Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/6334ae-8661-4b1c-8430-9b9df443c863/1/e3hz-JwqmFMn6nmWJnQjp3UcYWk.mft
File:                     e3hz-JwqmFMn6nmWJnQjp3UcYWk.mft (raw, json)
Hash identifier:          Ib3ebl/HO72AJ4qj+kWVa1p1a0D3dmEm1xHKrt/om+c=
Subject key identifier:   56:D2:7F:57:36:27:20:02:CF:B5:CA:BB:2F:C9:C1:2E:40:53:10:29
Authority key identifier: 7B:78:73:F8:9C:2A:98:53:27:EA:79:96:26:74:23:A7:75:1C:61:69
Certificate issuer:       /CN=7b7873f89c2a985327ea7996267423a7751c6169
Certificate serial:       0196876D6FF7E37495C8EFBF86E4BD141215
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e3hz-JwqmFMn6nmWJnQjp3UcYWk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/6334ae-8661-4b1c-8430-9b9df443c863/1/e3hz-JwqmFMn6nmWJnQjp3UcYWk.mft
Manifest number:          1514
Signing time:             Wed 30 Apr 2025 16:00:18 +0000
Manifest this update:     Wed 30 Apr 2025 16:00:18 +0000
Manifest next update:     Thu 01 May 2025 16:00:18 +0000
Files and hashes:         1: e3hz-JwqmFMn6nmWJnQjp3UcYWk.crl (hash: wWZ6zXzZhltN3mq2oGs6VcK5sAjE2ImwXb3+7nfT1a4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/6334ae-8661-4b1c-8430-9b9df443c863/1/e3hz-JwqmFMn6nmWJnQjp3UcYWk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/6334ae-8661-4b1c-8430-9b9df443c863/1/e3hz-JwqmFMn6nmWJnQjp3UcYWk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e3hz-JwqmFMn6nmWJnQjp3UcYWk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 13:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:87:6d:6f:f7:e3:74:95:c8:ef:bf:86:e4:bd:14:12:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b7873f89c2a985327ea7996267423a7751c6169
        Validity
            Not Before: Apr 30 16:00:18 2025 GMT
            Not After : May  1 16:00:18 2025 GMT
        Subject: CN=56d27f5736272002cfb5cabb2fc9c12e40531029
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a5:b4:eb:cb:a0:52:0b:70:76:d3:68:92:8e:
                    5c:d2:39:70:75:fd:92:82:ac:a3:19:95:78:74:f0:
                    d6:c6:ef:13:4d:52:22:17:77:78:01:f2:0c:d9:a3:
                    14:44:1d:b6:3f:2a:87:32:78:43:03:33:37:97:e6:
                    b5:c1:ef:62:a8:93:31:28:57:9d:7d:b9:1e:e3:3b:
                    16:db:fe:b8:a5:ce:3d:01:be:03:bd:a2:e5:8c:73:
                    6a:32:bd:6c:3b:41:35:60:fe:e3:8a:b6:c6:97:37:
                    3a:e8:89:2a:dc:41:3c:05:e4:1e:ce:11:b6:31:4d:
                    8d:09:c4:ab:5e:3f:54:79:3e:b2:8a:63:b4:86:38:
                    fa:de:d0:5c:88:30:16:42:94:f6:94:e0:52:43:41:
                    8c:77:1b:71:6c:2a:08:54:28:9a:23:25:45:07:5f:
                    7a:ef:a9:8e:b7:22:82:4a:1b:02:94:32:a4:0c:c8:
                    81:0b:2f:50:70:80:70:b0:da:28:20:2f:55:9f:a3:
                    52:6a:90:85:9f:28:f1:97:fc:4f:4f:46:9d:75:db:
                    8c:70:11:fd:d6:9a:f8:7a:85:ca:a3:bf:8b:cd:8c:
                    7b:51:d1:0f:a4:8c:39:be:6f:b9:74:ae:9d:99:ce:
                    f1:86:72:72:4f:da:70:a5:8a:9d:08:19:3c:3c:73:
                    10:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:D2:7F:57:36:27:20:02:CF:B5:CA:BB:2F:C9:C1:2E:40:53:10:29
            X509v3 Authority Key Identifier:
                keyid:7B:78:73:F8:9C:2A:98:53:27:EA:79:96:26:74:23:A7:75:1C:61:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3hz-JwqmFMn6nmWJnQjp3UcYWk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6334ae-8661-4b1c-8430-9b9df443c863/1/e3hz-JwqmFMn6nmWJnQjp3UcYWk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6334ae-8661-4b1c-8430-9b9df443c863/1/e3hz-JwqmFMn6nmWJnQjp3UcYWk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:7a:3a:86:d8:c0:3d:0c:b9:d4:dd:81:d7:99:fc:86:97:6d:
         77:56:4e:8e:ac:2b:4f:52:c8:2c:6e:e0:f4:e9:93:e5:cc:8c:
         26:ba:46:0b:e9:75:a4:44:e6:9c:12:fc:84:51:2c:5c:35:45:
         fc:75:0f:81:18:3b:15:eb:68:d1:2a:bc:de:90:c9:0a:c1:3f:
         0d:69:e7:af:8a:86:1d:b6:d9:c0:1f:e0:9f:b7:2d:32:03:5d:
         a6:39:21:6b:31:fe:6c:ae:bc:be:5f:ce:76:97:96:ce:29:86:
         91:f5:47:7a:3b:db:e6:62:41:7b:df:64:20:37:08:28:12:f0:
         75:63:ee:1e:dd:57:db:ce:67:dd:32:e5:08:6b:64:fa:a8:44:
         8c:bb:b1:49:a4:ce:02:81:8a:4f:f9:a2:51:8f:25:23:30:86:
         b9:b1:b2:d2:30:35:ee:7a:52:29:11:d7:e3:9c:ee:49:4e:4e:
         7e:1b:74:7b:8f:10:86:79:ba:ce:65:46:2e:ea:bd:b5:a3:de:
         ea:e7:77:51:f7:a1:3d:86:70:64:e1:9c:23:18:f0:c0:0c:bc:
         61:ab:b9:bf:33:3f:79:a8:f9:a9:8a:4f:6a:8d:0d:c3:32:1b:
         75:7c:cc:05:05:d4:75:be:a1:a5:4c:21:92:03:57:77:1b:30:
         6b:3e:1a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:38:13 2025 by rpki-client