Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/bd7646-add9-4859-9de9-9c8485483d59/1/RmSgU4XAYmgVApGX6xUGSF09bRw.mft
File:                     RmSgU4XAYmgVApGX6xUGSF09bRw.mft (raw, json)
Hash identifier:          6kRcKOpC6QCGssJbMNVhBRrCO5oIz1agXJ5R2vHxzLQ=
Subject key identifier:   E3:F2:25:7A:DF:6A:13:34:CA:6F:41:B6:E9:E4:75:5D:1D:FA:47:85
Authority key identifier: 46:64:A0:53:85:C0:62:68:15:02:91:97:EB:15:06:48:5D:3D:6D:1C
Certificate issuer:       /CN=4664a05385c0626815029197eb1506485d3d6d1c
Certificate serial:       019749D5FD9A726EE666A41F4E71A2C0C2FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RmSgU4XAYmgVApGX6xUGSF09bRw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/bd7646-add9-4859-9de9-9c8485483d59/1/RmSgU4XAYmgVApGX6xUGSF09bRw.mft
Manifest number:          06D2
Signing time:             Sat 07 Jun 2025 10:00:50 +0000
Manifest this update:     Sat 07 Jun 2025 10:00:50 +0000
Manifest next update:     Sun 08 Jun 2025 10:00:50 +0000
Files and hashes:         1: RmSgU4XAYmgVApGX6xUGSF09bRw.crl (hash: 0kCr+bxfD9HybTCh5tAyA2LNxpbaqRCRxdvgbdu7Gfo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/bd7646-add9-4859-9de9-9c8485483d59/1/RmSgU4XAYmgVApGX6xUGSF09bRw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/bd7646-add9-4859-9de9-9c8485483d59/1/RmSgU4XAYmgVApGX6xUGSF09bRw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RmSgU4XAYmgVApGX6xUGSF09bRw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:d5:fd:9a:72:6e:e6:66:a4:1f:4e:71:a2:c0:c2:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4664a05385c0626815029197eb1506485d3d6d1c
        Validity
            Not Before: Jun  7 10:00:50 2025 GMT
            Not After : Jun  8 10:00:50 2025 GMT
        Subject: CN=e3f2257adf6a1334ca6f41b6e9e4755d1dfa4785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:91:fe:a0:51:b3:5b:43:36:07:58:4b:50:68:
                    20:fd:0d:6a:54:43:0a:eb:62:d7:6f:ff:d2:67:2a:
                    de:a8:2d:72:0c:ca:53:31:74:66:43:88:98:e0:cf:
                    48:44:02:ac:05:e2:46:cf:3f:33:11:72:b1:d5:5e:
                    ed:e1:0c:a0:2c:e5:66:4f:f2:69:f4:d9:81:29:d3:
                    8e:bc:d1:e6:76:04:d5:67:97:24:0b:63:b9:c0:ab:
                    22:81:ff:ef:9f:49:41:e1:2d:03:8b:85:3e:d7:53:
                    87:8f:af:9f:7d:ba:43:95:bd:cc:2f:4d:fb:1c:1a:
                    69:ad:e8:ea:a7:4b:47:e4:52:ab:1c:b3:36:d2:dd:
                    31:8c:a2:79:e1:7c:58:88:36:e1:3a:59:85:2c:29:
                    86:18:3b:7a:61:a6:c8:ef:78:f2:3e:b1:77:43:90:
                    07:bf:62:3d:e2:29:45:24:92:24:df:29:8c:5b:08:
                    3f:e7:aa:05:e3:03:0f:ad:b9:e1:07:f4:71:65:81:
                    26:29:92:5c:3a:5a:af:fa:04:7a:02:da:6d:35:6b:
                    74:9b:2a:92:21:d5:04:3a:85:19:4c:97:ee:eb:33:
                    ef:47:37:03:aa:3d:4e:2c:c0:08:64:ad:e3:58:01:
                    1d:e5:56:5f:c9:c3:74:d8:29:89:3a:39:14:a7:b2:
                    29:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:F2:25:7A:DF:6A:13:34:CA:6F:41:B6:E9:E4:75:5D:1D:FA:47:85
            X509v3 Authority Key Identifier:
                keyid:46:64:A0:53:85:C0:62:68:15:02:91:97:EB:15:06:48:5D:3D:6D:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RmSgU4XAYmgVApGX6xUGSF09bRw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bd7646-add9-4859-9de9-9c8485483d59/1/RmSgU4XAYmgVApGX6xUGSF09bRw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bd7646-add9-4859-9de9-9c8485483d59/1/RmSgU4XAYmgVApGX6xUGSF09bRw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:42:91:58:da:f9:df:db:1c:6a:ea:88:97:cd:b8:cb:64:c3:
         17:3a:99:77:95:6e:a9:27:e5:83:88:a5:81:bb:f0:cb:75:90:
         03:b2:f1:ac:73:63:36:f6:c4:b8:3b:ac:f5:92:52:c6:f5:19:
         62:7b:5e:1d:32:90:fb:bd:60:51:d7:80:47:5f:08:5c:1c:46:
         25:de:55:2d:52:8b:0f:2e:a2:e5:fc:68:1d:b9:41:cc:b9:d5:
         96:65:73:45:df:01:a4:90:c6:04:51:1b:6d:23:9e:5c:de:d8:
         69:37:42:8b:0e:4a:41:47:c8:07:89:2c:76:c3:2b:9c:cc:f9:
         13:ee:3d:12:28:a7:1f:14:fd:b8:98:1b:f8:de:eb:13:ee:09:
         f0:a3:4e:e1:0d:ad:5b:01:91:98:03:94:7e:50:94:58:d9:ef:
         9c:f1:6d:a1:07:8b:9d:02:f3:62:83:9a:fd:25:17:22:17:83:
         e2:ba:bd:89:04:eb:d1:95:2c:9a:ae:62:21:bf:7f:4a:24:f5:
         34:55:09:ad:ed:5a:40:ea:b3:cd:ed:7d:fe:e6:b0:a2:12:d1:
         ec:14:5e:0c:9b:7e:4f:c1:63:86:d6:22:3f:b5:dd:6b:09:25:
         61:04:f9:e4:10:9e:e3:94:b8:b8:a1:eb:3f:7b:c6:14:14:df:
         62:61:49:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:09:27 2025 by rpki-client