Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b9375e-35b1-4268-994c-f35959fe7d4e/1/5VNEmgBiicjZNrKcfsWO2AnhgbY.mft
File:                     5VNEmgBiicjZNrKcfsWO2AnhgbY.mft (raw, json)
Hash identifier:          GkP4jnUUO3J3HR4ZqbIVECNzcXhbl7fX/eSJmgJsFwk=
Subject key identifier:   3E:3D:F3:08:9F:D2:43:EA:04:C5:B9:C7:AE:54:C1:62:BA:CB:70:C5
Authority key identifier: E5:53:44:9A:00:62:89:C8:D9:36:B2:9C:7E:C5:8E:D8:09:E1:81:B6
Certificate issuer:       /CN=e553449a006289c8d936b29c7ec58ed809e181b6
Certificate serial:       019685B66885A6A5733128DC1B80EA1C35F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5VNEmgBiicjZNrKcfsWO2AnhgbY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/b9375e-35b1-4268-994c-f35959fe7d4e/1/5VNEmgBiicjZNrKcfsWO2AnhgbY.mft
Manifest number:          01FE
Signing time:             Wed 30 Apr 2025 08:00:45 +0000
Manifest this update:     Wed 30 Apr 2025 08:00:45 +0000
Manifest next update:     Thu 01 May 2025 08:00:45 +0000
Files and hashes:         1: 5VNEmgBiicjZNrKcfsWO2AnhgbY.crl (hash: 6ls8Aocm0Sm9DEY20iMEDzSehufeHCLg0ZfiV8Uq4NQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/b9375e-35b1-4268-994c-f35959fe7d4e/1/5VNEmgBiicjZNrKcfsWO2AnhgbY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/b9375e-35b1-4268-994c-f35959fe7d4e/1/5VNEmgBiicjZNrKcfsWO2AnhgbY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5VNEmgBiicjZNrKcfsWO2AnhgbY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 08:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:85:b6:68:85:a6:a5:73:31:28:dc:1b:80:ea:1c:35:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e553449a006289c8d936b29c7ec58ed809e181b6
        Validity
            Not Before: Apr 30 08:00:45 2025 GMT
            Not After : May  1 08:00:45 2025 GMT
        Subject: CN=3e3df3089fd243ea04c5b9c7ae54c162bacb70c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0f:3d:d4:45:4f:af:ee:fa:15:c3:be:ee:16:
                    b7:79:e0:b6:cf:44:d7:b7:5e:56:8f:d4:92:c5:2e:
                    e2:45:19:e0:7b:70:e4:41:c3:da:5a:9c:3e:9b:dd:
                    4e:a1:6b:f3:48:d2:f0:14:6d:e1:ec:0d:8a:65:c8:
                    e9:ed:6b:14:b2:c2:07:b4:b0:c8:6a:04:83:1b:9e:
                    ec:4f:98:ad:04:35:2c:e8:78:ad:b0:10:36:a4:1c:
                    37:55:c0:41:44:0a:87:cc:35:53:e9:07:b9:a5:d1:
                    d7:bd:59:0f:79:25:3a:53:e0:82:6e:6b:7e:fa:0d:
                    d7:de:73:f6:fb:3d:be:0a:52:90:2d:93:85:c4:cd:
                    d9:e2:68:cd:f8:45:25:17:5b:96:f0:97:99:8e:e4:
                    e2:47:8a:d9:f2:59:b7:86:71:d7:9b:c5:6c:c2:3e:
                    bb:fa:a1:04:d8:38:76:ef:6f:3c:61:01:46:ee:18:
                    59:41:10:8f:4e:e1:d5:cb:b3:fb:1e:b4:b5:00:9c:
                    35:70:0f:30:24:05:8a:b3:30:65:b5:54:15:9f:77:
                    11:61:4e:d7:f4:45:0c:65:87:da:c5:b6:30:dc:01:
                    52:61:31:9c:46:45:b2:a1:05:bb:68:7e:3c:0c:55:
                    7d:a9:30:1e:93:3e:0c:c2:05:1d:db:98:5d:ac:ac:
                    36:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:3D:F3:08:9F:D2:43:EA:04:C5:B9:C7:AE:54:C1:62:BA:CB:70:C5
            X509v3 Authority Key Identifier:
                keyid:E5:53:44:9A:00:62:89:C8:D9:36:B2:9C:7E:C5:8E:D8:09:E1:81:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5VNEmgBiicjZNrKcfsWO2AnhgbY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b9375e-35b1-4268-994c-f35959fe7d4e/1/5VNEmgBiicjZNrKcfsWO2AnhgbY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b9375e-35b1-4268-994c-f35959fe7d4e/1/5VNEmgBiicjZNrKcfsWO2AnhgbY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:ce:3c:1b:43:99:7c:c6:6b:03:c6:db:c7:71:31:f5:ed:87:
         81:09:8a:7f:fc:65:3b:74:a5:0d:8b:e5:00:01:7b:b6:4e:f7:
         bd:9e:ea:5a:d7:c5:37:80:65:dd:94:c7:7d:14:ab:d9:b6:f5:
         24:cc:84:32:e2:c4:e5:5c:b9:0e:76:92:d2:b9:5b:4b:c5:55:
         e0:c8:0a:00:ec:c7:16:81:45:02:fd:ec:90:bb:52:70:57:62:
         6e:63:30:b0:1b:7d:2b:e7:85:20:57:d6:a7:d6:4b:cc:06:57:
         57:a6:39:bb:41:f1:89:2c:97:22:73:90:4c:e4:d0:73:c6:c4:
         4f:30:1d:18:0f:8d:f5:51:66:df:8d:40:cc:3f:35:bc:3b:51:
         4e:db:6b:fe:21:b2:7a:34:f8:e3:64:2d:68:5b:7d:81:70:53:
         52:f4:18:cd:86:27:26:d8:c7:f0:42:e4:09:d5:57:96:9e:f6:
         b8:dc:9f:87:f8:34:f1:55:ea:28:49:e3:d0:aa:c2:46:9c:0b:
         2a:1c:4b:84:e8:4b:98:78:13:58:60:97:3e:71:a5:e6:af:ea:
         b5:6d:8c:af:ad:64:8e:84:83:c2:22:97:ad:e2:aa:da:3c:c1:
         04:41:5a:fb:eb:87:06:9f:b1:bb:ca:1c:ce:98:63:de:bc:26:
         ac:0a:58:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 12:08:31 2025 by rpki-client