Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f0273f-d998-46e7-8608-310554682223/1/Vec5fkUwYYUQK_2e4KH5TRrAEBI.mft
File:                     Vec5fkUwYYUQK_2e4KH5TRrAEBI.mft (raw, json)
Hash identifier:          Z9B92epGx/EW/Jr2PkUVjjKiVrLlcaWgefnaEm1q7A0=
Subject key identifier:   7B:FB:98:D1:44:DE:82:14:D5:3F:5C:08:B0:09:C6:24:70:36:C8:66
Authority key identifier: 55:E7:39:7E:45:30:61:85:10:2B:FD:9E:E0:A1:F9:4D:1A:C0:10:12
Certificate issuer:       /CN=55e7397e45306185102bfd9ee0a1f94d1ac01012
Certificate serial:       0197458B6E704E1A4DB547FFD16776157178
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vec5fkUwYYUQK_2e4KH5TRrAEBI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/f0273f-d998-46e7-8608-310554682223/1/Vec5fkUwYYUQK_2e4KH5TRrAEBI.mft
Manifest number:          058C
Signing time:             Fri 06 Jun 2025 14:00:54 +0000
Manifest this update:     Fri 06 Jun 2025 14:00:54 +0000
Manifest next update:     Sat 07 Jun 2025 14:00:54 +0000
Files and hashes:         1: Vec5fkUwYYUQK_2e4KH5TRrAEBI.crl (hash: qVPDPgoSCV1gp8QBiizQK5pZr1BjWHsH9tUVoVhKxDM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/f0273f-d998-46e7-8608-310554682223/1/Vec5fkUwYYUQK_2e4KH5TRrAEBI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/f0273f-d998-46e7-8608-310554682223/1/Vec5fkUwYYUQK_2e4KH5TRrAEBI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vec5fkUwYYUQK_2e4KH5TRrAEBI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:45:8b:6e:70:4e:1a:4d:b5:47:ff:d1:67:76:15:71:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55e7397e45306185102bfd9ee0a1f94d1ac01012
        Validity
            Not Before: Jun  6 14:00:54 2025 GMT
            Not After : Jun  7 14:00:54 2025 GMT
        Subject: CN=7bfb98d144de8214d53f5c08b009c6247036c866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fd:f0:c1:df:6c:fa:13:0b:de:2e:1b:1b:40:
                    58:0c:1f:4b:89:da:87:92:41:4b:ed:d7:d8:11:14:
                    81:c0:6f:c7:55:20:36:1b:0c:d8:85:e8:90:ab:55:
                    0e:8c:48:78:76:5f:04:b0:39:c1:b6:f6:7f:fc:f9:
                    6c:88:23:a3:7d:58:64:75:0a:28:22:10:53:a6:07:
                    c1:32:5a:9b:e8:57:c8:39:59:a3:d2:76:c7:34:23:
                    a8:8f:23:e8:32:ba:d8:2a:7f:6d:42:fa:66:e8:af:
                    a0:12:6c:9a:ef:1e:5a:67:2d:f8:e5:ec:ec:25:19:
                    1d:01:f1:b9:7f:d0:c2:a5:97:47:1c:b7:21:2b:fa:
                    d4:e3:53:93:0f:b7:f4:f6:32:9d:8e:9c:c8:a4:d3:
                    6b:c8:18:8f:d7:65:2b:91:91:e4:70:16:12:49:72:
                    ef:a6:00:d3:00:b3:f2:58:25:6b:33:46:0a:2f:46:
                    d8:e5:fa:49:1e:24:47:2d:d6:4b:c3:eb:e3:3a:66:
                    a6:1a:da:da:57:10:4b:66:fc:4d:23:8c:83:3e:80:
                    09:41:a4:f2:62:59:f4:cf:ad:af:7a:88:72:e0:94:
                    b7:44:c6:32:93:af:92:ae:e7:ef:f9:ca:9b:8e:a5:
                    ef:33:3a:dc:f4:f3:66:f2:00:42:dd:47:4c:38:0d:
                    a8:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:FB:98:D1:44:DE:82:14:D5:3F:5C:08:B0:09:C6:24:70:36:C8:66
            X509v3 Authority Key Identifier:
                keyid:55:E7:39:7E:45:30:61:85:10:2B:FD:9E:E0:A1:F9:4D:1A:C0:10:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vec5fkUwYYUQK_2e4KH5TRrAEBI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f0273f-d998-46e7-8608-310554682223/1/Vec5fkUwYYUQK_2e4KH5TRrAEBI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f0273f-d998-46e7-8608-310554682223/1/Vec5fkUwYYUQK_2e4KH5TRrAEBI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:6c:3a:c8:1b:12:17:50:34:f9:e1:fa:17:e5:95:25:11:d1:
         d1:88:66:b1:4a:76:28:08:e2:4e:52:67:47:b0:2f:6e:d2:3c:
         b9:f1:f2:15:dc:1c:bb:51:3d:ea:08:db:e6:3d:a0:69:7c:44:
         7a:de:ba:98:82:18:13:4b:3e:c3:f2:ed:66:ad:73:29:29:c8:
         6b:0c:c3:56:f3:44:2a:6d:5d:20:94:d6:12:0a:c0:93:95:ad:
         3e:86:0e:f2:74:ab:62:31:a9:77:9f:bc:18:35:31:69:c9:c7:
         69:c0:13:9e:75:e4:d3:92:0f:ab:ac:36:0e:aa:3a:3a:b7:7d:
         ee:e0:88:5f:c7:c5:19:d8:3e:7b:ae:47:79:2a:64:8c:59:0e:
         7b:2b:07:5b:24:78:72:fd:0f:ad:56:48:a5:b3:f5:d8:97:26:
         34:d5:c3:05:75:a9:30:0d:16:3b:9e:77:49:7b:ad:29:ee:de:
         70:d8:ad:82:c4:74:ae:ec:f3:2c:e0:03:01:f9:fc:6d:b1:47:
         05:25:fa:f8:a9:c2:f4:a1:76:5c:62:67:92:8d:11:75:a2:ef:
         a0:0f:e7:1e:60:8a:09:f6:41:82:ed:1b:ca:e2:e9:1c:a1:93:
         83:08:db:63:99:47:de:c2:87:37:11:fc:31:9b:f8:59:d8:28:
         43:12:64:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:23:59 2025 by rpki-client