Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/e4a668-fbd6-4553-ae9f-0bbb2381ba88/1/69xd5v5ftQVVoFyXxbDdR369C_U.mft
File:                     69xd5v5ftQVVoFyXxbDdR369C_U.mft (raw, json)
Hash identifier:          9uv5j++Q0JcXdcKSXdrPhKEkmNP+9/owOmo1FI94yuE=
Subject key identifier:   06:23:9A:C4:AB:27:C4:34:DB:4C:3C:9D:CF:9F:58:C9:DB:AB:11:98
Authority key identifier: EB:DC:5D:E6:FE:5F:B5:05:55:A0:5C:97:C5:B0:DD:47:7E:BD:0B:F5
Certificate issuer:       /CN=ebdc5de6fe5fb50555a05c97c5b0dd477ebd0bf5
Certificate serial:       019685487D041DE7F047AB8334A074C83529
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/69xd5v5ftQVVoFyXxbDdR369C_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/e4a668-fbd6-4553-ae9f-0bbb2381ba88/1/69xd5v5ftQVVoFyXxbDdR369C_U.mft
Manifest number:          1512
Signing time:             Wed 30 Apr 2025 06:00:42 +0000
Manifest this update:     Wed 30 Apr 2025 06:00:42 +0000
Manifest next update:     Thu 01 May 2025 06:00:42 +0000
Files and hashes:         1: 69xd5v5ftQVVoFyXxbDdR369C_U.crl (hash: SBY8/zHdYZ2RoGtzww36ri2TMEcSlZ8bgrhQ1hexgwM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/e4a668-fbd6-4553-ae9f-0bbb2381ba88/1/69xd5v5ftQVVoFyXxbDdR369C_U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/e4a668-fbd6-4553-ae9f-0bbb2381ba88/1/69xd5v5ftQVVoFyXxbDdR369C_U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/69xd5v5ftQVVoFyXxbDdR369C_U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:85:48:7d:04:1d:e7:f0:47:ab:83:34:a0:74:c8:35:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebdc5de6fe5fb50555a05c97c5b0dd477ebd0bf5
        Validity
            Not Before: Apr 30 06:00:42 2025 GMT
            Not After : May  1 06:00:42 2025 GMT
        Subject: CN=06239ac4ab27c434db4c3c9dcf9f58c9dbab1198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:6c:03:85:30:f8:dd:b5:a2:9f:8b:33:29:80:
                    11:55:bc:66:88:37:77:2c:73:dc:4e:a0:63:35:ee:
                    60:d1:4e:5f:22:18:5e:5f:6e:54:53:35:8e:9d:dc:
                    89:99:e0:f4:ee:85:62:46:4a:b5:27:31:ed:fc:12:
                    3c:eb:86:04:21:67:1b:0d:92:d5:90:d4:a9:6c:a5:
                    b0:52:be:38:5d:e4:72:0f:db:41:15:a2:2c:5e:72:
                    32:12:58:59:21:f4:2f:2a:48:c3:9d:8f:46:8f:a0:
                    3c:fc:3a:dd:a2:7f:90:12:49:5d:24:68:78:f4:a8:
                    cc:25:ca:5c:cc:37:99:c6:ad:55:4e:d0:85:92:62:
                    08:e0:61:08:0c:51:db:2f:61:b8:b7:d1:a6:21:2f:
                    47:d0:cc:ec:2c:8a:93:4f:32:38:82:c2:ad:7e:6f:
                    2f:68:88:21:23:3a:70:b2:e6:a3:c9:93:17:77:67:
                    23:8d:a9:d1:49:bf:ad:24:74:27:36:1f:7e:fe:01:
                    2a:9b:12:7c:aa:1c:ac:82:26:23:33:36:cc:12:92:
                    5a:4a:3a:3d:e5:10:93:72:c9:0a:7f:91:08:36:9a:
                    9c:48:1e:b6:7e:e4:80:22:a1:df:a7:a4:b6:0b:2a:
                    6e:75:4d:bb:fd:66:9f:20:2e:d9:77:70:f5:60:66:
                    b3:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:23:9A:C4:AB:27:C4:34:DB:4C:3C:9D:CF:9F:58:C9:DB:AB:11:98
            X509v3 Authority Key Identifier:
                keyid:EB:DC:5D:E6:FE:5F:B5:05:55:A0:5C:97:C5:B0:DD:47:7E:BD:0B:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/69xd5v5ftQVVoFyXxbDdR369C_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/e4a668-fbd6-4553-ae9f-0bbb2381ba88/1/69xd5v5ftQVVoFyXxbDdR369C_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/e4a668-fbd6-4553-ae9f-0bbb2381ba88/1/69xd5v5ftQVVoFyXxbDdR369C_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:ab:06:a6:c4:74:ec:4b:c8:a5:4b:c6:dd:39:39:73:36:07:
         91:91:38:05:eb:05:e7:8d:b8:69:2f:72:64:0a:bc:67:33:e1:
         5d:5f:f9:50:64:03:42:93:c1:b3:6e:64:ec:df:89:45:ba:0a:
         88:b0:31:10:39:42:cc:df:4b:d2:d2:18:dc:f6:57:0c:38:64:
         32:c5:d2:a6:78:87:6b:20:ec:07:4f:41:f5:a1:3e:e1:d0:40:
         0a:e9:6f:c7:fe:12:4c:f8:02:28:cc:32:87:e5:43:d3:df:ee:
         0b:1c:29:10:79:5a:0a:60:f2:dd:54:ff:2b:e4:41:f7:eb:88:
         a8:e6:20:59:b8:76:38:a7:1c:cc:a7:1d:13:03:4b:db:b5:46:
         01:c4:04:06:11:be:6b:7f:04:49:68:a0:a4:1e:35:18:13:e2:
         34:56:94:a0:73:0d:40:7f:eb:03:47:8d:54:3c:58:cc:51:e9:
         a3:02:3f:21:9d:23:83:b9:fb:af:5e:98:f3:0e:2a:3b:8e:89:
         57:d2:9e:8f:fb:67:c2:55:bd:68:99:cb:57:7b:06:45:2e:5b:
         9b:f2:a3:cd:31:4c:1f:25:8d:9e:c5:0c:b1:1b:28:f2:e3:39:
         c3:7d:93:e5:78:bd:e6:90:00:92:05:87:c6:e4:50:ed:45:d9:
         1b:8c:29:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:10:50 2025 by rpki-client