Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/5fdc37-f30d-470a-9a01-4cccb4c7918f/1/ep6pPHnsxdXKkDAazTqJLW4uHnM.mft
File:                     ep6pPHnsxdXKkDAazTqJLW4uHnM.mft (raw, json)
Hash identifier:          o+ch8k3kHUabncvkusUwU9goSk/7PqzHL33W2+lZWIQ=
Subject key identifier:   15:00:3C:B1:8E:F9:9B:E3:39:FF:5F:C3:34:D7:39:93:89:E9:98:71
Authority key identifier: 7A:9E:A9:3C:79:EC:C5:D5:CA:90:30:1A:CD:3A:89:2D:6E:2E:1E:73
Certificate issuer:       /CN=7a9ea93c79ecc5d5ca90301acd3a892d6e2e1e73
Certificate serial:       019745F981C88776DFF8F1ED71A47F101F82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ep6pPHnsxdXKkDAazTqJLW4uHnM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/5fdc37-f30d-470a-9a01-4cccb4c7918f/1/ep6pPHnsxdXKkDAazTqJLW4uHnM.mft
Manifest number:          1050
Signing time:             Fri 06 Jun 2025 16:01:08 +0000
Manifest this update:     Fri 06 Jun 2025 16:01:08 +0000
Manifest next update:     Sat 07 Jun 2025 16:01:08 +0000
Files and hashes:         1: ep6pPHnsxdXKkDAazTqJLW4uHnM.crl (hash: iqEtunG+9UvSEuWAtHABEo1OkvU6OeM423Ig0GRKDlQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/5fdc37-f30d-470a-9a01-4cccb4c7918f/1/ep6pPHnsxdXKkDAazTqJLW4uHnM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/5fdc37-f30d-470a-9a01-4cccb4c7918f/1/ep6pPHnsxdXKkDAazTqJLW4uHnM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ep6pPHnsxdXKkDAazTqJLW4uHnM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 16:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:45:f9:81:c8:87:76:df:f8:f1:ed:71:a4:7f:10:1f:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a9ea93c79ecc5d5ca90301acd3a892d6e2e1e73
        Validity
            Not Before: Jun  6 16:01:08 2025 GMT
            Not After : Jun  7 16:01:08 2025 GMT
        Subject: CN=15003cb18ef99be339ff5fc334d7399389e99871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:11:cf:9c:66:83:e3:d7:7f:fe:7d:ac:d0:74:
                    dc:06:fb:fd:91:52:09:89:0a:ad:f9:51:6e:57:e0:
                    70:d0:11:97:5c:9e:fb:82:c8:aa:5b:6f:5e:d8:2b:
                    a9:4a:2d:d1:64:78:0c:81:9c:06:52:d5:56:e2:fd:
                    2b:36:19:7d:0f:12:a3:20:6d:f2:09:11:52:11:d2:
                    e4:24:9e:ad:5f:1d:41:f4:5f:7f:d5:c4:3f:91:a5:
                    fa:c2:ea:8f:3e:d3:14:9b:e6:a7:59:4f:4b:f6:3e:
                    5a:c0:d4:6e:53:e9:9b:f6:0f:36:ad:cb:bd:b8:d6:
                    1f:eb:3c:9d:75:a0:73:13:e4:46:5b:34:b8:5d:e3:
                    f3:e4:9d:af:88:2f:43:46:c7:85:df:69:3d:35:ab:
                    87:13:da:fe:ee:8f:d2:9e:58:bf:14:f8:d3:c2:e6:
                    34:9d:2f:47:00:8c:48:7d:6d:f9:af:36:e5:16:84:
                    bf:66:6a:f4:54:af:78:0d:35:1c:bc:8f:b1:ae:58:
                    3b:2b:b9:03:57:02:fa:5a:58:fa:ec:72:d4:d0:01:
                    64:7f:f4:e7:0d:1a:12:2a:98:d4:f2:d2:3c:4c:3f:
                    87:7f:cf:94:34:26:55:54:be:18:cf:f9:45:52:70:
                    6a:49:83:17:8a:fc:85:e3:2b:29:18:a3:fe:48:08:
                    ed:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:00:3C:B1:8E:F9:9B:E3:39:FF:5F:C3:34:D7:39:93:89:E9:98:71
            X509v3 Authority Key Identifier:
                keyid:7A:9E:A9:3C:79:EC:C5:D5:CA:90:30:1A:CD:3A:89:2D:6E:2E:1E:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ep6pPHnsxdXKkDAazTqJLW4uHnM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/5fdc37-f30d-470a-9a01-4cccb4c7918f/1/ep6pPHnsxdXKkDAazTqJLW4uHnM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/5fdc37-f30d-470a-9a01-4cccb4c7918f/1/ep6pPHnsxdXKkDAazTqJLW4uHnM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:c4:53:27:fc:ab:48:0f:f0:b9:01:e6:96:51:99:24:66:51:
         2d:31:1a:3b:37:cd:6a:7c:83:f5:48:36:e4:b0:74:ab:10:ee:
         35:07:01:72:f1:9d:05:49:be:9c:48:69:db:85:c0:cd:93:b0:
         23:ca:ac:7b:d6:f1:73:ee:bc:20:f8:89:10:53:71:52:85:70:
         d9:66:a2:1d:91:ac:86:76:b7:1b:36:f7:f4:68:48:80:c6:a6:
         b2:af:10:7a:1b:65:72:b4:0f:83:f4:79:af:c4:84:da:db:eb:
         70:10:6b:b0:7c:3c:14:24:d0:a8:05:1e:7c:bd:49:3e:b6:7b:
         36:2e:e4:6f:f0:98:76:dd:56:90:7a:a6:b2:e9:60:15:39:7a:
         8a:63:5d:c8:5e:2b:fc:ca:1f:fe:b7:70:5b:30:2f:31:8f:ed:
         87:7c:bd:47:d4:19:db:d7:7c:49:bf:51:42:d2:ae:c7:75:85:
         c6:e8:11:14:b1:cf:65:5e:fe:76:77:0b:27:3c:e7:37:a3:78:
         e3:42:6e:82:24:29:0a:13:d7:75:04:4a:42:57:75:e9:80:04:
         0e:75:95:27:43:8c:73:40:d8:be:fd:e3:fa:92:e3:e3:e9:87:
         c1:4c:6d:fd:de:79:33:da:6b:52:46:1f:46:e5:5c:7b:20:e4:
         e4:6c:a8:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:47:29 2025 by rpki-client