Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.mft
File:                     5huaXW2YcDw4cqG7P5DRA2hcvQQ.mft (raw, json)
Hash identifier:          XrNmxsZYpdQ4IfJHAivRw7BCsCRAci71LD0jwSpZzAo=
Subject key identifier:   D7:34:CD:A6:D4:26:7C:09:74:3F:90:1A:EF:83:51:D6:F5:A1:86:22
Authority key identifier: E6:1B:9A:5D:6D:98:70:3C:38:72:A1:BB:3F:90:D1:03:68:5C:BD:04
Certificate issuer:       /CN=e61b9a5d6d98703c3872a1bb3f90d103685cbd04
Certificate serial:       01968A37742332C9DB291C4279BA646A4B14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5huaXW2YcDw4cqG7P5DRA2hcvQQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.mft
Manifest number:          1516
Signing time:             Thu 01 May 2025 05:00:11 +0000
Manifest this update:     Thu 01 May 2025 05:00:11 +0000
Manifest next update:     Fri 02 May 2025 05:00:11 +0000
Files and hashes:         1: 5huaXW2YcDw4cqG7P5DRA2hcvQQ.crl (hash: QfJm6ySH+XV9m4sSo9W63PUjM/JWWY2jzIODOCP1DZc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5huaXW2YcDw4cqG7P5DRA2hcvQQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 05:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8a:37:74:23:32:c9:db:29:1c:42:79:ba:64:6a:4b:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e61b9a5d6d98703c3872a1bb3f90d103685cbd04
        Validity
            Not Before: May  1 05:00:11 2025 GMT
            Not After : May  2 05:00:11 2025 GMT
        Subject: CN=d734cda6d4267c09743f901aef8351d6f5a18622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:56:da:9c:0a:0a:c8:28:82:78:41:d6:0a:ad:
                    37:ac:a5:39:d5:31:3a:db:f0:d7:a8:f6:35:b7:95:
                    b4:19:aa:43:4b:22:00:a4:71:b1:75:21:5d:a7:64:
                    ea:80:2d:b5:af:d8:f2:6a:a4:5c:bf:5c:7a:d0:69:
                    e1:e1:78:e4:33:72:56:5c:32:bf:fb:45:60:64:87:
                    84:a4:de:45:d5:69:b5:a0:85:73:96:84:0a:26:ca:
                    67:f0:67:df:10:f7:b5:ab:49:a3:2d:4d:25:5a:e8:
                    0c:b0:a1:06:2d:72:25:16:cd:7b:a8:5c:e0:24:7a:
                    8c:10:30:d3:8e:32:cb:54:9b:40:bc:4e:2b:0e:83:
                    7f:d0:11:e1:18:ed:ef:f4:de:97:84:14:22:1e:cb:
                    23:27:02:9b:0a:c8:bd:d4:11:1d:2f:52:46:40:de:
                    ef:16:40:f9:8b:ad:7f:0d:7b:b6:9d:21:bc:ca:b4:
                    fe:67:25:86:74:39:94:69:6c:43:ff:98:46:a5:8a:
                    eb:46:9e:14:fb:48:a5:f3:d2:ed:14:57:30:81:48:
                    f7:5f:8b:03:41:ea:fb:ca:62:e0:eb:ee:ef:da:b8:
                    2c:ec:be:71:1b:8f:6b:9d:a4:69:f7:2a:6b:fb:59:
                    dc:bc:aa:1c:09:0c:9e:f0:6b:5a:aa:d7:36:9a:2c:
                    85:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:34:CD:A6:D4:26:7C:09:74:3F:90:1A:EF:83:51:D6:F5:A1:86:22
            X509v3 Authority Key Identifier:
                keyid:E6:1B:9A:5D:6D:98:70:3C:38:72:A1:BB:3F:90:D1:03:68:5C:BD:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5huaXW2YcDw4cqG7P5DRA2hcvQQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:a6:ec:cf:6a:03:27:f1:0d:ba:69:cf:14:f2:95:a0:ea:ec:
         70:80:e0:b2:72:22:92:c9:a5:44:cb:25:f4:af:49:f5:3a:3d:
         3e:0b:17:ed:d5:1b:94:45:51:e9:86:ed:f5:85:5b:b6:f2:7d:
         16:7b:65:c2:10:11:86:87:5c:f3:1f:dc:f0:76:40:1a:52:3d:
         58:cc:30:e9:70:e7:bc:67:78:60:82:83:91:12:06:15:15:45:
         a9:1f:94:cc:8c:c9:68:85:0c:e4:c2:fb:24:f6:78:d5:a7:c1:
         af:4d:69:0c:d4:b5:24:f8:14:8c:2b:5e:de:28:39:28:b3:c5:
         eb:4c:4d:21:e6:b7:51:c1:30:29:87:0c:45:53:3f:d9:ee:d8:
         b5:34:92:1d:86:9b:66:8e:b4:61:85:29:f1:2f:e2:59:dc:4d:
         57:a2:5c:23:b9:2e:65:20:2e:b3:68:f0:b4:c4:9e:f8:dc:71:
         e8:84:35:42:73:d9:b5:c9:c3:13:0b:fa:6c:05:87:d1:9e:35:
         16:36:2b:02:b6:d6:f0:72:a8:8b:44:52:ef:ca:83:cf:b9:c4:
         85:21:1f:36:82:48:89:69:2c:e6:ab:57:ee:8b:62:4d:85:1e:
         cb:c8:1f:1c:95:95:4f:6b:3b:4f:90:b8:a7:e3:98:dd:e6:8f:
         0a:bb:9c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:14:44 2025 by rpki-client