Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/6ca5b6-c423-4b54-9655-7c5964990397/1/oDavImaRg7om8jl2Uw40mzRlGWg.mft
File:                     oDavImaRg7om8jl2Uw40mzRlGWg.mft (raw, json)
Hash identifier:          ACm3DFJPDjL0F0o5F0FeV6qiqYXeg7uhoBS9AIMsGaI=
Subject key identifier:   45:44:E5:04:A5:81:20:4F:91:D1:24:55:B7:98:7A:3A:B3:BC:29:93
Authority key identifier: A0:36:AF:22:66:91:83:BA:26:F2:39:76:53:0E:34:9B:34:65:19:68
Certificate issuer:       /CN=a036af22669183ba26f23976530e349b34651968
Certificate serial:       01974C69309381A8842A22010319DCA9352A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oDavImaRg7om8jl2Uw40mzRlGWg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/6ca5b6-c423-4b54-9655-7c5964990397/1/oDavImaRg7om8jl2Uw40mzRlGWg.mft
Manifest number:          1587
Signing time:             Sat 07 Jun 2025 22:00:51 +0000
Manifest this update:     Sat 07 Jun 2025 22:00:51 +0000
Manifest next update:     Sun 08 Jun 2025 22:00:51 +0000
Files and hashes:         1: oDavImaRg7om8jl2Uw40mzRlGWg.crl (hash: Cz9Cricls+ygq0lzJ4o6cgEyP4tnvHW8IRKc4Co0CR4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/6ca5b6-c423-4b54-9655-7c5964990397/1/oDavImaRg7om8jl2Uw40mzRlGWg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/6ca5b6-c423-4b54-9655-7c5964990397/1/oDavImaRg7om8jl2Uw40mzRlGWg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oDavImaRg7om8jl2Uw40mzRlGWg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:69:30:93:81:a8:84:2a:22:01:03:19:dc:a9:35:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a036af22669183ba26f23976530e349b34651968
        Validity
            Not Before: Jun  7 22:00:51 2025 GMT
            Not After : Jun  8 22:00:51 2025 GMT
        Subject: CN=4544e504a581204f91d12455b7987a3ab3bc2993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1f:32:1d:49:8a:10:e7:0b:14:e4:cd:3c:84:
                    8b:ea:39:90:e1:3c:48:d1:94:d0:6d:b6:de:28:de:
                    b1:0d:11:96:27:7c:83:ba:93:61:41:5c:74:69:96:
                    82:61:f8:64:c7:f9:b3:92:87:ad:2b:d1:b5:b5:cd:
                    6b:56:a4:1b:9a:7a:90:07:bf:d5:9d:6b:b6:3b:e6:
                    d0:a2:8d:83:a6:e6:0a:28:03:e7:a9:b1:41:4e:7a:
                    7d:af:87:d3:d1:68:06:c9:69:9e:0d:12:d1:eb:3d:
                    12:8f:2c:67:82:9b:73:ba:4c:7e:20:23:24:b3:08:
                    fe:24:ba:21:f0:92:05:79:c2:6d:ed:3b:a5:0f:a4:
                    51:aa:fe:6b:88:f6:90:e7:31:c9:9f:97:95:ab:fd:
                    f2:07:e1:18:4b:5f:e9:5a:1f:15:07:b8:5d:ea:42:
                    f7:1b:a3:16:ed:eb:6f:be:d4:bf:14:ff:7e:14:58:
                    de:04:eb:ea:ef:7f:ee:91:e2:04:9c:40:cf:2b:ca:
                    89:8a:ed:8d:0c:b9:39:6d:98:24:8f:f1:57:66:e5:
                    f9:a7:43:1e:aa:0e:ff:bd:93:e4:b2:63:2c:cf:6f:
                    19:b0:88:ce:2f:23:f9:9b:2b:ed:6c:cd:7f:70:53:
                    45:3d:fc:6e:bd:24:3a:4f:0c:63:3c:34:12:e7:4b:
                    87:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:44:E5:04:A5:81:20:4F:91:D1:24:55:B7:98:7A:3A:B3:BC:29:93
            X509v3 Authority Key Identifier:
                keyid:A0:36:AF:22:66:91:83:BA:26:F2:39:76:53:0E:34:9B:34:65:19:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oDavImaRg7om8jl2Uw40mzRlGWg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6ca5b6-c423-4b54-9655-7c5964990397/1/oDavImaRg7om8jl2Uw40mzRlGWg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6ca5b6-c423-4b54-9655-7c5964990397/1/oDavImaRg7om8jl2Uw40mzRlGWg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:1e:30:ad:e2:71:d5:30:34:f1:8f:86:1e:c8:b8:be:da:6c:
         61:61:78:2f:2f:87:be:f9:12:b2:3f:a4:fa:74:70:33:75:33:
         9c:54:5a:bb:ea:43:1f:e7:ed:b0:e8:0b:18:73:01:7f:b1:55:
         d4:d8:33:33:88:24:d9:cd:a9:c0:d3:eb:2f:17:83:53:4f:ae:
         d1:0d:48:c0:fc:d0:09:ef:fd:9e:31:10:8f:85:40:87:18:08:
         7b:33:71:f3:2b:20:40:3b:13:1a:3e:b0:ff:af:d9:49:d4:d5:
         25:16:e8:d6:9e:ff:9f:b5:02:91:a0:e9:b1:04:2f:80:4e:ad:
         dc:30:4f:33:3b:43:bf:19:11:94:05:d3:7f:24:fb:af:a9:ad:
         45:a2:68:a1:e5:38:b2:9f:01:fe:dd:0e:b8:c8:d0:8c:f9:2b:
         85:19:13:eb:89:87:1d:c5:46:58:43:40:62:c8:a4:59:56:e8:
         36:1d:32:95:87:25:04:ad:88:65:fe:61:2d:42:48:a9:26:e6:
         5b:4a:15:46:61:27:37:7f:a0:c9:54:2c:81:c0:ed:57:98:51:
         53:86:39:45:91:4a:e9:ad:17:29:ef:00:4d:be:7d:92:63:20:
         63:df:d3:b5:0d:8c:0e:fa:ed:fc:b0:73:d7:ac:27:fb:85:7e:
         a2:93:22:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:42:31 2025 by rpki-client