4037-8802-5e2cbf942405/1/12TH8_eLh21rBDwWzdvd6x55W5w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/826de6-5039-4037-8802-5e2cbf942405/1/12TH8_eLh21rBDwWzdvd6x55W5w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/12TH8_eLh21rBDwWzdvd6x55W5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 May 2025 08:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:d3:63:40:cf:af:20:3c:5c:79:fb:be:95:4d:7b:80:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d764c7f3f78b876d6b043c16cddbddeb1e795b9c
        Validity
            Not Before: May 15 10:00:19 2025 GMT
            Not After : May 16 10:00:19 2025 GMT
        Subject: CN=ea7f53d605f8dd2cda0740a1f4fa30d1a5323905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:43:e2:22:af:00:11:2d:eb:71:82:bd:81:55:
                    2b:37:61:45:5c:a3:13:af:99:b7:92:32:5b:79:39:
                    50:d7:a4:b1:04:5a:bd:24:3a:b7:cc:7e:0d:c1:68:
                    3b:ec:07:cd:ac:8c:e3:90:fa:ce:f4:c9:dc:f7:fc:
                    f4:41:58:b3:d6:5e:54:ca:c9:d0:1f:e7:ff:0f:03:
                    2c:6a:c0:05:69:72:d9:56:32:0c:28:3c:d2:0b:96:
                    42:e0:ed:22:a8:e8:90:cc:9a:a0:e0:59:85:e0:74:
                    cd:c4:85:d0:2f:59:74:25:32:92:18:b2:3c:9e:4a:
                    a7:1f:3a:89:6e:62:53:41:05:5e:e2:46:ff:25:0a:
                    17:1c:5e:3b:b8:64:08:77:fb:01:7b:3d:ca:04:94:
                    db:9d:85:9e:c0:04:7a:e7:35:53:b5:56:0b:ff:1b:
                    4b:68:81:ff:e2:e5:75:c1:ba:22:a9:32:ac:64:cd:
                    ad:a2:35:d6:92:d5:f3:77:a1:a5:ef:11:d1:c9:50:
                    4b:8a:e2:1b:8b:45:71:90:3b:2c:b7:60:a2:43:ba:
                    7d:a4:75:37:c6:71:2c:3c:fc:cd:5b:f3:ba:3c:8c:
                    73:13:b2:dd:76:b7:97:de:58:bc:43:72:2a:ba:60:
                    38:a3:e2:22:fb:0e:16:a4:76:12:96:e0:c2:52:27:
                    82:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:7F:53:D6:05:F8:DD:2C:DA:07:40:A1:F4:FA:30:D1:A5:32:39:05
            X509v3 Authority Key Identifier:
                keyid:D7:64:C7:F3:F7:8B:87:6D:6B:04:3C:16:CD:DB:DD:EB:1E:79:5B:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12TH8_eLh21rBDwWzdvd6x55W5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/826de6-5039-4037-8802-5e2cbf942405/1/12TH8_eLh21rBDwWzdvd6x55W5w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/826de6-5039-4037-8802-5e2cbf942405/1/12TH8_eLh21rBDwWzdvd6x55W5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:6e:26:be:40:ab:de:4e:8c:a4:1b:fb:75:b0:07:cd:11:f9:
         b0:be:d0:76:b6:bc:13:0c:85:81:35:82:31:1f:85:6c:f3:62:
         e8:dc:99:a7:b7:72:57:c1:41:99:a7:ce:a3:06:9a:4b:23:58:
         d2:eb:7e:2f:18:d8:56:c4:63:8d:6a:1c:84:04:1e:18:34:55:
         99:4f:54:82:67:e5:90:d3:9b:eb:73:a8:e3:b2:9b:20:aa:8c:
         11:32:70:3a:f0:b0:33:65:4e:97:12:d2:47:3b:26:e6:2b:6f:
         e8:f0:38:64:83:47:96:42:13:b0:c5:f8:99:83:47:7b:ae:68:
         a8:06:ed:66:d2:90:cb:27:b4:5a:80:49:65:57:86:40:d1:59:
         4c:da:26:a3:b4:ed:f2:df:b5:8b:ab:aa:fc:c7:1a:bc:86:bb:
         04:2b:a0:f5:39:25:c3:0f:09:e3:11:d0:f0:d5:83:c7:4c:d5:
         78:2f:02:9f:d8:b4:e3:04:1a:9d:a2:02:49:7f:38:45:c7:32:
         e7:29:44:5b:b2:73:93:20:b7:9e:86:4e:e2:9e:0f:b0:bf:ce:
         7a:80:c9:a7:b5:ef:d5:a9:dc:c3:51:ef:9d:6d:8e:b2:8a:58:
         60:80:57:2c:1a:db:bb:0c:d3:ba:0c:0b:fe:f8:0a:56:d6:bd:
         77:ce:f9:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 15:55:57 2025 by rpki-client