Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft
File:                     1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft (raw, json)
Hash identifier:          O2PO3Z42+0EcgncHiJYdHbruALO1de8T+p6lT8Oq3do=
Subject key identifier:   B3:41:AD:1C:CF:39:58:0E:37:1B:F6:8F:F2:40:8D:0A:CF:DE:87:C9
Authority key identifier: FB:95:9F:B9:0A:15:8F:17:DE:5D:82:96:DF:95:44:82:A8:D6:21:1C
Certificate issuer:       /CN=fb959fb90a158f17de5d8296df954482a8d6211c
Certificate serial:       01975BA4FB5912291C17C2700DCA61CF9A6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-5WfuQoVjxfeXYKW35VEgqjWIRw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft
Manifest number:          03DF
Signing time:             Tue 10 Jun 2025 21:00:28 +0000
Manifest this update:     Tue 10 Jun 2025 21:00:28 +0000
Manifest next update:     Wed 11 Jun 2025 21:00:28 +0000
Files and hashes:         1: 1-5WfuQoVjxfeXYKW35VEgqjWIRw.crl (hash: JXDHwAGFYx0MeGXJuI+xE1O117uxYRmU1LX4b8R7zUg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-5WfuQoVjxfeXYKW35VEgqjWIRw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 20:45:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5b:a4:fb:59:12:29:1c:17:c2:70:0d:ca:61:cf:9a:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb959fb90a158f17de5d8296df954482a8d6211c
        Validity
            Not Before: Jun 10 21:00:28 2025 GMT
            Not After : Jun 11 21:00:28 2025 GMT
        Subject: CN=b341ad1ccf39580e371bf68ff2408d0acfde87c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f7:fb:08:eb:27:14:57:48:49:8f:f2:a2:48:
                    cc:7c:38:da:08:d9:74:83:0e:de:09:d6:9e:ff:52:
                    a5:19:7a:c5:1e:bd:1a:4a:d1:c8:28:99:f9:fe:12:
                    fc:b9:ec:4d:f1:ce:84:f2:41:30:e6:d2:af:c7:c8:
                    aa:8e:da:df:1c:b1:2f:41:c0:10:1c:a4:40:db:4c:
                    ee:52:8b:54:e1:19:3e:69:69:20:0a:89:44:ec:a3:
                    ae:ec:d6:e5:1e:9a:42:16:e8:44:ee:fe:16:94:e4:
                    01:27:82:71:35:ff:06:e4:37:85:88:9a:d6:47:51:
                    7d:8b:66:26:e6:e8:ac:ff:ad:69:42:ab:bd:bf:6b:
                    36:2c:ac:ac:4a:9d:1a:8c:66:7d:d2:f6:83:f8:11:
                    25:28:5e:c2:c5:14:f8:ad:7b:21:61:1c:64:f3:a6:
                    b9:3b:d5:57:4d:15:df:03:69:1a:17:8c:92:a5:b9:
                    4f:b2:b2:1b:61:87:85:34:ab:aa:bd:a5:37:05:7e:
                    ae:aa:6f:5f:17:6d:24:59:a4:bd:56:d5:cd:00:03:
                    b0:2b:a8:d3:87:3b:6e:3b:47:ac:83:bf:88:a7:f1:
                    f9:9c:ef:e0:20:4c:e7:23:97:a9:36:7b:3d:d5:3e:
                    c7:5e:1d:94:47:7c:0b:86:c1:65:ad:30:95:2d:28:
                    a5:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:41:AD:1C:CF:39:58:0E:37:1B:F6:8F:F2:40:8D:0A:CF:DE:87:C9
            X509v3 Authority Key Identifier:
                keyid:FB:95:9F:B9:0A:15:8F:17:DE:5D:82:96:DF:95:44:82:A8:D6:21:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5WfuQoVjxfeXYKW35VEgqjWIRw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:69:1c:a2:c1:05:88:1f:cc:ff:8c:30:4f:53:67:97:de:5d:
         07:40:d3:24:95:55:91:cc:b9:39:5e:d5:ce:1f:08:37:43:71:
         39:20:97:6b:a3:69:30:57:92:5f:92:74:ee:76:b2:75:f0:c2:
         18:f7:2b:93:4f:86:af:cc:57:1b:01:ed:1f:d5:a3:02:14:2a:
         64:da:f9:c0:3a:56:0d:b3:fc:15:b5:2c:32:2e:17:31:a7:fd:
         e5:fb:fc:ea:df:2a:e9:bb:4c:94:13:d6:84:62:a0:e0:58:cb:
         ff:3b:5a:11:c0:2f:ec:7a:b6:de:d5:51:e6:b7:a3:23:7d:7d:
         61:fd:2d:f9:81:ff:27:22:c2:cc:29:cf:7f:98:8e:a5:23:98:
         e6:48:8c:93:ec:21:1d:bb:28:03:4e:be:c4:0e:b5:1e:98:f4:
         ca:6a:ea:59:fa:f1:51:c7:85:8c:94:91:82:c7:d9:e7:e7:12:
         90:0d:fa:a9:0a:11:f3:50:a0:a1:4b:67:73:6c:36:38:67:fa:
         a1:d8:3d:a7:f0:c3:97:56:d9:01:72:80:fe:dc:ff:7e:e6:d8:
         99:fa:d6:63:02:96:12:0a:f8:84:8e:8b:80:7f:90:ec:27:33:
         01:ca:e6:c2:e8:b7:9c:70:06:86:95:0e:df:a7:ad:be:a5:b4:
         2d:fb:3e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 04:12:47 2025 by rpki-client