Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.mft
File:                     5318qB7lnVNFA7L3tj22K11ExW4.mft (raw, json)
Hash identifier:          /0v+j7MkLG6UlS7dTaMX4/yNyhFcaZr4QofpFj5rygo=
Subject key identifier:   C6:BE:A5:0D:47:D0:EF:EC:B2:98:7A:16:6E:49:4D:9C:B3:E8:12:5E
Authority key identifier: E7:7D:7C:A8:1E:E5:9D:53:45:03:B2:F7:B6:3D:B6:2B:5D:44:C5:6E
Certificate issuer:       /CN=e77d7ca81ee59d534503b2f7b63db62b5d44c56e
Certificate serial:       01965914334E1EFB92940E932C7FB153E835
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5318qB7lnVNFA7L3tj22K11ExW4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.mft
Manifest number:          0D68
Signing time:             Mon 21 Apr 2025 16:00:18 +0000
Manifest this update:     Mon 21 Apr 2025 16:00:18 +0000
Manifest next update:     Tue 22 Apr 2025 16:00:18 +0000
Files and hashes:         1: 5318qB7lnVNFA7L3tj22K11ExW4.crl (hash: D/NqpVuhxvOJ2IsbYXpNAxEFFffiRXu4lm1t93NeP/A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5318qB7lnVNFA7L3tj22K11ExW4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:59:14:33:4e:1e:fb:92:94:0e:93:2c:7f:b1:53:e8:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e77d7ca81ee59d534503b2f7b63db62b5d44c56e
        Validity
            Not Before: Apr 21 16:00:18 2025 GMT
            Not After : Apr 22 16:00:18 2025 GMT
        Subject: CN=c6bea50d47d0efecb2987a166e494d9cb3e8125e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:55:e9:24:e9:3d:81:4f:62:e2:5d:0b:d6:f3:
                    af:cc:af:fe:52:2f:0c:3f:b0:65:1e:4a:08:63:54:
                    03:e2:21:b1:bc:c0:34:3b:ee:d3:4f:2b:f5:3e:8f:
                    f9:1e:13:96:c4:46:eb:b3:e1:d4:b2:09:1b:3f:ae:
                    6a:53:52:49:5b:df:5a:69:a4:6b:db:42:67:a8:76:
                    7a:50:c8:85:fe:a4:a6:c7:57:0a:82:99:cf:b6:91:
                    2e:6d:36:7c:70:46:48:11:4c:e6:e9:cb:80:cb:3d:
                    a7:a9:09:9d:b8:45:b7:18:a2:db:02:d7:ef:46:e8:
                    31:08:d5:8a:ba:2b:51:41:cf:bb:ea:09:db:e6:44:
                    6c:31:e3:3e:f6:1e:0b:55:65:7b:ef:ac:31:b1:3b:
                    e1:85:3d:7e:45:12:af:71:75:14:69:9b:95:f2:e4:
                    eb:79:fb:53:32:f9:b7:94:8e:67:a4:52:c8:3b:3c:
                    c3:0b:24:68:ad:ea:e5:08:40:01:ad:6a:1f:8c:c4:
                    b1:4c:57:90:1b:99:3f:a5:d7:49:a7:c7:75:d9:b1:
                    97:0a:0d:f4:52:78:50:ed:56:e0:ed:34:54:8b:9e:
                    a5:46:05:b6:ce:df:0e:43:10:61:a0:5b:0c:d7:e2:
                    7d:56:11:a8:94:6e:00:5a:f2:15:e2:cd:9f:24:fa:
                    bd:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:BE:A5:0D:47:D0:EF:EC:B2:98:7A:16:6E:49:4D:9C:B3:E8:12:5E
            X509v3 Authority Key Identifier:
                keyid:E7:7D:7C:A8:1E:E5:9D:53:45:03:B2:F7:B6:3D:B6:2B:5D:44:C5:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5318qB7lnVNFA7L3tj22K11ExW4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:5f:7d:e8:f4:b7:61:d9:f6:10:d7:31:9b:83:cc:6e:52:b5:
         49:74:f5:58:ee:f0:39:39:8d:48:34:05:a0:21:3f:75:7c:2b:
         92:9c:4e:29:07:ef:2b:06:d4:94:f8:eb:62:15:d2:3e:c0:52:
         13:e0:31:1f:de:c3:a5:35:30:60:e6:e1:50:3a:d1:1c:34:9f:
         81:8f:5c:a0:17:d5:81:fe:4a:05:0c:c9:ec:81:58:79:7e:b1:
         bf:22:3a:18:ab:5a:fa:8a:9e:f4:c7:4c:f8:9f:d9:73:cc:de:
         24:7e:a8:5d:d8:88:42:5f:7f:82:1b:72:bf:4f:c4:56:1f:f2:
         1a:4d:5a:e6:ce:a8:b0:46:d2:7e:d0:66:8e:ad:10:66:7f:9f:
         6e:1e:32:df:23:98:f1:16:ff:a4:5b:fd:db:0b:7a:1e:c3:b8:
         15:e2:92:9c:3b:d1:1b:6f:d8:15:5d:c7:dd:59:31:fd:b0:88:
         d3:72:e8:60:91:74:55:40:1d:ab:80:e5:1a:4e:3d:d5:96:7d:
         c2:6a:c8:b3:c5:5b:55:d0:39:ff:17:10:e2:2e:13:28:06:3f:
         58:14:dc:bf:d6:7d:98:a0:4c:bd:44:52:30:09:da:f6:0d:d5:
         d7:54:1a:23:ac:21:1b:95:7d:fb:56:c0:a8:fc:e5:2a:b5:94:
         6f:0d:26:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:09:21 2025 by rpki-client