Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
File:                     5zhsF7RWELWLvgnNMMqfsMGWH9M.mft (raw, json)
Hash identifier:          C16hNIfmj0ZB69AV8OUv3FomX3n7VX8K98ANUW/xXAg=
Subject key identifier:   77:59:EB:2B:7E:52:BA:8B:5B:48:49:F5:52:24:36:62:0E:72:42:8A
Authority key identifier: E7:38:6C:17:B4:56:10:B5:8B:BE:09:CD:30:CA:9F:B0:C1:96:1F:D3
Certificate issuer:       /CN=e7386c17b45610b58bbe09cd30ca9fb0c1961fd3
Certificate serial:       019682EC40A1AF3187D493E5A5BB4756BB76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5zhsF7RWELWLvgnNMMqfsMGWH9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
Manifest number:          0671
Signing time:             Tue 29 Apr 2025 19:00:43 +0000
Manifest this update:     Tue 29 Apr 2025 19:00:43 +0000
Manifest next update:     Wed 30 Apr 2025 19:00:43 +0000
Files and hashes:         1: 5zhsF7RWELWLvgnNMMqfsMGWH9M.crl (hash: I4Stcxg0o+p03napr5dMnwNar3ZXE+86NfPep6Py62U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5zhsF7RWELWLvgnNMMqfsMGWH9M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 15:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:82:ec:40:a1:af:31:87:d4:93:e5:a5:bb:47:56:bb:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7386c17b45610b58bbe09cd30ca9fb0c1961fd3
        Validity
            Not Before: Apr 29 19:00:43 2025 GMT
            Not After : Apr 30 19:00:43 2025 GMT
        Subject: CN=7759eb2b7e52ba8b5b4849f5522436620e72428a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5b:d5:17:2f:3a:e4:8b:ae:d9:d5:18:56:27:
                    37:55:d7:ef:2c:7c:81:74:20:87:d5:6e:02:5e:00:
                    ca:c2:90:ef:98:f8:4d:d1:37:ef:e5:79:71:0c:ae:
                    41:8c:f7:de:56:4a:85:e3:a4:00:60:ca:2e:6a:80:
                    2c:2e:88:24:50:3b:8a:66:87:36:9b:3b:3c:fe:83:
                    6a:88:8c:0a:29:d8:21:a0:7e:30:5a:e0:a8:db:a1:
                    69:95:9e:99:e8:14:b8:4f:e9:1f:7f:6f:21:93:f9:
                    d1:5c:ba:dc:a0:16:e7:24:53:9b:07:51:5a:e2:2d:
                    e8:e7:5d:af:ba:75:7d:ff:c3:7f:94:62:ac:8b:ec:
                    64:41:1f:45:18:22:ff:38:1f:a5:1a:1a:54:30:71:
                    c7:6d:af:e6:12:cf:dd:2d:46:b5:3e:02:cd:11:6c:
                    98:6a:53:ec:cf:9a:c8:55:e7:f5:e1:7d:d1:45:cf:
                    b7:cb:bc:e1:f4:23:b6:d9:95:79:1a:1b:23:71:12:
                    48:33:84:36:b2:37:7c:24:23:fe:4f:6c:3d:2e:a6:
                    bd:85:4e:77:c6:3b:8b:17:c1:54:7a:8e:ee:90:4d:
                    7a:60:67:b8:0b:72:0f:ce:20:88:13:5d:84:8f:b2:
                    cb:71:de:56:ae:9e:19:f4:d5:c5:44:4a:30:b3:7a:
                    87:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:59:EB:2B:7E:52:BA:8B:5B:48:49:F5:52:24:36:62:0E:72:42:8A
            X509v3 Authority Key Identifier:
                keyid:E7:38:6C:17:B4:56:10:B5:8B:BE:09:CD:30:CA:9F:B0:C1:96:1F:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zhsF7RWELWLvgnNMMqfsMGWH9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:63:3f:10:d5:cf:f1:c2:48:b7:d0:ce:a1:97:bc:19:88:13:
         f0:0c:ab:3f:7f:94:fb:04:eb:6b:73:4c:2a:0e:8c:be:08:64:
         66:49:63:dd:fb:f3:7b:23:8c:b9:14:d7:8c:39:f9:95:b2:17:
         6d:4d:fc:dc:e8:98:a3:2b:8f:86:25:f8:e4:a9:e7:77:5f:5b:
         61:a5:5b:e3:6c:61:fd:b1:f6:70:a3:58:9a:9f:82:38:7c:a7:
         1f:ec:4b:dd:98:3c:82:2a:ff:69:e2:08:3e:a5:90:fa:b9:1c:
         13:81:dc:ac:ad:3a:00:0d:fa:01:43:cf:ec:60:6d:42:45:04:
         1d:f9:bc:9e:4e:2c:70:a5:1c:0e:5b:0b:fa:02:10:f8:76:13:
         83:37:45:b7:7a:0d:79:8e:28:40:d7:5b:0f:40:42:73:65:60:
         0b:bc:93:b1:74:71:13:75:8d:76:9d:ef:d3:d8:d5:c4:b1:50:
         3b:47:c0:bb:8a:e2:f0:b4:ef:81:c7:68:77:24:6f:33:27:c4:
         31:1f:dd:e3:c5:5b:90:73:b3:82:2b:47:e4:82:6a:d0:a8:54:
         99:1f:1c:c0:1f:6c:c5:c7:da:fc:10:94:66:e0:67:13:78:fb:
         6e:93:74:cb:5e:a0:55:3b:68:bb:01:e7:e4:fb:24:50:f4:9c:
         91:62:22:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 21:56:00 2025 by rpki-client