Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.mft
File:                     5zqbo56LjiuL9OiCUq-_3czN0aE.mft (raw, json)
Hash identifier:          L8HmFAO6Qf17h9ZnBJQ8UwR6muYjK38aPjB1cObuoCY=
Subject key identifier:   37:4C:6A:51:CA:57:12:FA:F1:C1:09:5F:E3:26:4A:03:B0:78:10:29
Authority key identifier: E7:3A:9B:A3:9E:8B:8E:2B:8B:F4:E8:82:52:AF:BF:DD:CC:CD:D1:A1
Certificate issuer:       /CN=e73a9ba39e8b8e2b8bf4e88252afbfddcccdd1a1
Certificate serial:       01976960A4E2A6EAD0330C4757949ECE68EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5zqbo56LjiuL9OiCUq-_3czN0aE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.mft
Manifest number:          0EB4
Signing time:             Fri 13 Jun 2025 13:00:30 +0000
Manifest this update:     Fri 13 Jun 2025 13:00:30 +0000
Manifest next update:     Sat 14 Jun 2025 13:00:30 +0000
Files and hashes:         1: 5zqbo56LjiuL9OiCUq-_3czN0aE.crl (hash: 7X84Cdr/b+j+YF7C0s0rKu0xYoOeMiFE94+rtdKNt24=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5zqbo56LjiuL9OiCUq-_3czN0aE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:60:a4:e2:a6:ea:d0:33:0c:47:57:94:9e:ce:68:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e73a9ba39e8b8e2b8bf4e88252afbfddcccdd1a1
        Validity
            Not Before: Jun 13 13:00:30 2025 GMT
            Not After : Jun 14 13:00:30 2025 GMT
        Subject: CN=374c6a51ca5712faf1c1095fe3264a03b0781029
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:70:b7:30:59:46:bb:54:83:71:22:ad:4a:e9:
                    87:20:fc:6e:18:f1:bb:0b:35:23:df:1c:e9:a6:3d:
                    a8:95:0b:39:02:d6:62:67:aa:e6:ba:ff:9c:00:40:
                    71:0b:93:c3:c8:2a:94:87:a7:fd:2a:fc:60:04:d7:
                    43:e1:ec:4f:d2:d9:7a:94:de:51:16:61:d4:ce:7f:
                    bf:8d:1d:03:4c:fc:e5:aa:c0:c2:c8:90:f6:3e:9d:
                    09:60:6c:38:b7:e0:8e:36:eb:37:79:eb:10:d9:c7:
                    1e:b6:08:53:67:60:8d:52:c8:54:1d:57:ea:72:67:
                    bd:d5:de:a9:a2:d2:cd:ba:98:59:52:a7:61:d4:bf:
                    18:81:2d:cc:1c:bc:ce:71:c9:e6:a3:66:a2:e2:bf:
                    76:68:6e:44:fb:b0:1b:4b:b3:f0:94:99:9d:08:e7:
                    32:1d:29:e1:0f:d0:83:63:db:61:5f:e7:f9:b9:64:
                    37:60:ea:16:ba:8a:c2:02:bd:33:07:24:67:2e:b9:
                    89:a8:fe:7a:3f:ae:50:7a:9e:84:f5:4d:77:43:8c:
                    a9:22:84:4c:9f:ee:66:af:59:cd:69:a5:32:e1:52:
                    5b:aa:73:fa:2c:9b:65:9d:f4:7f:40:5b:2c:07:b1:
                    23:69:b9:49:9d:87:c4:40:da:76:0b:10:3c:9e:36:
                    cd:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:4C:6A:51:CA:57:12:FA:F1:C1:09:5F:E3:26:4A:03:B0:78:10:29
            X509v3 Authority Key Identifier:
                keyid:E7:3A:9B:A3:9E:8B:8E:2B:8B:F4:E8:82:52:AF:BF:DD:CC:CD:D1:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zqbo56LjiuL9OiCUq-_3czN0aE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:9e:42:c0:bb:40:b1:44:bc:31:a3:5b:e8:df:7d:0b:8c:ff:
         6a:a9:d9:54:4f:db:31:54:1a:05:88:ba:3c:b2:5b:c9:ab:ee:
         5f:9c:31:82:d0:ca:ec:bb:91:83:2a:ad:2a:be:ea:85:9e:6b:
         b5:1f:b8:61:49:19:8c:cf:af:ee:83:9e:3d:1b:81:50:fb:e5:
         38:b9:e7:e4:6d:d8:17:79:dc:1a:d2:b2:a7:ee:df:08:38:ec:
         63:63:ab:50:87:cf:3d:a4:c9:0c:84:f7:3e:bb:89:2c:9c:53:
         8f:20:5e:f1:da:e6:72:f8:9d:0c:f2:dd:79:81:bf:1b:dc:2b:
         79:fa:13:94:ea:85:87:4d:ae:da:16:4b:4d:bc:78:e4:18:8b:
         56:68:7c:ca:76:2a:f0:a3:55:7b:26:5a:26:44:5a:f1:c8:7d:
         30:bf:e9:47:ec:8e:1a:99:7e:2e:1a:05:34:f4:94:97:ec:6f:
         44:4b:40:a2:72:18:a3:33:8f:db:41:9b:e6:7b:36:d4:3b:68:
         d8:66:89:f4:5a:0e:9f:a9:d8:f6:2c:fb:c9:e6:e8:0c:21:3a:
         a2:f5:a5:17:42:40:c1:46:09:82:ac:7b:ec:8e:d2:29:d5:e5:
         e1:85:6e:01:ee:65:dd:ae:34:a3:b4:82:a1:e9:2b:18:98:68:
         84:9a:97:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 20:53:38 2025 by rpki-client