Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c8ff34-e6d7-47b1-bc64-14a9081b477c/1/T1vL-9AIRYoJuxTRrJ8DIXLjuQA.mft
File:                     T1vL-9AIRYoJuxTRrJ8DIXLjuQA.mft (raw, json)
Hash identifier:          Wu/GHxVtNLX33IV1dEyMgWXXUzxzVK4urzOmikrL9WY=
Subject key identifier:   91:0C:D8:00:20:28:65:51:DE:52:43:69:AD:DF:79:8B:68:6D:66:A9
Authority key identifier: 4F:5B:CB:FB:D0:08:45:8A:09:BB:14:D1:AC:9F:03:21:72:E3:B9:00
Certificate issuer:       /CN=4f5bcbfbd008458a09bb14d1ac9f032172e3b900
Certificate serial:       019747B100F9D1CFEF86847C53EA734DA561
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T1vL-9AIRYoJuxTRrJ8DIXLjuQA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/c8ff34-e6d7-47b1-bc64-14a9081b477c/1/T1vL-9AIRYoJuxTRrJ8DIXLjuQA.mft
Manifest number:          04FD
Signing time:             Sat 07 Jun 2025 00:01:11 +0000
Manifest this update:     Sat 07 Jun 2025 00:01:11 +0000
Manifest next update:     Sun 08 Jun 2025 00:01:11 +0000
Files and hashes:         1: T1vL-9AIRYoJuxTRrJ8DIXLjuQA.crl (hash: bYc7YKYer6tCTE3U6NtrNODdd7SIq8tEp5PmkALzt/s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/c8ff34-e6d7-47b1-bc64-14a9081b477c/1/T1vL-9AIRYoJuxTRrJ8DIXLjuQA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/c8ff34-e6d7-47b1-bc64-14a9081b477c/1/T1vL-9AIRYoJuxTRrJ8DIXLjuQA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T1vL-9AIRYoJuxTRrJ8DIXLjuQA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:b1:00:f9:d1:cf:ef:86:84:7c:53:ea:73:4d:a5:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f5bcbfbd008458a09bb14d1ac9f032172e3b900
        Validity
            Not Before: Jun  7 00:01:11 2025 GMT
            Not After : Jun  8 00:01:11 2025 GMT
        Subject: CN=910cd80020286551de524369addf798b686d66a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:f4:66:dd:44:ba:b4:3c:5b:90:21:b8:39:e0:
                    32:14:2e:ab:80:7f:b5:5e:34:57:68:ff:d6:7e:54:
                    27:75:ef:8d:be:6c:99:be:00:6d:68:91:e6:3d:09:
                    04:ed:f7:b0:b5:fb:ec:45:21:aa:53:1c:12:f2:67:
                    f6:b8:39:14:14:33:d2:1e:21:0b:3f:43:a0:c7:a8:
                    38:e3:4c:b0:4a:e0:41:7f:c4:52:53:01:ff:b6:cb:
                    88:4b:98:5a:82:22:1a:29:b2:ab:4c:b2:a5:38:f5:
                    a9:f7:ff:db:8d:b4:51:75:39:64:b5:e2:f8:92:52:
                    b0:4a:82:ad:c1:75:d0:3f:25:e1:09:96:76:99:1b:
                    08:bd:12:50:3f:6a:9f:d1:c7:e8:3f:9e:1a:5b:80:
                    8d:40:ed:29:ed:8c:36:56:ae:07:fa:a9:71:ea:25:
                    aa:be:12:cd:ee:0e:c3:ef:48:98:20:41:ae:38:a0:
                    33:48:d6:e5:a6:5a:22:cb:56:48:33:a6:c8:1a:e2:
                    28:fb:a4:27:76:bb:b3:02:af:56:b5:d1:fd:8c:cd:
                    ba:77:9e:a6:15:e7:55:63:64:36:32:23:e4:10:20:
                    93:8b:51:87:db:e7:95:07:15:ed:c4:c2:98:b9:88:
                    13:d7:96:5a:69:ec:f1:d5:60:1a:44:96:08:0e:46:
                    67:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:0C:D8:00:20:28:65:51:DE:52:43:69:AD:DF:79:8B:68:6D:66:A9
            X509v3 Authority Key Identifier:
                keyid:4F:5B:CB:FB:D0:08:45:8A:09:BB:14:D1:AC:9F:03:21:72:E3:B9:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T1vL-9AIRYoJuxTRrJ8DIXLjuQA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c8ff34-e6d7-47b1-bc64-14a9081b477c/1/T1vL-9AIRYoJuxTRrJ8DIXLjuQA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c8ff34-e6d7-47b1-bc64-14a9081b477c/1/T1vL-9AIRYoJuxTRrJ8DIXLjuQA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:bd:55:8f:e8:41:01:57:37:8d:8b:9e:9e:1c:a5:e2:5f:fa:
         f4:e6:b9:c1:31:88:26:8f:81:32:7c:fc:4e:fb:e2:52:e6:d8:
         eb:b3:32:20:83:33:d7:c8:34:e0:15:e6:dc:60:38:72:06:37:
         1e:d3:9f:c9:34:92:db:b9:2d:3a:d8:01:8c:80:23:cf:b1:86:
         4d:72:0a:85:54:ac:af:0b:99:5a:fc:3e:cf:94:9c:e2:1a:b3:
         7d:a1:c7:46:62:9d:81:c6:0b:ec:54:95:9d:0a:ff:5c:c5:2a:
         de:e9:1a:04:a2:d5:f3:23:06:ff:42:2a:4d:bc:72:ba:de:f3:
         9a:dc:3e:bf:b8:3e:bb:f8:b8:e5:f3:49:d5:fc:cc:9b:12:53:
         8e:45:a1:e9:04:4f:09:c9:b3:ca:31:f5:bc:c2:00:d1:12:6e:
         da:c4:0b:67:a3:bf:4a:ea:36:82:28:aa:14:da:e2:db:5b:55:
         bd:2d:c7:6a:42:99:89:03:0b:15:50:0e:a6:93:31:9e:37:47:
         dd:e4:ff:d4:c4:24:60:69:83:b5:8a:0a:e9:62:95:78:a1:8a:
         62:40:92:26:92:cd:ef:18:bf:84:c0:29:05:e8:7a:9b:81:46:
         7a:9f:1a:9a:6f:98:07:1a:f5:ad:bc:99:04:2d:64:ba:ed:6e:
         3f:e4:d9:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:56:57 2025 by rpki-client