Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
File:                     5zhsF7RWELWLvgnNMMqfsMGWH9M.mft (raw, json)
Hash identifier:          K9Q9jksKDBePSetfb+SBNiks/FAN5sWmcK+U7D0c0Lg=
Subject key identifier:   CD:75:36:B1:5C:A2:41:65:9D:1B:37:75:78:92:3D:D1:B0:6D:D1:EF
Authority key identifier: E7:38:6C:17:B4:56:10:B5:8B:BE:09:CD:30:CA:9F:B0:C1:96:1F:D3
Certificate issuer:       /CN=e7386c17b45610b58bbe09cd30ca9fb0c1961fd3
Certificate serial:       01977A1D85D45B8F1C0821FF4F82C414CF65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5zhsF7RWELWLvgnNMMqfsMGWH9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
Manifest number:          06F1
Signing time:             Mon 16 Jun 2025 19:00:44 +0000
Manifest this update:     Mon 16 Jun 2025 19:00:44 +0000
Manifest next update:     Tue 17 Jun 2025 19:00:44 +0000
Files and hashes:         1: 5zhsF7RWELWLvgnNMMqfsMGWH9M.crl (hash: Enrz0VkyM9HgMfT1apKxooomuMTneLTDY8YoHT0pTtw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5zhsF7RWELWLvgnNMMqfsMGWH9M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 19:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7a:1d:85:d4:5b:8f:1c:08:21:ff:4f:82:c4:14:cf:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7386c17b45610b58bbe09cd30ca9fb0c1961fd3
        Validity
            Not Before: Jun 16 19:00:44 2025 GMT
            Not After : Jun 17 19:00:44 2025 GMT
        Subject: CN=cd7536b15ca241659d1b377578923dd1b06dd1ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0f:16:a4:6a:55:cd:f7:a2:4c:6f:95:64:a0:
                    74:c0:87:2c:76:90:a2:bf:66:c9:b4:3c:5b:3b:44:
                    f1:db:86:65:11:fb:5e:f9:2c:6e:83:c5:50:62:73:
                    11:51:0f:5d:c3:62:b1:57:1e:00:fe:0e:0e:b9:93:
                    c8:37:72:6e:a5:be:5e:16:ce:1f:d5:80:64:de:78:
                    93:47:85:59:e1:c9:45:08:a3:68:d7:70:29:23:e2:
                    86:f3:a3:f9:4c:1f:4d:c3:b9:c4:22:f5:65:41:90:
                    ff:ab:34:9b:56:01:3e:f7:36:4f:c7:84:cb:67:22:
                    e8:4f:1a:7c:37:37:e5:e1:e7:51:65:26:f3:2c:63:
                    cc:7f:e7:db:f2:90:1e:1e:9b:16:78:e3:9b:17:c7:
                    ea:23:84:7e:a6:5d:4d:35:a8:ef:07:ac:4d:1b:78:
                    1f:40:cc:40:0e:a1:3d:af:e8:59:b1:6f:4f:0a:18:
                    b0:a7:08:5a:d0:b6:f7:a0:13:56:e6:27:5b:c2:5f:
                    ee:83:bf:ed:f7:8a:d9:dc:ff:43:80:39:28:6d:58:
                    9b:f9:f3:44:e1:fb:a5:60:db:f1:01:19:a6:93:a5:
                    66:87:56:60:a8:65:22:20:25:30:2e:0b:37:48:03:
                    ea:8f:88:d8:c8:d1:89:16:61:b8:54:6c:bf:c5:52:
                    ef:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:75:36:B1:5C:A2:41:65:9D:1B:37:75:78:92:3D:D1:B0:6D:D1:EF
            X509v3 Authority Key Identifier:
                keyid:E7:38:6C:17:B4:56:10:B5:8B:BE:09:CD:30:CA:9F:B0:C1:96:1F:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zhsF7RWELWLvgnNMMqfsMGWH9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:60:d2:35:e3:a7:6a:0a:1b:99:99:04:70:8b:7a:48:67:9b:
         41:40:98:55:d9:d7:04:6c:48:7b:b3:57:76:b8:09:e4:dd:b3:
         c2:ff:f3:aa:c3:27:9e:4b:12:cc:fb:93:18:20:36:c5:82:45:
         5f:3d:66:5d:67:92:b8:b0:e3:22:70:f3:cd:d6:c3:a6:39:e7:
         3d:2c:7e:61:ac:b6:c9:39:7a:dd:4d:0e:20:6d:87:3a:49:de:
         7c:e7:bd:f4:e7:81:40:d4:21:dc:22:00:27:1c:9f:33:46:81:
         c1:cd:b8:db:84:05:a8:81:bb:d3:e8:54:4d:19:7b:80:b3:2e:
         cd:b5:ee:b5:41:59:48:c1:02:29:38:fe:14:e0:d8:2f:bc:a7:
         8f:e0:6b:73:0a:f5:0a:69:59:cf:5a:d3:47:50:42:6b:d9:fa:
         67:e0:e3:70:26:51:fa:dc:f9:47:46:2f:1c:dc:e7:b7:8d:7c:
         b8:b0:cf:c7:8b:3a:7e:d0:8d:b8:73:0b:83:b6:45:e5:ac:69:
         04:41:bf:49:7d:8e:08:42:22:af:c3:92:32:4a:79:fe:08:a3:
         c6:e5:2a:f2:17:f8:62:34:56:53:af:6a:a4:93:07:09:b4:3a:
         ff:13:fe:61:de:b9:b5:39:5e:72:ae:cb:59:c9:aa:33:11:f5:
         48:92:30:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 01:32:18 2025 by rpki-client