Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.mft
File:                     xJitV5fK2RUK7SvAtdObiLG_K_Q.mft (raw, json)
Hash identifier:          D8Kb4LKxG8DPhEAsgReoVnun/AvhSqxj/GCxRDDlGMI=
Subject key identifier:   9B:B9:AE:6A:9E:17:10:0D:AF:1B:68:C9:62:89:0B:11:55:B7:11:45
Authority key identifier: C4:98:AD:57:97:CA:D9:15:0A:ED:2B:C0:B5:D3:9B:88:B1:BF:2B:F4
Certificate issuer:       /CN=c498ad5797cad9150aed2bc0b5d39b88b1bf2bf4
Certificate serial:       01974666BC2A3815D48A055A7DFC9723994D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xJitV5fK2RUK7SvAtdObiLG_K_Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.mft
Manifest number:          08EE
Signing time:             Fri 06 Jun 2025 18:00:27 +0000
Manifest this update:     Fri 06 Jun 2025 18:00:27 +0000
Manifest next update:     Sat 07 Jun 2025 18:00:27 +0000
Files and hashes:         1: xJitV5fK2RUK7SvAtdObiLG_K_Q.crl (hash: 8+ZqaGfXZ+0/yjbMLEkVfBWgfeKkbNQ2t/KLCxX9dWU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xJitV5fK2RUK7SvAtdObiLG_K_Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:66:bc:2a:38:15:d4:8a:05:5a:7d:fc:97:23:99:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c498ad5797cad9150aed2bc0b5d39b88b1bf2bf4
        Validity
            Not Before: Jun  6 18:00:27 2025 GMT
            Not After : Jun  7 18:00:27 2025 GMT
        Subject: CN=9bb9ae6a9e17100daf1b68c962890b1155b71145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:cd:9c:34:eb:93:6c:38:be:48:78:4c:c0:34:
                    55:70:f9:ac:62:60:54:95:32:85:72:9a:d8:c4:d2:
                    f5:75:dd:fa:46:62:fc:b9:6d:d0:34:af:20:ec:d8:
                    44:cd:93:34:39:89:52:37:93:b5:49:c5:0c:a0:4a:
                    a0:3a:81:17:a6:ca:b1:5a:de:3b:1a:aa:d8:c1:74:
                    ff:4e:a8:c4:b0:ba:1e:eb:e0:ef:e9:3e:29:93:6f:
                    70:ce:57:08:90:f0:36:c8:2f:e0:56:4b:89:b4:dd:
                    b4:4d:16:4a:9a:35:f6:a6:76:ed:52:2f:a1:a2:61:
                    52:ac:a9:f8:de:04:8a:09:57:cc:78:08:a0:79:e5:
                    3e:97:73:21:02:86:0f:58:d3:04:fd:50:6f:6b:9a:
                    8d:c5:36:d0:4b:91:31:22:3c:6d:96:d3:f4:24:5b:
                    1b:1e:d9:2c:7f:7f:70:39:c4:fc:c0:c5:c1:4b:c6:
                    de:cd:ca:ea:63:51:81:62:12:76:39:7b:ac:be:a3:
                    85:2c:35:4f:46:d4:2f:6c:00:89:3e:7e:6e:1c:6e:
                    25:b4:3a:44:5c:20:74:fd:3a:69:61:d4:46:2d:00:
                    4b:55:c9:cc:98:89:b4:cb:7c:a2:b8:5e:62:ba:4d:
                    82:41:a9:de:1d:df:e7:81:2e:fc:91:f0:7d:21:2a:
                    be:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:B9:AE:6A:9E:17:10:0D:AF:1B:68:C9:62:89:0B:11:55:B7:11:45
            X509v3 Authority Key Identifier:
                keyid:C4:98:AD:57:97:CA:D9:15:0A:ED:2B:C0:B5:D3:9B:88:B1:BF:2B:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJitV5fK2RUK7SvAtdObiLG_K_Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:56:b3:a8:7b:9f:5d:04:95:ca:52:e9:f0:d4:18:a5:f2:84:
         5e:de:8c:44:f6:27:5b:b9:1a:62:76:16:fb:07:8e:d9:cd:23:
         54:14:3f:63:31:17:9c:02:65:35:5b:af:b3:20:46:c1:e8:d6:
         75:ff:f7:a0:16:c1:30:1e:98:27:c7:42:be:4c:b9:0b:b1:84:
         ab:65:23:f5:7d:81:77:3a:ea:d8:41:1e:4b:32:1e:b0:a5:0d:
         cf:a4:34:ec:6a:1d:4a:69:9f:32:c9:b4:33:68:2a:c1:9b:2c:
         1d:6b:24:99:50:57:72:14:1c:88:42:d4:d3:2c:57:2f:d3:48:
         c7:13:d4:f5:ff:6f:cc:8e:ae:0e:1a:88:17:e1:d3:97:5e:11:
         de:9e:5c:c2:be:97:39:00:74:2d:6d:9c:50:76:5d:8e:71:b2:
         3d:70:f3:c8:3d:04:56:89:e9:a4:c7:cd:82:73:16:87:43:35:
         99:d3:70:01:51:6b:69:d6:56:df:ed:c3:43:eb:af:5f:a9:a2:
         16:f6:b6:7e:bb:ef:b9:83:fe:7b:59:d3:a9:d5:bb:ae:30:cf:
         c5:c8:0a:64:ff:8a:2b:de:d6:ef:0d:c8:f5:f2:9a:39:2e:45:
         69:30:8e:26:8b:0b:46:0c:e9:59:c6:9b:d6:4b:ae:6a:8b:a8:
         0c:8f:09:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:34:06 2025 by rpki-client