Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft
File:                     AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft (raw, json)
Hash identifier:          i5lE2+OotI+aCpVkBizdo4GU9hRMXQRL7wCbLy8qsqs=
Subject key identifier:   8B:CB:20:17:D8:FF:F3:05:87:EB:1E:F2:00:3E:3B:86:BE:A4:97:EC
Authority key identifier: 02:41:06:3B:2D:57:E4:EF:AE:F6:82:4F:62:3D:46:5A:1C:37:B8:43
Certificate issuer:       /CN=0241063b2d57e4efaef6824f623d465a1c37b843
Certificate serial:       01974C6A038E96C82FEBAD220DE4380838D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AkEGOy1X5O-u9oJPYj1GWhw3uEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft
Manifest number:          0C6F
Signing time:             Sat 07 Jun 2025 22:01:45 +0000
Manifest this update:     Sat 07 Jun 2025 22:01:45 +0000
Manifest next update:     Sun 08 Jun 2025 22:01:45 +0000
Files and hashes:         1: AkEGOy1X5O-u9oJPYj1GWhw3uEM.crl (hash: 1b/oG+sOhTjaq/2bcOtCWTVLYwVzdMXq3HmBOmpPdNk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AkEGOy1X5O-u9oJPYj1GWhw3uEM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:6a:03:8e:96:c8:2f:eb:ad:22:0d:e4:38:08:38:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0241063b2d57e4efaef6824f623d465a1c37b843
        Validity
            Not Before: Jun  7 22:01:45 2025 GMT
            Not After : Jun  8 22:01:45 2025 GMT
        Subject: CN=8bcb2017d8fff30587eb1ef2003e3b86bea497ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:99:b4:92:16:e4:cd:b0:57:d3:e5:ec:ac:51:
                    53:aa:65:79:4e:86:1c:ee:78:c6:01:86:77:a4:47:
                    a0:77:61:9a:8d:a8:4a:95:a4:29:47:cd:0f:2a:8a:
                    3d:03:15:97:41:cd:01:0b:4a:18:85:b3:c4:ff:a7:
                    ca:ff:09:c8:bc:e3:cd:26:1e:1f:59:ca:bc:d1:6d:
                    3b:cf:57:cf:bb:72:c8:aa:0e:8e:99:1a:04:47:17:
                    4d:10:2c:55:82:b5:f0:b0:4c:80:a7:63:ed:2d:90:
                    4b:99:2c:7c:78:da:e1:4d:f1:b6:dd:72:33:ec:f1:
                    2f:b2:26:79:7a:13:19:ee:01:c3:2e:2c:ca:ac:f0:
                    79:96:b0:e5:10:87:e5:d7:83:83:6f:8c:a5:ef:18:
                    4b:7d:73:86:c5:7d:65:3e:db:ef:39:6f:31:bb:fa:
                    69:8a:44:22:9b:93:6a:5f:78:d8:bb:dd:08:a6:93:
                    5b:9e:14:77:0c:0b:8f:3c:ce:dc:90:35:54:4b:90:
                    da:a8:3d:7d:22:0f:f6:5b:d6:a8:da:92:31:75:76:
                    32:ab:0c:25:9d:81:71:55:48:bf:39:f1:b4:0b:a1:
                    21:52:a1:53:6b:d0:21:83:c2:3d:f4:dc:41:69:a6:
                    02:ec:40:66:55:85:5a:12:60:61:eb:8a:4a:7d:9f:
                    bb:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:CB:20:17:D8:FF:F3:05:87:EB:1E:F2:00:3E:3B:86:BE:A4:97:EC
            X509v3 Authority Key Identifier:
                keyid:02:41:06:3B:2D:57:E4:EF:AE:F6:82:4F:62:3D:46:5A:1C:37:B8:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AkEGOy1X5O-u9oJPYj1GWhw3uEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:a9:8a:94:61:6b:f4:c7:c2:fb:a2:e7:cd:76:9e:88:c1:c3:
         5d:ba:70:fc:71:bd:ac:3e:97:89:cb:05:84:71:64:fa:47:2d:
         94:ae:c3:d4:39:46:fa:3a:7e:6c:67:68:12:db:99:23:e1:95:
         37:e2:bb:54:b9:ab:80:08:0d:32:0e:7e:35:ad:05:20:01:82:
         1e:04:c8:3b:e1:8a:3e:31:30:78:2b:74:bb:0a:aa:d0:60:50:
         c0:28:c3:83:18:d6:ae:01:93:01:5f:62:a4:b6:30:84:83:63:
         ab:ce:2e:b6:74:9a:42:e2:c6:30:07:75:bc:2d:98:57:18:d1:
         2a:ac:38:87:6e:f9:5e:b3:24:0d:f2:57:d9:dd:6e:13:6f:0e:
         b9:93:9f:a4:de:af:22:ae:59:5f:8d:9b:d8:04:18:a8:de:9d:
         22:ac:9a:a0:72:c2:74:52:fa:5c:8e:ce:a2:95:ac:af:9d:5f:
         ac:7a:a4:92:72:38:f0:a2:52:df:e7:44:ad:2c:52:81:36:e8:
         b9:ab:fe:ae:6b:97:88:5d:4a:97:76:9e:f2:7a:dc:1d:45:cd:
         7d:8c:92:6c:d5:54:69:6f:a0:24:84:61:94:fd:c5:e3:d7:4f:
         c8:0e:bb:2d:8f:54:7f:5f:6b:e4:d5:70:88:96:b2:2b:07:e5:
         e6:1f:cd:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:35:03 2025 by rpki-client