Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/qYI63d9sNfBbfByuB5BL_58vass.mft
File:                     qYI63d9sNfBbfByuB5BL_58vass.mft (raw, json)
Hash identifier:          3ognOhoKkUHjcYy5AuZwl4lM1pgsh3PG7nk+izB1ocQ=
Subject key identifier:   65:FC:81:E7:95:C1:3C:3F:D1:0C:95:E8:E2:4E:A1:55:D0:FF:8D:59
Authority key identifier: A9:82:3A:DD:DF:6C:35:F0:5B:7C:1C:AE:07:90:4B:FF:9F:2F:6A:CB
Certificate issuer:       /CN=a9823adddf6c35f05b7c1cae07904bff9f2f6acb
Certificate serial:       019748FA39B60833EC47B4A336CEFD003732
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qYI63d9sNfBbfByuB5BL_58vass.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/qYI63d9sNfBbfByuB5BL_58vass.mft
Manifest number:          09F2
Signing time:             Sat 07 Jun 2025 06:00:47 +0000
Manifest this update:     Sat 07 Jun 2025 06:00:47 +0000
Manifest next update:     Sun 08 Jun 2025 06:00:47 +0000
Files and hashes:         1: qYI63d9sNfBbfByuB5BL_58vass.crl (hash: UCap3iwSEi/5jxSt7TF01oHHpmpv5/eLOU6rExmSd4Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/qYI63d9sNfBbfByuB5BL_58vass.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/qYI63d9sNfBbfByuB5BL_58vass.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qYI63d9sNfBbfByuB5BL_58vass.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 06:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:fa:39:b6:08:33:ec:47:b4:a3:36:ce:fd:00:37:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9823adddf6c35f05b7c1cae07904bff9f2f6acb
        Validity
            Not Before: Jun  7 06:00:47 2025 GMT
            Not After : Jun  8 06:00:47 2025 GMT
        Subject: CN=65fc81e795c13c3fd10c95e8e24ea155d0ff8d59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:68:26:8e:56:7f:84:31:4b:b8:31:7e:14:55:
                    63:5f:a1:47:3e:40:c8:0c:e2:79:11:71:40:90:ab:
                    ec:da:13:60:69:de:c6:dd:92:64:11:06:46:88:94:
                    10:70:a2:63:08:4d:78:73:7e:92:05:1b:16:af:f6:
                    98:89:c8:88:19:26:a1:a0:9c:f4:78:0b:13:f8:25:
                    34:31:9a:40:9b:25:4d:bc:b8:46:1e:d7:8c:05:0e:
                    bd:8b:07:97:e0:e3:8d:0f:a2:9b:0e:04:1a:18:5b:
                    bb:5b:79:3b:85:08:7c:d6:87:53:7a:ed:7e:9a:28:
                    c5:9d:55:c3:34:a5:2d:4a:05:e9:3a:ce:8f:95:9c:
                    d9:31:a7:b2:fb:b2:40:09:61:96:69:01:18:ba:2b:
                    dc:fe:bb:49:0d:0a:f9:ab:e6:58:21:1d:04:c5:18:
                    9c:04:36:4e:53:10:d9:41:98:a4:bb:e3:02:6f:6d:
                    39:25:60:40:6d:15:69:39:1b:ea:67:41:da:3b:96:
                    4f:03:81:5b:d9:56:17:e7:a0:d9:43:ed:e0:52:1e:
                    31:c6:3a:08:70:2b:29:5a:d2:1e:64:28:97:a0:0d:
                    42:f1:8d:59:48:c6:36:20:02:55:93:4d:52:07:3d:
                    4f:75:2b:90:f4:2b:0f:88:42:f3:92:1b:94:7a:3a:
                    b4:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:FC:81:E7:95:C1:3C:3F:D1:0C:95:E8:E2:4E:A1:55:D0:FF:8D:59
            X509v3 Authority Key Identifier:
                keyid:A9:82:3A:DD:DF:6C:35:F0:5B:7C:1C:AE:07:90:4B:FF:9F:2F:6A:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYI63d9sNfBbfByuB5BL_58vass.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/qYI63d9sNfBbfByuB5BL_58vass.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/qYI63d9sNfBbfByuB5BL_58vass.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:a8:20:86:3b:4a:5e:9a:6b:4c:b7:59:d4:23:d4:a0:df:6a:
         9c:9c:6c:ff:09:75:e7:38:67:b4:ac:af:09:39:38:cc:f8:e6:
         3c:f5:55:3c:c9:00:10:c5:9d:74:57:68:9d:ee:bf:b9:46:93:
         ea:39:56:b5:eb:50:aa:eb:b5:18:c1:96:4d:45:cf:7a:61:23:
         ba:a4:fd:f3:fe:f9:8b:c1:9b:db:4f:ab:18:fb:e1:fd:61:6f:
         85:60:19:fb:fb:f7:c0:ac:27:9c:a5:93:65:15:49:45:d4:a6:
         cc:2c:14:86:d7:d8:11:08:bc:86:86:bb:64:40:85:13:a1:06:
         7a:b7:4a:0a:fc:33:80:22:ba:04:3a:ed:d0:0e:3d:72:f2:c8:
         4d:f1:9d:ff:e8:9c:7e:8e:46:75:d4:6c:68:3a:f3:7b:ef:bb:
         26:5a:da:6c:59:d6:f4:28:38:ba:69:ed:0d:4c:d9:3c:de:3a:
         15:3e:66:e6:dc:26:d5:a2:9f:ea:c0:0e:5a:59:d0:d0:f7:14:
         c0:3e:b0:13:51:fc:3f:42:25:1d:da:26:9b:6d:3b:91:1b:a0:
         61:02:a2:9c:9d:37:ac:dd:4e:48:77:ee:3a:23:5c:90:89:60:
         1e:1d:43:de:fa:53:ec:83:1f:80:fb:ea:7c:5d:c3:c4:a1:44:
         4f:b3:a1:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:51:25 2025 by rpki-client