Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/56fd41-0681-4c50-b17f-4bb57617157d/1/eJwCNiZh7UHo-Xohsan6yuU96P4.mft
File:                     eJwCNiZh7UHo-Xohsan6yuU96P4.mft (raw, json)
Hash identifier:          0u68/llBE0hvK3QLeacQFXZKPF3p9QNkewrU2YQ0AFU=
Subject key identifier:   1B:49:EA:3C:D5:C9:82:18:FB:14:62:F9:D9:4F:D3:C6:6F:DF:E1:FC
Authority key identifier: 78:9C:02:36:26:61:ED:41:E8:F9:7A:21:B1:A9:FA:CA:E5:3D:E8:FE
Certificate issuer:       /CN=789c02362661ed41e8f97a21b1a9facae53de8fe
Certificate serial:       0196421EBDECEC95DE52FB1B2CC943747C22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eJwCNiZh7UHo-Xohsan6yuU96P4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/56fd41-0681-4c50-b17f-4bb57617157d/1/eJwCNiZh7UHo-Xohsan6yuU96P4.mft
Manifest number:          026B
Signing time:             Thu 17 Apr 2025 05:00:33 +0000
Manifest this update:     Thu 17 Apr 2025 05:00:33 +0000
Manifest next update:     Fri 18 Apr 2025 05:00:33 +0000
Files and hashes:         1: eJwCNiZh7UHo-Xohsan6yuU96P4.crl (hash: exRy+Qn/Q9Dmp+ChYMgpwlF/rOqzs2D0XmzPHMLQEDI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/56fd41-0681-4c50-b17f-4bb57617157d/1/eJwCNiZh7UHo-Xohsan6yuU96P4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/56fd41-0681-4c50-b17f-4bb57617157d/1/eJwCNiZh7UHo-Xohsan6yuU96P4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eJwCNiZh7UHo-Xohsan6yuU96P4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:42:1e:bd:ec:ec:95:de:52:fb:1b:2c:c9:43:74:7c:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=789c02362661ed41e8f97a21b1a9facae53de8fe
        Validity
            Not Before: Apr 17 05:00:33 2025 GMT
            Not After : Apr 18 05:00:33 2025 GMT
        Subject: CN=1b49ea3cd5c98218fb1462f9d94fd3c66fdfe1fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b2:62:f8:c0:5b:0f:17:ad:53:db:46:64:01:
                    d3:af:c1:15:e2:70:c3:71:86:b1:b6:41:32:4c:d2:
                    37:b3:d9:41:60:0e:80:91:77:37:2f:24:d9:e3:8f:
                    33:71:33:95:59:10:81:09:d7:af:7d:b9:5b:bf:53:
                    c8:e9:44:4c:99:2b:64:5a:4d:fb:5e:87:cd:81:ef:
                    47:ad:53:32:b2:eb:da:4c:b8:5c:fd:1b:1a:21:05:
                    48:c2:56:c5:b2:f1:d5:fa:62:26:d4:c2:f3:dc:ae:
                    31:26:59:00:b1:06:8f:66:5a:5a:bb:76:bc:58:e2:
                    6b:da:1d:c7:d2:26:0a:20:85:bf:ac:45:3d:10:a0:
                    e1:88:86:81:0f:e8:94:68:56:13:59:f1:82:d7:06:
                    ce:48:a2:81:a6:33:5e:ac:f9:07:c5:62:5e:3b:6f:
                    42:b8:a5:70:84:1c:39:0c:50:36:0d:91:a9:08:7d:
                    b6:d2:af:f2:f2:58:0b:18:7d:7d:a1:08:1d:88:a4:
                    af:e7:36:8d:57:e5:89:71:ac:59:01:58:65:87:59:
                    7f:e0:0f:5d:96:40:8f:f3:f3:a7:71:e8:c5:d1:33:
                    2d:31:29:11:66:bb:74:ed:07:18:b3:a2:39:14:dd:
                    79:e9:c4:b9:25:a0:f3:bf:78:ec:06:f5:bb:d2:82:
                    97:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:49:EA:3C:D5:C9:82:18:FB:14:62:F9:D9:4F:D3:C6:6F:DF:E1:FC
            X509v3 Authority Key Identifier:
                keyid:78:9C:02:36:26:61:ED:41:E8:F9:7A:21:B1:A9:FA:CA:E5:3D:E8:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eJwCNiZh7UHo-Xohsan6yuU96P4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/56fd41-0681-4c50-b17f-4bb57617157d/1/eJwCNiZh7UHo-Xohsan6yuU96P4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/56fd41-0681-4c50-b17f-4bb57617157d/1/eJwCNiZh7UHo-Xohsan6yuU96P4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:99:60:28:38:9c:6d:ec:32:b5:7b:39:39:29:42:63:e1:a0:
         a7:9f:71:59:de:f6:26:a4:e5:f0:27:24:30:a6:25:cd:16:f8:
         13:ea:bd:cd:2a:5b:7f:0b:0d:ea:3c:33:2d:f8:6c:49:d8:b8:
         86:b6:c3:c6:f9:ba:6e:ca:08:2e:6e:4d:73:fb:8b:eb:f0:60:
         50:b1:7a:a5:ce:95:e2:76:cd:6e:42:7c:95:8e:b2:97:b2:e9:
         db:d0:eb:92:52:80:7e:6a:e8:f1:47:3d:d2:e1:eb:85:9c:38:
         b9:1f:da:31:52:35:a7:87:5e:09:93:69:80:8d:82:28:b3:a2:
         0b:be:a1:95:b3:e8:a9:d0:73:e4:92:99:f1:ec:1e:41:f3:12:
         3f:d3:37:48:6a:87:e3:d4:13:7a:8b:52:b9:94:6b:cd:d3:4c:
         01:12:48:c0:ad:c3:1d:82:60:97:ad:65:3e:62:e8:b7:c5:8a:
         8c:48:7e:44:35:53:d8:51:e5:58:62:5f:38:6a:92:97:06:2b:
         ba:96:90:51:58:f3:76:36:d8:b0:f0:23:59:d9:60:65:8c:80:
         8d:c6:b5:ae:5b:19:63:f9:aa:53:75:89:61:41:a2:2e:fc:4e:
         93:00:72:8a:12:52:5c:9a:34:f1:85:c8:aa:77:3e:9d:86:a0:
         b9:d1:2b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:14:03 2025 by rpki-client