Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f3e344-e506-4cd9-941b-944d88109841/1/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.mft
File:                     5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.mft (raw, json)
Hash identifier:          AkdiatnF83WcWruR7DzncFQPX2GxIFsmlKV6m1JYZx4=
Subject key identifier:   FD:30:EB:95:EA:D1:88:21:39:36:00:54:E3:61:48:AB:CF:55:4C:90
Authority key identifier: E4:7E:92:BF:41:A5:A7:74:51:1F:B7:23:AF:94:AF:F0:D3:51:26:02
Certificate issuer:       /CN=e47e92bf41a5a774511fb723af94aff0d3512602
Certificate serial:       0196790D3B95240676E9AE22F664C0F3B486
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/f3e344-e506-4cd9-941b-944d88109841/1/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.mft
Manifest number:          0348
Signing time:             Sun 27 Apr 2025 21:00:32 +0000
Manifest this update:     Sun 27 Apr 2025 21:00:32 +0000
Manifest next update:     Mon 28 Apr 2025 21:00:32 +0000
Files and hashes:         1: 5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.crl (hash: 1San7hC0gn9BYbUcwZ8abwjemytfSmKRBPl0ea/L2b8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/f3e344-e506-4cd9-941b-944d88109841/1/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/f3e344-e506-4cd9-941b-944d88109841/1/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 21:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:79:0d:3b:95:24:06:76:e9:ae:22:f6:64:c0:f3:b4:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e47e92bf41a5a774511fb723af94aff0d3512602
        Validity
            Not Before: Apr 27 21:00:32 2025 GMT
            Not After : Apr 28 21:00:32 2025 GMT
        Subject: CN=fd30eb95ead1882139360054e36148abcf554c90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8a:7a:bc:62:04:67:e1:f7:50:81:b9:53:a3:
                    5f:93:53:fe:bf:8a:1e:27:17:be:ff:85:73:04:23:
                    32:55:1f:5f:60:9d:43:4d:f6:27:1d:0e:3a:1e:d5:
                    1a:f7:25:af:48:62:d5:63:40:04:ad:2e:47:0d:1f:
                    9c:7b:d8:50:a6:26:27:6f:67:ee:37:7d:51:16:04:
                    a9:27:6a:db:e1:8e:d2:2f:87:57:1d:11:6e:c7:ae:
                    05:1d:c3:d4:15:1a:82:37:b4:99:02:68:a3:fd:d4:
                    14:6d:a1:de:39:e6:27:cc:d1:93:19:76:0d:bc:76:
                    bc:59:83:c4:c6:53:69:ab:d8:1e:69:91:e9:e2:ef:
                    77:30:8d:ab:54:70:e7:da:c0:7b:22:9a:dd:08:cb:
                    b7:b6:31:d5:71:94:7f:51:c4:0d:f9:e4:7d:c6:49:
                    5e:72:00:a8:5a:e9:cf:96:70:3b:5a:96:14:84:f6:
                    e2:f2:98:f0:d0:bc:bc:8c:89:51:8f:e9:e2:f9:84:
                    b6:cf:75:f0:d3:bf:10:2b:29:8c:21:0f:7b:f7:63:
                    cb:22:96:32:6b:bd:1b:0d:b5:4b:a7:b7:55:81:ae:
                    07:c2:89:17:ad:55:f3:7f:92:54:b6:70:13:98:e2:
                    51:3d:c3:69:45:06:dd:b4:43:74:03:90:1d:68:3f:
                    e3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:30:EB:95:EA:D1:88:21:39:36:00:54:E3:61:48:AB:CF:55:4C:90
            X509v3 Authority Key Identifier:
                keyid:E4:7E:92:BF:41:A5:A7:74:51:1F:B7:23:AF:94:AF:F0:D3:51:26:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f3e344-e506-4cd9-941b-944d88109841/1/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f3e344-e506-4cd9-941b-944d88109841/1/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:43:7e:f0:17:4a:8d:81:b0:41:3d:9f:9d:d1:1c:73:42:53:
         dd:04:45:e8:28:8a:d3:c7:a5:32:40:cc:57:53:f8:29:76:a3:
         51:90:0d:11:f1:9f:ad:81:a5:23:24:5f:6b:03:48:ba:ad:98:
         0a:92:6d:ea:5e:7e:54:1e:38:6c:3b:73:56:5a:1d:23:4e:44:
         a5:a4:7f:70:5a:18:7f:83:c0:af:03:18:98:f3:e9:3e:cd:32:
         b8:83:cb:94:d0:4e:9b:bd:b8:47:75:4a:25:b9:1e:fd:83:ce:
         8d:31:9f:5c:88:8b:a3:0c:17:70:a1:69:56:9d:85:49:99:13:
         52:ab:fd:93:b5:80:32:4f:92:6d:0b:72:2f:a7:63:b9:4e:f9:
         9c:1e:90:b3:ec:f3:d9:7b:5a:59:29:f7:77:ef:18:55:7a:57:
         66:cc:49:b5:9b:f1:5b:50:46:01:5d:57:a1:cb:f6:01:1d:21:
         ec:30:1b:cd:1f:1a:7c:de:b5:b9:8b:1d:10:86:3b:90:42:70:
         6d:25:b2:76:3c:ca:25:ad:38:e3:5d:bf:d2:a6:56:a5:5a:0d:
         31:df:bc:f4:7a:98:b9:b4:50:46:86:92:25:37:9b:e7:f7:af:
         23:91:68:9c:3f:1a:2c:c9:28:20:9b:a4:84:37:b3:f4:38:3b:
         13:81:3c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:08:48 2025 by rpki-client