Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.mft
File:                     5u1ytGvobGVNWMkwUUpfQ7SkTuI.mft (raw, json)
Hash identifier:          /BSb1DAD2XIL3hGMfRvOo3fQb4cbaf3dmZqgaLhadJo=
Subject key identifier:   24:42:8D:FA:34:DD:93:46:8B:70:72:FD:2D:42:79:4C:36:D6:BF:62
Authority key identifier: E6:ED:72:B4:6B:E8:6C:65:4D:58:C9:30:51:4A:5F:43:B4:A4:4E:E2
Certificate issuer:       /CN=e6ed72b46be86c654d58c930514a5f43b4a44ee2
Certificate serial:       0196B8238CC6EA99E9F168270F8607DAC4BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5u1ytGvobGVNWMkwUUpfQ7SkTuI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.mft
Manifest number:          07E7
Signing time:             Sat 10 May 2025 03:00:59 +0000
Manifest this update:     Sat 10 May 2025 03:00:59 +0000
Manifest next update:     Sun 11 May 2025 03:00:59 +0000
Files and hashes:         1: 5u1ytGvobGVNWMkwUUpfQ7SkTuI.crl (hash: Ltia1Oe/For6w65vgZI8RwMyf0OKRRlL/ZPwb0Q7yDY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5u1ytGvobGVNWMkwUUpfQ7SkTuI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 03:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b8:23:8c:c6:ea:99:e9:f1:68:27:0f:86:07:da:c4:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6ed72b46be86c654d58c930514a5f43b4a44ee2
        Validity
            Not Before: May 10 03:00:59 2025 GMT
            Not After : May 11 03:00:59 2025 GMT
        Subject: CN=24428dfa34dd93468b7072fd2d42794c36d6bf62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:12:c7:67:cf:fa:2d:36:7a:08:d4:e1:bd:22:
                    2c:3f:37:86:e4:f1:3e:8c:ff:55:39:8a:04:b9:12:
                    ea:90:20:45:36:66:a1:3b:3b:3c:cd:65:5f:0b:c5:
                    34:bb:74:45:ae:84:9d:76:38:c8:8c:bc:fe:50:3a:
                    81:af:b0:3e:ca:41:85:ab:a6:4c:8d:32:08:53:48:
                    0f:bd:ee:cb:31:09:c5:ac:cf:45:5f:5f:5e:ef:0a:
                    07:c1:90:ec:43:c7:f2:bb:cd:48:c9:87:1c:c7:35:
                    5f:c8:ea:29:c2:6f:5f:f8:3c:56:94:a6:0a:db:2b:
                    76:74:3c:35:5d:af:ae:ff:d2:3a:1d:45:88:07:e1:
                    93:e7:dd:8c:42:b2:6d:ee:ee:80:61:3b:f8:e2:d1:
                    0e:f5:04:6e:5a:3b:8b:88:a2:f1:5a:89:17:68:a4:
                    30:cb:f2:6a:45:96:f5:c5:73:07:8f:e9:ed:64:6b:
                    b1:02:42:3c:fc:74:02:57:b6:de:bf:ef:59:cd:60:
                    aa:7f:ab:4d:3d:52:b7:68:49:10:fe:63:54:f0:11:
                    b2:a7:65:a4:7a:67:61:02:ec:62:52:72:2a:56:30:
                    30:43:2e:80:db:bb:5f:40:5f:af:49:f1:9e:ac:fc:
                    9b:74:10:76:7c:99:db:9e:3a:cf:3a:99:2c:ba:6e:
                    af:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:42:8D:FA:34:DD:93:46:8B:70:72:FD:2D:42:79:4C:36:D6:BF:62
            X509v3 Authority Key Identifier:
                keyid:E6:ED:72:B4:6B:E8:6C:65:4D:58:C9:30:51:4A:5F:43:B4:A4:4E:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5u1ytGvobGVNWMkwUUpfQ7SkTuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:d0:60:2d:09:25:46:0e:fa:8e:bf:37:e0:fb:6f:97:75:f9:
         b9:9f:15:46:15:cd:99:bb:27:8a:8d:f7:47:df:3b:0e:ae:e7:
         67:85:1b:1c:4f:90:88:12:28:b4:bc:2a:71:56:f6:66:c6:a0:
         88:f9:76:dd:ae:35:a6:6f:f7:06:8e:b8:98:11:51:5f:e0:8d:
         d3:92:86:4b:71:38:07:bf:0d:42:e5:e3:8a:11:97:c4:3f:d9:
         08:e2:d8:d0:e4:1e:e8:46:35:e9:e8:1f:30:9d:6f:ed:f7:be:
         55:64:b0:f0:e4:9f:15:62:f9:de:c2:9b:06:17:ea:2f:04:7f:
         fa:25:c0:78:9f:81:d9:1d:65:23:d8:47:9e:3c:54:16:54:cd:
         ef:9e:48:8a:e2:5f:f0:07:8d:7b:09:13:88:29:24:e9:ea:ae:
         a9:67:b3:2e:82:dd:8c:ae:3b:64:ee:68:15:de:e4:77:67:4b:
         e4:6d:8d:c5:73:26:ea:5f:48:b1:5b:bb:01:03:cc:5a:71:cb:
         15:45:d9:25:8f:26:37:37:ea:97:46:66:39:b9:e9:e1:6b:0a:
         4e:2e:f1:f0:b4:fa:fc:ed:8d:cd:f7:48:8b:8e:1b:28:0b:68:
         21:2d:cc:54:7c:47:8d:77:96:c6:20:49:85:c1:a1:54:7f:aa:
         3c:62:cc:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 06:29:48 2025 by rpki-client