Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft
File:                     1eKDzL8RaYtvIuwXtfY-OlPkESA.mft (raw, json)
Hash identifier:          Argv2ow4AZu/MkCC1FizG1APiThWcnmTBtAkE0cEhqA=
Subject key identifier:   91:50:0B:0D:04:91:32:58:7F:B3:BD:61:D2:22:CB:5D:8B:22:21:B4
Authority key identifier: D5:E2:83:CC:BF:11:69:8B:6F:22:EC:17:B5:F6:3E:3A:53:E4:11:20
Certificate issuer:       /CN=d5e283ccbf11698b6f22ec17b5f63e3a53e41120
Certificate serial:       0196876E2D7FBAA653E9872917298FB19F61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1eKDzL8RaYtvIuwXtfY-OlPkESA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft
Manifest number:          1514
Signing time:             Wed 30 Apr 2025 16:01:06 +0000
Manifest this update:     Wed 30 Apr 2025 16:01:06 +0000
Manifest next update:     Thu 01 May 2025 16:01:06 +0000
Files and hashes:         1: 1eKDzL8RaYtvIuwXtfY-OlPkESA.crl (hash: KY9+pKCwZFj8wk/oaFP7nUmSJMyX+OZyDTZGR9sF/VQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1eKDzL8RaYtvIuwXtfY-OlPkESA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 13:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:87:6e:2d:7f:ba:a6:53:e9:87:29:17:29:8f:b1:9f:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5e283ccbf11698b6f22ec17b5f63e3a53e41120
        Validity
            Not Before: Apr 30 16:01:06 2025 GMT
            Not After : May  1 16:01:06 2025 GMT
        Subject: CN=91500b0d049132587fb3bd61d222cb5d8b2221b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:2b:7f:ad:ba:7b:51:76:fb:cf:3f:02:3c:18:
                    26:e4:a9:72:2a:6c:53:74:67:7f:56:76:a3:1c:56:
                    14:fb:d8:b9:b2:7f:04:8e:67:d6:ed:68:ca:8f:87:
                    da:65:b2:cf:e5:6d:a1:d5:8b:63:a8:31:59:f9:b1:
                    d5:31:b1:c1:b2:bf:08:67:26:ab:d0:b2:a6:97:85:
                    f5:cb:73:c9:16:b3:09:19:5a:be:00:c1:ff:ac:bb:
                    b9:33:1e:ca:a6:0b:9c:20:5c:59:9d:f2:e0:3d:04:
                    56:04:22:5d:51:bc:56:95:a0:37:39:e1:60:70:93:
                    7d:a7:db:ed:63:98:4f:56:6e:cb:8d:c0:5a:d7:bc:
                    44:3c:08:40:e7:34:04:e0:42:ad:5f:e8:6b:f5:5e:
                    3e:1b:cf:39:d8:3c:6c:94:28:d2:36:3a:10:84:04:
                    91:60:cc:26:cf:04:fa:ba:8e:8b:97:a9:17:27:57:
                    ed:6d:40:8d:cd:ca:2a:ca:96:c0:f4:d3:81:37:c1:
                    e9:71:0e:db:8f:4a:32:be:60:bf:8a:18:b0:cb:0d:
                    25:56:38:ba:4c:35:33:3c:93:cc:dd:43:b3:02:da:
                    24:9e:49:c4:41:8b:1d:ed:95:91:1c:d3:5e:7a:b9:
                    54:6b:ef:be:98:03:df:19:86:d7:9f:67:76:74:52:
                    c3:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:50:0B:0D:04:91:32:58:7F:B3:BD:61:D2:22:CB:5D:8B:22:21:B4
            X509v3 Authority Key Identifier:
                keyid:D5:E2:83:CC:BF:11:69:8B:6F:22:EC:17:B5:F6:3E:3A:53:E4:11:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1eKDzL8RaYtvIuwXtfY-OlPkESA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:28:91:a3:93:b9:e5:45:62:aa:fc:2b:ce:7f:8d:65:b2:d5:
         ec:f9:f1:ba:c3:99:25:5d:77:5d:62:6b:6c:b8:df:1f:3a:3f:
         4c:d9:42:92:48:d1:23:d1:2a:73:4f:fd:d0:86:56:6d:1b:5c:
         94:7c:88:a1:4c:20:b7:56:a1:4d:9a:26:21:21:e6:e5:a8:e6:
         6e:a4:5a:1e:f1:75:af:2b:25:e6:73:c2:f6:a1:fa:5a:99:7d:
         d2:60:37:90:d1:98:a2:95:c4:f5:50:e3:b8:7b:61:67:e5:4f:
         60:be:cc:6e:b1:30:6a:ea:e1:64:0c:56:80:85:74:87:2d:4b:
         98:f5:e6:e4:ff:31:3d:d4:6a:cf:bb:9a:c7:d4:b1:82:f0:a3:
         dc:97:f2:b4:94:c0:b4:e2:58:f5:2b:df:ef:76:5c:d6:ad:52:
         57:5e:86:a4:90:54:3d:89:4e:1d:85:95:4d:7e:8a:eb:c5:29:
         31:ca:34:6e:bd:8c:f9:b7:2a:fd:c3:ec:79:5b:8e:6b:37:12:
         92:ec:b9:c2:52:73:a4:b8:20:36:96:94:da:3a:42:12:26:d0:
         c9:4f:c9:87:da:e2:6e:1a:43:6e:2b:42:74:65:ca:3f:ae:d4:
         27:3a:4e:90:03:40:15:7b:94:4c:00:4a:3f:20:84:05:10:1a:
         bc:9e:e1:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 23:11:38 2025 by rpki-client