Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.mft
File:                     _C71HmsUo-6_tImOD6gTq2eIUTY.mft (raw, json)
Hash identifier:          wjB9z0zZRQ+L5dVTdgFAgpTGzjJM5pPfq36IpjFDhV0=
Subject key identifier:   C9:54:1D:44:A4:76:E9:78:45:A5:43:98:BB:06:12:14:3B:86:8D:45
Authority key identifier: FC:2E:F5:1E:6B:14:A3:EE:BF:B4:89:8E:0F:A8:13:AB:67:88:51:36
Certificate issuer:       /CN=fc2ef51e6b14a3eebfb4898e0fa813ab67885136
Certificate serial:       0197469E41A16F21E45D7346F71C234EB8D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_C71HmsUo-6_tImOD6gTq2eIUTY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.mft
Manifest number:          0CDB
Signing time:             Fri 06 Jun 2025 19:01:05 +0000
Manifest this update:     Fri 06 Jun 2025 19:01:05 +0000
Manifest next update:     Sat 07 Jun 2025 19:01:05 +0000
Files and hashes:         1: _C71HmsUo-6_tImOD6gTq2eIUTY.crl (hash: Y0DWvI/DSgck1eXxg4qZVGz1VCrlEhLBDgiwcRA8IWg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_C71HmsUo-6_tImOD6gTq2eIUTY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:9e:41:a1:6f:21:e4:5d:73:46:f7:1c:23:4e:b8:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc2ef51e6b14a3eebfb4898e0fa813ab67885136
        Validity
            Not Before: Jun  6 19:01:05 2025 GMT
            Not After : Jun  7 19:01:05 2025 GMT
        Subject: CN=c9541d44a476e97845a54398bb0612143b868d45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:5f:23:e9:12:1e:1a:6b:36:05:e8:ac:fe:b5:
                    d5:d2:a8:b2:7c:a3:b8:00:41:70:9e:3f:a9:ea:2c:
                    f0:16:90:a9:c2:bc:f6:89:97:18:30:86:94:b3:98:
                    c1:6d:bb:5d:7d:80:14:41:be:fd:af:25:1d:32:0c:
                    50:a1:ff:90:dc:53:ec:a8:51:ba:41:88:38:58:0f:
                    62:34:de:43:a5:a5:46:62:6a:0f:9b:bb:b0:c3:27:
                    53:f9:77:65:df:66:d0:4e:8f:f3:09:49:5b:67:c2:
                    c9:3d:bf:b3:9a:10:a1:fa:8a:f5:b1:f4:c6:a6:69:
                    0c:84:9b:59:61:64:32:bd:92:d7:40:4e:47:a4:e4:
                    d4:6e:6c:f6:8e:93:8b:a8:c7:51:4c:04:43:ef:d7:
                    33:9f:94:e4:b3:d0:95:72:90:c6:ab:37:8c:9b:df:
                    e3:3d:34:6a:3a:1a:ab:fc:62:03:5a:2d:9f:91:aa:
                    5e:09:27:e4:01:da:d7:81:69:0c:8b:6e:6b:f5:6d:
                    39:87:51:c1:89:ad:88:c8:91:f8:98:ab:17:ae:a3:
                    45:d9:7a:bc:03:82:61:52:b6:cd:83:b8:9c:26:26:
                    49:e4:f2:36:10:a3:7d:9a:58:fb:92:be:77:3e:84:
                    8f:15:70:cc:05:80:60:6c:c9:9b:41:d2:bc:1e:53:
                    df:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:54:1D:44:A4:76:E9:78:45:A5:43:98:BB:06:12:14:3B:86:8D:45
            X509v3 Authority Key Identifier:
                keyid:FC:2E:F5:1E:6B:14:A3:EE:BF:B4:89:8E:0F:A8:13:AB:67:88:51:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_C71HmsUo-6_tImOD6gTq2eIUTY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:a8:f4:73:2f:f4:7c:c3:f1:5a:59:dd:98:46:81:c6:35:dd:
         dd:08:09:15:16:3c:d1:f4:fa:e1:d9:57:e4:dd:80:bf:25:4f:
         eb:58:c5:2f:e9:3b:49:d2:0c:e8:fd:b5:b6:60:29:e7:70:b2:
         ee:3d:f6:42:18:6f:f6:b4:cf:a7:d3:92:e1:95:59:1b:72:3e:
         a5:64:82:66:82:d3:c2:03:9a:58:e8:53:6f:c7:d2:fd:ad:fc:
         a8:a6:c4:8d:c3:45:e6:93:e3:4b:66:79:55:05:0e:a2:ba:b9:
         85:d2:87:23:94:3a:2a:78:86:b0:ea:7a:cf:03:3c:74:52:79:
         13:3f:3c:87:8e:5a:85:e7:79:d7:00:77:31:f4:15:2b:45:4d:
         72:08:5f:27:22:4c:08:64:9d:49:9e:81:59:44:31:ce:52:90:
         c8:07:87:cf:01:ed:de:8c:8a:9f:6d:df:51:39:bf:69:4e:36:
         a6:32:bb:01:23:2a:da:93:a6:29:76:da:79:7c:3c:d1:7e:0a:
         75:c3:e3:aa:bc:06:9d:d0:c9:e5:84:15:80:20:7f:d7:41:91:
         fd:3f:8c:c9:f7:db:29:7c:ac:12:77:08:8a:e4:84:c7:e4:4f:
         3d:99:1e:e4:4e:b5:f9:7a:dc:8c:bd:cc:2c:6e:db:a1:8e:9f:
         c6:78:31:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:13:08 2025 by rpki-client