Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/24908e-4819-4874-a1ed-f059cdc77989/1/_m-zjWufNfVcZIPDeGmR__jVJ0I.mft
File:                     _m-zjWufNfVcZIPDeGmR__jVJ0I.mft (raw, json)
Hash identifier:          MVib0mwO76yrGe/fFv/niY3mydCoXEhiDmCYwqjsdLU=
Subject key identifier:   1A:07:4D:A7:EF:DC:14:06:D6:D4:F0:E7:43:BA:D6:41:00:35:8E:5A
Authority key identifier: FE:6F:B3:8D:6B:9F:35:F5:5C:64:83:C3:78:69:91:FF:F8:D5:27:42
Certificate issuer:       /CN=fe6fb38d6b9f35f55c6483c3786991fff8d52742
Certificate serial:       01974C6948380FF05DBFEA93B9F626AB0D59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_m-zjWufNfVcZIPDeGmR__jVJ0I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/24908e-4819-4874-a1ed-f059cdc77989/1/_m-zjWufNfVcZIPDeGmR__jVJ0I.mft
Manifest number:          0CDE
Signing time:             Sat 07 Jun 2025 22:00:57 +0000
Manifest this update:     Sat 07 Jun 2025 22:00:57 +0000
Manifest next update:     Sun 08 Jun 2025 22:00:57 +0000
Files and hashes:         1: _m-zjWufNfVcZIPDeGmR__jVJ0I.crl (hash: FGYWElL/+VOHHkjh02wzc1O7YoJr7A2WTEFrDMPwwcg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/24908e-4819-4874-a1ed-f059cdc77989/1/_m-zjWufNfVcZIPDeGmR__jVJ0I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/24908e-4819-4874-a1ed-f059cdc77989/1/_m-zjWufNfVcZIPDeGmR__jVJ0I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_m-zjWufNfVcZIPDeGmR__jVJ0I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:69:48:38:0f:f0:5d:bf:ea:93:b9:f6:26:ab:0d:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe6fb38d6b9f35f55c6483c3786991fff8d52742
        Validity
            Not Before: Jun  7 22:00:57 2025 GMT
            Not After : Jun  8 22:00:57 2025 GMT
        Subject: CN=1a074da7efdc1406d6d4f0e743bad64100358e5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:45:ba:c1:71:52:71:80:87:e7:e6:4e:46:7a:
                    f5:20:c2:14:fe:58:99:e0:a1:e3:8b:aa:27:fa:db:
                    43:78:47:b8:17:30:5e:ea:7b:2e:cd:30:2d:8b:4c:
                    10:a7:8e:0e:c7:ba:13:95:69:4c:c4:78:6a:2a:2f:
                    5b:f7:45:56:7b:bb:ba:ec:21:4c:9c:bb:9f:d7:e6:
                    8d:21:4f:19:8e:49:20:98:3d:57:33:8a:28:47:c6:
                    21:2b:5d:15:8d:97:57:9e:39:b5:74:ec:a3:21:4b:
                    a1:5c:6f:ce:33:af:dc:37:0d:1f:65:69:5d:31:aa:
                    40:e0:24:f8:0f:69:41:3c:15:bf:14:d6:53:74:93:
                    6c:de:16:eb:b1:9b:ef:dc:66:47:dc:92:62:e7:91:
                    3f:87:7e:e5:c0:6c:2b:25:41:da:88:4b:ca:fc:d7:
                    c1:75:c9:91:1d:85:4f:3e:ca:33:da:c4:9f:98:23:
                    16:22:27:7f:f7:40:08:11:f2:b8:e6:87:e7:e2:4f:
                    de:87:e2:df:c1:55:21:99:b1:6b:c2:ba:4d:a5:fb:
                    2b:c7:fb:81:4a:b3:6d:9e:96:54:ac:fc:5f:1d:79:
                    40:28:52:7a:9a:9e:fe:37:9e:ce:50:af:25:fd:7b:
                    e5:36:ad:b6:da:b7:8f:69:0b:f1:e1:9a:ee:7a:cf:
                    1c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:07:4D:A7:EF:DC:14:06:D6:D4:F0:E7:43:BA:D6:41:00:35:8E:5A
            X509v3 Authority Key Identifier:
                keyid:FE:6F:B3:8D:6B:9F:35:F5:5C:64:83:C3:78:69:91:FF:F8:D5:27:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_m-zjWufNfVcZIPDeGmR__jVJ0I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/24908e-4819-4874-a1ed-f059cdc77989/1/_m-zjWufNfVcZIPDeGmR__jVJ0I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/24908e-4819-4874-a1ed-f059cdc77989/1/_m-zjWufNfVcZIPDeGmR__jVJ0I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:9d:00:51:8e:e9:8c:83:7c:47:a9:fb:85:c8:62:fe:bf:b2:
         55:0b:45:f4:ef:62:18:65:83:9c:97:0f:a8:15:ab:b6:f9:eb:
         01:92:3b:8e:49:4d:64:b0:9f:87:69:f2:e9:48:0a:20:4b:f4:
         ad:4b:91:db:b8:46:4f:33:c2:86:d6:08:8e:09:e0:95:3a:31:
         ba:c9:e3:67:28:5f:e5:a3:70:b5:6f:d6:c9:30:9e:3b:c8:c3:
         38:61:b7:2f:8b:ad:eb:8b:91:00:76:94:16:0b:2e:3c:1b:69:
         ec:9a:57:d1:47:fa:ab:7c:45:d5:72:7a:d7:79:33:36:54:11:
         18:87:cf:86:08:e1:45:4d:a0:20:2e:32:9b:8c:8c:62:59:04:
         59:bb:84:a7:71:68:9f:dd:6a:0d:4a:ea:41:52:d3:71:ff:1e:
         83:2f:fb:aa:2b:ca:65:c8:3f:bc:eb:80:c9:32:93:5c:3c:b2:
         7f:e1:99:a6:54:77:f2:e6:0b:49:f3:9b:d3:76:14:1e:04:3f:
         7b:f4:b1:bf:96:d5:03:16:67:8e:b6:e4:16:80:c3:c3:66:14:
         42:ce:82:d3:99:fd:55:06:6d:d9:fb:62:87:cd:18:8a:e5:2e:
         3f:d1:c5:b7:0f:55:cd:bf:e0:8f:e6:0d:7b:cc:30:55:97:ef:
         cd:81:13:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 03:14:31 2025 by rpki-client