Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/442506-53f9-47db-b3b8-3ab21b523000/1/6X9KenczHtX3zn7oBowu29LQ034.mft
File:                     6X9KenczHtX3zn7oBowu29LQ034.mft (raw, json)
Hash identifier:          1hzIFi+N5sQZQ9zngJT47h52zMZQi7Ix5X+Ff1FLles=
Subject key identifier:   E5:92:1B:0A:12:04:EF:78:CA:85:C4:35:73:1F:53:EB:9F:49:A1:AD
Authority key identifier: E9:7F:4A:7A:77:33:1E:D5:F7:CE:7E:E8:06:8C:2E:DB:D2:D0:D3:7E
Certificate issuer:       /CN=e97f4a7a77331ed5f7ce7ee8068c2edbd2d0d37e
Certificate serial:       019677FB5AE3F627D6F71BD4D95087A1DF20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6X9KenczHtX3zn7oBowu29LQ034.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/442506-53f9-47db-b3b8-3ab21b523000/1/6X9KenczHtX3zn7oBowu29LQ034.mft
Manifest number:          150D
Signing time:             Sun 27 Apr 2025 16:01:23 +0000
Manifest this update:     Sun 27 Apr 2025 16:01:23 +0000
Manifest next update:     Mon 28 Apr 2025 16:01:23 +0000
Files and hashes:         1: 6X9KenczHtX3zn7oBowu29LQ034.crl (hash: 7QJa7/KeHfoQ4MMEZAaCWtlZQI+P9Idtx5IXfeXG6BU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/442506-53f9-47db-b3b8-3ab21b523000/1/6X9KenczHtX3zn7oBowu29LQ034.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/442506-53f9-47db-b3b8-3ab21b523000/1/6X9KenczHtX3zn7oBowu29LQ034.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6X9KenczHtX3zn7oBowu29LQ034.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:77:fb:5a:e3:f6:27:d6:f7:1b:d4:d9:50:87:a1:df:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e97f4a7a77331ed5f7ce7ee8068c2edbd2d0d37e
        Validity
            Not Before: Apr 27 16:01:23 2025 GMT
            Not After : Apr 28 16:01:23 2025 GMT
        Subject: CN=e5921b0a1204ef78ca85c435731f53eb9f49a1ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:e0:d3:ba:6c:f1:c8:86:5a:78:94:ee:9e:45:
                    68:4b:42:ea:86:43:8d:cc:01:70:fb:bc:a8:5d:03:
                    ce:e8:f1:37:73:5f:fc:3b:b1:98:0c:6c:22:bb:b8:
                    e5:e8:b7:5a:2d:81:53:4b:a2:3d:ee:e6:cd:5f:01:
                    66:ee:60:8b:d9:d9:af:8d:b6:66:ce:d9:fb:c0:16:
                    20:ec:33:0e:b2:e8:cf:6f:a9:c5:93:5a:97:28:57:
                    c1:00:e1:6e:bb:6e:45:40:81:44:25:41:fc:0d:fa:
                    f1:fc:89:b6:85:ca:a7:83:e0:9e:5a:79:c9:05:2c:
                    b0:2e:44:76:ee:99:ed:cf:8a:c8:2e:cb:a3:a4:73:
                    c1:f9:83:99:6c:58:cb:60:6b:d2:ad:1f:82:c2:c4:
                    ef:13:0a:21:06:5a:52:bb:4f:56:e8:30:44:e0:d4:
                    3f:f2:29:17:3f:3d:77:9f:a0:45:8c:c1:fa:79:17:
                    45:40:e7:8c:8d:89:db:9a:f5:fc:65:b5:79:3e:e6:
                    91:c5:3b:b8:d8:ac:a8:0b:ee:52:9d:91:ee:47:09:
                    02:56:08:46:8b:66:54:32:bc:fe:de:74:2d:88:64:
                    2a:7c:55:5f:97:c5:26:8b:4a:5b:18:d9:16:f2:d6:
                    b0:cb:61:68:e6:33:f9:26:81:36:42:15:91:90:bc:
                    51:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:92:1B:0A:12:04:EF:78:CA:85:C4:35:73:1F:53:EB:9F:49:A1:AD
            X509v3 Authority Key Identifier:
                keyid:E9:7F:4A:7A:77:33:1E:D5:F7:CE:7E:E8:06:8C:2E:DB:D2:D0:D3:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6X9KenczHtX3zn7oBowu29LQ034.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/442506-53f9-47db-b3b8-3ab21b523000/1/6X9KenczHtX3zn7oBowu29LQ034.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/442506-53f9-47db-b3b8-3ab21b523000/1/6X9KenczHtX3zn7oBowu29LQ034.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:e6:21:af:cf:39:02:97:e0:f8:ae:29:78:30:4e:07:0c:99:
         bd:18:4f:7f:e7:89:87:23:75:79:8f:26:a1:1b:db:f2:fc:eb:
         8a:65:51:9f:9d:0a:67:46:29:6e:7e:d6:88:6d:bf:04:a4:61:
         4b:40:1b:ec:50:fa:47:02:b7:60:e4:dd:90:36:e9:36:ae:2a:
         b1:20:04:da:90:f1:1b:73:7d:ac:dc:9b:c2:ba:5c:a1:65:da:
         aa:d1:d2:1f:2b:92:d5:c2:83:03:e5:ce:ac:55:34:1e:84:fd:
         2a:6b:28:da:0e:86:84:43:c4:83:9b:48:57:50:c4:1c:fd:c3:
         d4:b5:1a:be:3d:b5:7d:6d:0d:19:96:2c:f0:48:e9:52:ee:04:
         0a:7c:da:c0:f7:c9:ca:50:ca:30:a5:f0:d4:4c:49:6b:41:fb:
         40:0a:c2:d6:39:3d:24:b3:2d:a0:70:79:58:a6:b7:66:75:4c:
         1c:11:3c:3c:b0:77:bc:1a:70:b0:df:8b:9a:6b:eb:56:2d:0a:
         0a:62:e4:66:8e:bd:72:2b:74:f1:48:ba:35:63:f3:c2:eb:9e:
         b2:5e:24:e7:5b:df:bc:f8:d1:d7:7b:2b:39:55:87:4b:96:94:
         b6:e2:d0:f0:54:75:74:7f:37:5e:b0:c8:72:05:2c:1f:c8:4e:
         fa:46:b3:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:59:25 2025 by rpki-client