Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/754095-5582-428a-9b11-a8be4fb00121/1/SLQt9x-KKZb70xXQqmF63zQ9WwY.mft
File:                     SLQt9x-KKZb70xXQqmF63zQ9WwY.mft (raw, json)
Hash identifier:          +3UFLlguHgb4uHFVmtI3E2QKxY46pDtKeiSRcPIpHq0=
Subject key identifier:   CE:F5:BA:2C:8C:B8:7D:55:8B:78:2B:B3:D3:61:11:89:ED:14:F0:95
Authority key identifier: 48:B4:2D:F7:1F:8A:29:96:FB:D3:15:D0:AA:61:7A:DF:34:3D:5B:06
Certificate issuer:       /CN=48b42df71f8a2996fbd315d0aa617adf343d5b06
Certificate serial:       019769612DB91762EA0071B86B9F02C06E8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SLQt9x-KKZb70xXQqmF63zQ9WwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/754095-5582-428a-9b11-a8be4fb00121/1/SLQt9x-KKZb70xXQqmF63zQ9WwY.mft
Manifest number:          02FE
Signing time:             Fri 13 Jun 2025 13:01:05 +0000
Manifest this update:     Fri 13 Jun 2025 13:01:05 +0000
Manifest next update:     Sat 14 Jun 2025 13:01:05 +0000
Files and hashes:         1: SLQt9x-KKZb70xXQqmF63zQ9WwY.crl (hash: WtEwZSHi8qUqX6zwwvOIq0kcMHalOUMDqK6hb/jpa6o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/754095-5582-428a-9b11-a8be4fb00121/1/SLQt9x-KKZb70xXQqmF63zQ9WwY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/754095-5582-428a-9b11-a8be4fb00121/1/SLQt9x-KKZb70xXQqmF63zQ9WwY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SLQt9x-KKZb70xXQqmF63zQ9WwY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:61:2d:b9:17:62:ea:00:71:b8:6b:9f:02:c0:6e:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48b42df71f8a2996fbd315d0aa617adf343d5b06
        Validity
            Not Before: Jun 13 13:01:05 2025 GMT
            Not After : Jun 14 13:01:05 2025 GMT
        Subject: CN=cef5ba2c8cb87d558b782bb3d3611189ed14f095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d4:41:81:9e:17:b5:5e:e5:52:ac:a3:37:bf:
                    f4:2f:28:4a:14:a3:02:0d:c1:4f:ce:d5:e5:3b:ee:
                    a0:8a:5d:93:97:c1:5f:19:97:78:ec:8b:25:da:58:
                    93:64:be:20:67:37:c9:e9:82:ae:48:1e:d8:6e:67:
                    73:f5:ea:61:7d:40:da:54:fa:16:36:ce:90:2d:75:
                    9c:af:d9:1c:08:b0:25:c5:88:78:19:cd:a8:d5:ab:
                    7d:95:0f:6e:09:dd:2d:d4:be:75:4e:4f:0a:14:2f:
                    65:fd:7e:11:2c:ec:f0:18:7f:0e:13:2c:8b:ac:3a:
                    d5:8f:75:48:56:88:b3:aa:57:09:d3:fc:73:b7:be:
                    cb:56:d5:c0:9d:51:41:07:88:1c:a6:cf:36:e4:a2:
                    b5:ac:63:ab:00:86:c1:88:80:37:f4:d3:64:24:f3:
                    c4:ce:69:4c:dd:f6:d5:b6:3e:36:1e:71:ba:cc:81:
                    6d:c4:7c:05:42:cd:cc:2b:cf:70:4c:ae:62:f0:9c:
                    2b:1b:05:86:ee:c5:fc:2d:7c:59:c3:1e:19:d1:c7:
                    b3:a7:a1:3c:2f:b5:a1:77:91:ad:92:ef:81:51:12:
                    f0:fe:41:b5:f9:46:02:8c:11:e3:c9:97:c9:d8:8a:
                    37:99:f4:c4:91:ba:62:a6:5c:72:a9:9e:98:3d:59:
                    a6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:F5:BA:2C:8C:B8:7D:55:8B:78:2B:B3:D3:61:11:89:ED:14:F0:95
            X509v3 Authority Key Identifier:
                keyid:48:B4:2D:F7:1F:8A:29:96:FB:D3:15:D0:AA:61:7A:DF:34:3D:5B:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SLQt9x-KKZb70xXQqmF63zQ9WwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/754095-5582-428a-9b11-a8be4fb00121/1/SLQt9x-KKZb70xXQqmF63zQ9WwY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/754095-5582-428a-9b11-a8be4fb00121/1/SLQt9x-KKZb70xXQqmF63zQ9WwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:5c:05:10:51:d6:c6:fa:ef:59:4b:69:ef:df:24:ef:f9:cf:
         91:0f:4a:e4:05:82:bc:12:f4:b0:60:db:62:ab:6b:31:8b:11:
         55:5e:72:08:79:5e:9c:b7:b5:ee:45:87:21:71:4a:69:d4:71:
         45:c5:b0:78:9f:71:98:93:11:d8:01:16:35:92:25:ad:df:e9:
         7b:e9:37:20:bd:d8:7b:fa:5a:61:23:58:f4:cf:1e:32:92:e5:
         20:3c:b9:ba:5e:b7:82:9d:05:df:20:6e:eb:ad:3e:82:03:67:
         e8:58:9b:ce:61:93:da:31:12:90:e1:3e:62:5d:03:10:2a:45:
         e9:fe:36:52:56:ae:65:f6:b0:66:64:7f:7d:ba:07:c9:a0:de:
         87:56:b6:ee:fa:18:19:14:85:41:e0:fe:1d:3f:ab:b0:4b:c9:
         67:7f:ba:23:12:24:4c:63:19:4e:dc:bd:6a:88:86:00:e7:1b:
         f4:84:bd:30:38:88:ed:df:95:c7:3e:8c:e5:c3:9b:89:53:b2:
         b3:57:35:ea:aa:6f:9d:13:ff:53:09:13:15:ee:8c:c7:c9:61:
         67:a6:ce:ac:f2:a3:d8:9a:c6:37:dc:c7:a6:30:72:6e:b4:01:
         5e:76:8a:e4:f7:7f:4a:55:b9:76:f0:bc:7b:9c:c2:95:03:c3:
         97:d4:ba:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 23:51:19 2025 by rpki-client