Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.mft
File:                     Be02xlZG2ssRSqcsG7y3QYG3_0M.mft (raw, json)
Hash identifier:          GEo37xXx0W2umb3hEHXoth6e5RkyavvF/UC58jytfTc=
Subject key identifier:   5D:CB:0C:29:AA:FA:ED:89:A7:FD:2E:79:A4:78:8B:75:5E:E2:DA:9D
Authority key identifier: 05:ED:36:C6:56:46:DA:CB:11:4A:A7:2C:1B:BC:B7:41:81:B7:FF:43
Certificate issuer:       /CN=05ed36c65646dacb114aa72c1bbcb74181b7ff43
Certificate serial:       01976817A4C338A0D6FE476C803C93D9BF3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Be02xlZG2ssRSqcsG7y3QYG3_0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.mft
Manifest number:          10B9
Signing time:             Fri 13 Jun 2025 07:01:09 +0000
Manifest this update:     Fri 13 Jun 2025 07:01:09 +0000
Manifest next update:     Sat 14 Jun 2025 07:01:09 +0000
Files and hashes:         1: Be02xlZG2ssRSqcsG7y3QYG3_0M.crl (hash: T1qxHtUvx6URacx+JnEfleuhMMaj1XUkb2F+We6u5xI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Be02xlZG2ssRSqcsG7y3QYG3_0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 07:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:17:a4:c3:38:a0:d6:fe:47:6c:80:3c:93:d9:bf:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05ed36c65646dacb114aa72c1bbcb74181b7ff43
        Validity
            Not Before: Jun 13 07:01:09 2025 GMT
            Not After : Jun 14 07:01:09 2025 GMT
        Subject: CN=5dcb0c29aafaed89a7fd2e79a4788b755ee2da9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:9b:6c:4c:27:ad:aa:e1:fc:02:9a:7a:ff:25:
                    dc:fd:27:f5:a2:e5:4b:6d:71:e2:7c:1d:63:c3:ad:
                    b1:87:98:03:0b:56:e1:0a:c0:63:3d:f9:63:45:60:
                    cb:a5:42:4f:6f:eb:8c:1b:58:82:ed:5c:e3:ba:5a:
                    c8:b7:53:b3:14:3c:da:99:b3:61:95:f0:49:ce:eb:
                    d4:47:8e:04:34:55:73:41:d4:8e:ec:4c:45:45:ce:
                    c1:f6:84:dc:0a:83:1f:1d:04:f0:00:94:8e:8e:ab:
                    b3:dd:42:d0:8d:8a:48:a4:d6:35:3a:ba:cf:4c:f2:
                    3f:67:b3:19:68:eb:1d:9d:12:38:3d:8d:eb:bc:cf:
                    72:bb:95:ab:9b:16:4e:fd:dc:9c:c0:ce:f3:c5:0b:
                    2e:06:5d:b2:3b:5a:53:05:b6:87:cc:b2:28:f0:06:
                    16:ef:e9:83:f8:e5:d0:c8:38:7b:2d:93:5f:5a:28:
                    e2:57:5d:86:fe:69:ef:dc:67:1c:2d:04:2a:16:bc:
                    87:ad:60:02:f8:24:62:2d:aa:ec:fd:33:e9:9b:e6:
                    9e:7e:de:0a:92:fd:11:bb:23:7e:d9:2e:bd:af:0f:
                    02:35:7b:42:89:d6:99:61:b4:f2:99:bf:1f:be:aa:
                    86:55:95:fd:b1:5a:b2:82:45:cc:51:94:a1:ed:13:
                    99:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:CB:0C:29:AA:FA:ED:89:A7:FD:2E:79:A4:78:8B:75:5E:E2:DA:9D
            X509v3 Authority Key Identifier:
                keyid:05:ED:36:C6:56:46:DA:CB:11:4A:A7:2C:1B:BC:B7:41:81:B7:FF:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Be02xlZG2ssRSqcsG7y3QYG3_0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:f1:71:18:a8:25:0b:d2:f3:5f:87:8a:c1:da:b9:30:7a:59:
         33:4f:0a:5d:7d:13:32:d2:21:6c:f6:a1:a1:1a:21:43:87:54:
         cb:26:5c:b6:82:40:53:4b:2d:93:1b:74:bb:a2:77:85:66:2c:
         1a:8c:68:e8:c8:fb:b0:d1:aa:4e:b2:56:cc:73:36:60:03:c0:
         61:74:1a:8e:96:f0:0f:81:60:33:9f:c8:ec:e8:cb:0a:7b:d6:
         47:3b:4b:ea:fc:07:f7:41:23:9a:a2:52:be:ac:2e:02:e4:19:
         a2:8e:1e:86:e3:78:e9:eb:bb:1f:80:9b:57:90:d3:53:cc:7f:
         41:25:67:59:31:be:b3:c7:fb:2b:e2:29:0c:67:05:d8:d6:d2:
         07:58:72:16:32:e2:01:66:b2:04:ff:5b:4e:4a:58:a9:4c:4e:
         42:6c:9a:0a:bf:7d:00:d8:36:b5:e6:cd:bc:d9:72:95:ba:46:
         6a:25:81:30:28:54:19:7a:21:53:c8:19:a1:26:6d:bc:52:69:
         83:f5:30:7a:79:1a:51:eb:03:aa:4a:20:8c:05:da:3b:a1:be:
         b0:28:be:b8:7c:10:f1:83:56:cd:23:30:17:f9:bf:d4:9d:4f:
         65:fe:12:48:df:0f:4b:e1:9c:00:39:64:3e:01:28:15:57:64:
         44:fc:2b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 15:27:22 2025 by rpki-client