Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
File:                     q7zPUQ4allMK2M8UI_0lmLgv46Y.mft (raw, json)
Hash identifier:          3uzFPtBZedRmBqQ6KhvxrFbc5QgBGkOcCixtFqGL5xI=
Subject key identifier:   56:CD:62:36:65:0A:94:39:A1:06:79:32:3B:E6:E7:5C:DA:CF:E5:3E
Authority key identifier: AB:BC:CF:51:0E:1A:96:53:0A:D8:CF:14:23:FD:25:98:B8:2F:E3:A6
Certificate issuer:       /CN=abbccf510e1a96530ad8cf1423fd2598b82fe3a6
Certificate serial:       019748FA7C7FD8C882D392D2DC4353ACB212
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q7zPUQ4allMK2M8UI_0lmLgv46Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
Manifest number:          1579
Signing time:             Sat 07 Jun 2025 06:01:04 +0000
Manifest this update:     Sat 07 Jun 2025 06:01:04 +0000
Manifest next update:     Sun 08 Jun 2025 06:01:04 +0000
Files and hashes:         1: q7zPUQ4allMK2M8UI_0lmLgv46Y.crl (hash: 1Efy09/MaYFYGQh1mVSOiUUk8yKzC4Bau++X9W5UMq8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q7zPUQ4allMK2M8UI_0lmLgv46Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 06:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:fa:7c:7f:d8:c8:82:d3:92:d2:dc:43:53:ac:b2:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abbccf510e1a96530ad8cf1423fd2598b82fe3a6
        Validity
            Not Before: Jun  7 06:01:04 2025 GMT
            Not After : Jun  8 06:01:04 2025 GMT
        Subject: CN=56cd6236650a9439a10679323be6e75cdacfe53e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e1:d5:ae:80:fc:2e:7c:47:15:a7:19:88:b9:
                    43:53:74:a9:13:cf:c5:3f:05:5b:61:a7:65:33:28:
                    b6:1c:1f:90:25:ae:b4:84:ff:61:c6:34:06:b0:3f:
                    fd:64:0a:c3:0f:90:3d:e2:f7:09:da:cb:f6:57:44:
                    c7:0f:a5:ea:aa:8c:89:0c:f5:e1:ab:e4:a0:ec:4f:
                    be:2b:82:90:01:97:7c:bb:e4:2c:8c:5a:70:61:69:
                    03:79:dc:0f:7d:ec:c9:20:db:03:e2:d7:b2:16:f5:
                    e7:55:40:ac:75:d2:5f:94:21:67:c0:4e:4c:f8:7d:
                    3d:5b:b5:a5:98:e5:d2:87:4a:7e:c9:7d:22:b8:fe:
                    70:53:0e:a3:98:9a:e2:6a:43:4a:4d:01:f0:87:09:
                    e7:d6:f0:dd:49:c3:2c:6f:53:37:38:02:b7:dd:9b:
                    a8:f7:b9:64:a8:40:1a:15:0d:0d:4c:0f:ee:ea:64:
                    85:3d:8b:65:2c:44:74:29:e2:9f:5d:17:d3:8b:63:
                    8e:87:f9:f3:7f:45:2f:0c:3d:b6:7c:75:6a:5c:5a:
                    49:2d:d5:ad:59:ed:ca:de:73:74:69:e8:4f:f0:68:
                    56:37:94:8d:08:40:6c:1f:63:44:89:a9:03:91:3d:
                    ae:0a:7d:b8:ad:7d:d6:41:45:1e:3f:ea:12:a5:d8:
                    5e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:CD:62:36:65:0A:94:39:A1:06:79:32:3B:E6:E7:5C:DA:CF:E5:3E
            X509v3 Authority Key Identifier:
                keyid:AB:BC:CF:51:0E:1A:96:53:0A:D8:CF:14:23:FD:25:98:B8:2F:E3:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7zPUQ4allMK2M8UI_0lmLgv46Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:82:9c:1e:9c:74:64:01:df:c2:d8:81:de:3a:7a:76:d3:fe:
         6f:0b:f5:4a:34:51:7a:30:04:b8:9b:80:8b:1b:df:38:c4:52:
         63:3c:93:43:af:51:a3:f4:f1:5e:3f:b7:4f:54:d1:c5:5c:4e:
         39:2b:1a:2d:b5:b7:26:ef:8b:28:56:1a:82:c0:15:6e:46:8a:
         ab:63:3d:80:3a:2e:92:5f:cd:01:ab:dd:bb:c4:49:30:a0:13:
         93:8c:ab:d1:8c:a5:82:cf:8b:e7:6e:12:9a:d2:11:4b:d4:1a:
         5d:37:f3:2a:79:13:1e:7b:79:b5:02:1e:74:ce:f4:a6:47:7a:
         21:4f:31:89:4b:a1:e1:63:54:2c:2a:75:df:99:0f:7d:a5:9a:
         2e:15:f5:91:94:25:0d:5c:e8:75:fb:c3:7b:1c:cf:cb:91:b6:
         d2:b8:6a:9c:c2:b9:2f:0b:52:5b:f8:75:29:c7:3e:ca:2e:a3:
         ef:53:cd:da:ea:6a:36:02:ef:40:71:ef:a8:9b:98:1a:29:c0:
         06:e8:af:71:f7:42:6a:3c:55:62:91:20:19:f3:7c:99:fe:3e:
         0a:85:cd:dd:dc:36:c1:9d:08:04:e7:b6:d7:35:7c:ef:55:e3:
         e7:bf:91:0f:e6:35:61:45:1a:45:f2:98:cd:46:35:67:2c:5e:
         43:2d:bd:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:27:01 2025 by rpki-client