Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft
File:                     rakwWHtP0v73KPBW7KhohCLDuXw.mft (raw, json)
Hash identifier:          P9+MrQi8VjHeGCVj8mL218YUsMVKIStMg9YTEp1DIYA=
Subject key identifier:   F1:60:19:6C:F0:7E:50:91:25:54:E5:38:19:44:B9:D9:C5:DF:E8:0E
Authority key identifier: AD:A9:30:58:7B:4F:D2:FE:F7:28:F0:56:EC:A8:68:84:22:C3:B9:7C
Certificate issuer:       /CN=ada930587b4fd2fef728f056eca8688422c3b97c
Certificate serial:       0196876DC0CE2C8475F9E3CC2D3AC3E2C5B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rakwWHtP0v73KPBW7KhohCLDuXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft
Manifest number:          09E6
Signing time:             Wed 30 Apr 2025 16:00:38 +0000
Manifest this update:     Wed 30 Apr 2025 16:00:38 +0000
Manifest next update:     Thu 01 May 2025 16:00:38 +0000
Files and hashes:         1: rakwWHtP0v73KPBW7KhohCLDuXw.crl (hash: 4tT1q864Pj+joDm7gsVLnymltFQ8dzJmc95dl8597Ik=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rakwWHtP0v73KPBW7KhohCLDuXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 16:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:87:6d:c0:ce:2c:84:75:f9:e3:cc:2d:3a:c3:e2:c5:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ada930587b4fd2fef728f056eca8688422c3b97c
        Validity
            Not Before: Apr 30 16:00:38 2025 GMT
            Not After : May  1 16:00:38 2025 GMT
        Subject: CN=f160196cf07e50912554e5381944b9d9c5dfe80e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:64:92:e6:11:aa:63:c6:29:84:22:5d:2f:50:
                    38:08:20:7f:4c:37:1b:79:fc:db:7a:b5:9b:17:c2:
                    17:00:ff:a0:5a:79:ae:83:5e:7f:c6:2a:9b:85:85:
                    8e:1e:7a:6a:0d:ba:72:75:d6:3a:61:66:25:83:af:
                    84:1b:25:7a:38:12:b2:e9:a6:a5:94:42:a6:a5:4a:
                    a6:ba:8a:37:d9:24:d8:5f:18:99:8b:e2:79:4d:22:
                    aa:df:95:8e:d8:0d:ce:b5:2b:c5:fb:a1:e8:2b:13:
                    e1:b5:fe:77:5b:e9:0f:fb:ab:3a:55:74:e0:e1:11:
                    56:c0:a2:45:af:7f:77:dc:52:0a:31:f3:7e:32:d5:
                    72:b5:83:94:d4:ff:62:87:a0:28:06:61:9e:10:9a:
                    db:d4:d1:c9:93:b4:5c:61:7a:6c:b0:77:6e:7e:10:
                    b9:d7:ee:f0:00:cc:aa:b8:cb:a4:ff:00:d3:15:fd:
                    eb:4a:e4:50:a0:e4:34:7f:a3:d1:36:f7:b9:e9:28:
                    88:89:15:0d:b1:03:00:55:a4:a4:18:d3:05:a2:64:
                    3b:35:dd:4c:31:7f:0d:3c:9c:e5:26:b3:3a:42:28:
                    17:af:3d:17:47:0c:78:ca:b5:13:61:b2:58:06:0a:
                    e6:13:7d:fd:21:da:f2:ec:7b:1f:0b:3e:59:38:36:
                    34:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:60:19:6C:F0:7E:50:91:25:54:E5:38:19:44:B9:D9:C5:DF:E8:0E
            X509v3 Authority Key Identifier:
                keyid:AD:A9:30:58:7B:4F:D2:FE:F7:28:F0:56:EC:A8:68:84:22:C3:B9:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rakwWHtP0v73KPBW7KhohCLDuXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:f0:e0:18:73:4c:86:f0:95:f0:74:92:3a:3a:17:e7:da:a8:
         db:41:81:29:13:49:f7:d4:07:46:1e:fa:f7:dd:8e:64:1d:e1:
         22:bd:fc:d2:e8:39:26:8f:18:12:37:55:f1:fa:27:c2:4b:6f:
         d4:f6:9e:9d:dc:93:01:9d:14:3a:ba:93:d8:13:3a:a7:0b:0c:
         cb:15:54:41:e3:97:83:05:4e:8a:f4:89:3d:f8:e9:2e:90:11:
         7c:e5:11:c0:18:38:33:84:59:a8:da:ec:04:b1:1c:57:f0:be:
         e6:cd:ec:81:53:47:c4:fc:8e:3f:c9:0e:16:07:83:88:64:03:
         0c:b9:17:e6:60:26:b8:8e:7a:c2:c3:6a:87:0c:9d:05:ad:d0:
         50:54:2f:cb:f8:65:1c:f1:d0:1d:90:5e:f1:e6:8a:18:ba:5c:
         3f:0a:b3:52:51:70:f7:b0:bd:e5:2d:dd:62:90:60:3b:48:b3:
         8a:31:76:2a:5e:7d:13:6f:9f:ed:d6:0d:f0:5d:e8:d3:8c:31:
         a8:67:e9:1b:6f:8a:eb:40:05:ef:f9:25:36:64:a5:91:72:e8:
         52:b4:63:34:a0:53:ed:74:a5:b4:4b:d5:7f:f8:c0:12:39:cd:
         bf:e7:2d:ac:71:58:4e:b7:bd:5c:27:59:a4:a3:b7:0b:e7:1b:
         f0:0f:f5:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:52:02 2025 by rpki-client