Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f3e344-e506-4cd9-941b-944d88109841/1/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.mft
File:                     5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.mft (raw, json)
Hash identifier:          JN6wXJQx61vBGtHcvm3s8DqTy8fjkXNKHXRGSrk4lGg=
Subject key identifier:   0F:B2:6A:97:8F:9E:C6:81:23:54:65:89:9E:D8:7A:2A:52:6E:97:56
Authority key identifier: E4:7E:92:BF:41:A5:A7:74:51:1F:B7:23:AF:94:AF:F0:D3:51:26:02
Certificate issuer:       /CN=e47e92bf41a5a774511fb723af94aff0d3512602
Certificate serial:       019646D79439861A65876B0778A1ECE9580D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/f3e344-e506-4cd9-941b-944d88109841/1/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.mft
Manifest number:          032E
Signing time:             Fri 18 Apr 2025 03:00:55 +0000
Manifest this update:     Fri 18 Apr 2025 03:00:55 +0000
Manifest next update:     Sat 19 Apr 2025 03:00:55 +0000
Files and hashes:         1: 5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.crl (hash: epuDJ2D9aA4GtGee+cuo21OjCdgge2q8GAGxGbKB4Ag=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/f3e344-e506-4cd9-941b-944d88109841/1/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/f3e344-e506-4cd9-941b-944d88109841/1/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:46:d7:94:39:86:1a:65:87:6b:07:78:a1:ec:e9:58:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e47e92bf41a5a774511fb723af94aff0d3512602
        Validity
            Not Before: Apr 18 03:00:55 2025 GMT
            Not After : Apr 19 03:00:55 2025 GMT
        Subject: CN=0fb26a978f9ec681235465899ed87a2a526e9756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6d:54:28:fc:2f:42:23:be:21:3f:ef:ef:3b:
                    15:9c:49:5e:b9:6b:69:ea:ac:09:63:3b:6e:12:95:
                    57:78:57:82:5c:61:83:26:85:3a:16:25:67:8e:fb:
                    38:fd:fd:9c:53:fd:fa:e7:fe:98:4e:11:92:c3:c7:
                    fa:ae:92:43:cf:ea:1c:74:e9:60:0c:05:a5:b8:1e:
                    8b:e8:b1:5c:a0:8c:45:38:5a:1f:6f:87:28:d1:70:
                    6e:cc:a0:3b:6b:06:78:95:7f:e9:25:66:0d:61:4e:
                    40:4f:cd:4a:44:ee:29:23:42:2a:9c:c9:21:7a:5c:
                    b7:94:f6:1f:51:a0:0e:b9:d1:fa:84:de:9a:05:29:
                    93:0e:e0:f3:5f:8c:2c:b6:ca:33:17:34:8a:7c:84:
                    a6:29:ca:54:d2:4f:25:7d:51:45:de:40:8b:2d:1e:
                    78:f8:d1:37:0b:92:c7:8a:db:6b:12:e5:0f:aa:fc:
                    2c:de:9d:dd:97:de:e2:24:41:18:08:78:05:de:bc:
                    54:9f:b8:30:3d:bd:ad:4d:6e:89:ae:85:d2:d1:a7:
                    55:dc:b4:0f:ec:76:b9:ff:b5:23:a8:a7:01:fa:8e:
                    69:6e:7d:1b:7f:a0:65:da:9f:07:c6:0f:64:7a:ca:
                    50:4c:7b:c4:be:0f:2f:1e:52:41:b9:c2:8d:8c:c7:
                    8d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:B2:6A:97:8F:9E:C6:81:23:54:65:89:9E:D8:7A:2A:52:6E:97:56
            X509v3 Authority Key Identifier:
                keyid:E4:7E:92:BF:41:A5:A7:74:51:1F:B7:23:AF:94:AF:F0:D3:51:26:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f3e344-e506-4cd9-941b-944d88109841/1/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f3e344-e506-4cd9-941b-944d88109841/1/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:86:b1:8b:ae:d3:72:b7:e3:da:44:ab:ce:ed:99:40:e1:be:
         39:ab:57:d9:f5:90:12:33:26:12:2a:2f:85:4b:87:4a:aa:9b:
         9a:70:07:66:67:65:44:a3:08:46:47:f4:08:2b:fc:c2:cf:a3:
         19:c4:6d:73:43:9f:8e:86:0f:a5:92:b5:b0:ce:93:37:c5:3d:
         ca:55:56:fc:93:1b:e7:e4:8d:d0:ef:ed:7e:ed:02:35:bb:91:
         f4:ac:eb:de:96:5d:f8:ee:a3:8d:5d:50:59:b2:05:b3:05:80:
         8c:fb:e3:08:1a:c6:bd:5a:38:0e:0a:3d:42:6a:24:e9:e1:17:
         9c:41:1d:d9:3a:74:40:9c:ac:72:22:c7:b2:d7:bd:de:85:b0:
         0a:1a:24:ff:77:25:76:4c:7a:fc:da:2a:4e:ea:16:d0:21:71:
         2c:95:24:96:29:d9:02:18:13:aa:01:bc:50:6d:3f:ad:16:63:
         25:26:8b:04:df:9f:99:48:73:06:a8:5a:5e:62:ee:c1:7f:41:
         5d:f1:a1:28:0e:5a:75:e8:0b:0b:79:35:90:50:83:62:38:25:
         48:e1:ff:95:e1:03:d0:48:22:a0:35:50:1a:e7:4a:94:cc:ce:
         7c:33:46:84:f0:7d:05:92:60:d4:fa:25:17:f6:b1:65:1a:0b:
         12:76:91:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:53:48 2025 by rpki-client