Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.mft
File:                     D0nEmnXPbiSMm1HHBU2y-Nnc7cs.mft (raw, json)
Hash identifier:          co/pmiSV+oGTJJx8o+FvZGSpADy3elQi//Gh6NDFTSs=
Subject key identifier:   56:44:91:43:25:8A:9E:94:5F:EA:9C:D6:7A:DD:5D:22:BA:3D:6E:17
Authority key identifier: 0F:49:C4:9A:75:CF:6E:24:8C:9B:51:C7:05:4D:B2:F8:D9:DC:ED:CB
Certificate issuer:       /CN=0f49c49a75cf6e248c9b51c7054db2f8d9dcedcb
Certificate serial:       0197488C153FF56AA509CA408F49816B143C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.mft
Manifest number:          0A87
Signing time:             Sat 07 Jun 2025 04:00:29 +0000
Manifest this update:     Sat 07 Jun 2025 04:00:29 +0000
Manifest next update:     Sun 08 Jun 2025 04:00:29 +0000
Files and hashes:         1: D0nEmnXPbiSMm1HHBU2y-Nnc7cs.crl (hash: vUPXC74yIy6CZVI1S1yGj4HRSzUwAmnedhAWH5tOee0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 04:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:8c:15:3f:f5:6a:a5:09:ca:40:8f:49:81:6b:14:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f49c49a75cf6e248c9b51c7054db2f8d9dcedcb
        Validity
            Not Before: Jun  7 04:00:29 2025 GMT
            Not After : Jun  8 04:00:29 2025 GMT
        Subject: CN=56449143258a9e945fea9cd67add5d22ba3d6e17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:f0:20:79:3e:ef:b9:d3:51:9a:74:6a:0a:02:
                    0e:76:8a:61:99:f9:75:8c:9d:37:79:3e:ae:b0:1e:
                    c4:57:33:04:81:7e:f5:1f:d2:c0:24:53:0d:6c:74:
                    c1:e1:75:47:4f:df:d0:8f:31:4b:62:43:70:03:57:
                    f2:13:db:60:fb:66:d5:a0:59:f9:f8:31:bc:92:0d:
                    b9:48:87:f7:e8:b1:a3:06:08:ea:41:1b:5c:5c:ac:
                    d5:09:88:d2:44:72:e0:4d:f5:8a:be:70:54:14:78:
                    9c:ab:ce:59:80:9a:2a:48:bd:01:d2:4e:46:a0:cf:
                    77:da:a2:dc:7f:c4:b2:43:bb:04:77:4c:4f:04:c4:
                    d5:8b:b4:f1:b3:ef:03:55:4e:5b:e9:82:5c:0a:4c:
                    d0:92:36:dd:53:4c:ed:07:af:d5:d9:9a:bd:38:a2:
                    c3:43:e8:1d:ef:50:20:cc:31:ff:70:a7:19:5a:36:
                    e4:55:6f:3a:18:ef:74:c7:cd:ce:f6:76:0a:19:3a:
                    ea:6c:99:9b:7a:98:c5:c9:21:1f:21:b0:a1:c7:43:
                    9f:82:c3:4c:84:56:65:3f:01:19:b1:cb:d9:67:f6:
                    29:a4:77:38:9c:a7:c1:00:71:df:f5:09:31:1e:23:
                    8b:5c:bd:1a:e4:16:be:c7:74:4a:e4:f0:29:7a:e1:
                    e6:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:44:91:43:25:8A:9E:94:5F:EA:9C:D6:7A:DD:5D:22:BA:3D:6E:17
            X509v3 Authority Key Identifier:
                keyid:0F:49:C4:9A:75:CF:6E:24:8C:9B:51:C7:05:4D:B2:F8:D9:DC:ED:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:64:97:50:fc:76:f0:cb:e5:28:2a:6c:93:9d:9b:4a:89:f8:
         b6:d1:f0:24:9b:24:2c:c1:72:7a:0a:62:45:0a:5d:5f:eb:6b:
         d0:cc:c3:45:30:65:f3:c0:0e:a9:19:2f:25:df:d9:54:22:e2:
         d3:4e:ab:28:cf:c4:97:7b:96:46:af:fe:ef:1b:1f:17:b5:18:
         bb:9e:1c:6e:e7:a8:e0:6d:ae:f0:80:e4:ba:ea:c4:5c:64:ef:
         f8:6a:5a:e5:4e:8e:eb:f5:79:9f:6b:99:d0:98:33:ad:61:44:
         bd:8b:55:00:1e:e9:7b:21:16:6c:9f:0a:92:b0:0a:0e:67:8f:
         5f:be:c9:ff:4d:22:6d:0d:78:94:64:b3:c6:74:92:15:7f:7f:
         d2:32:f1:aa:bf:cf:a2:ce:8b:3a:70:23:09:74:80:8a:01:29:
         15:97:07:8a:84:70:c5:b1:75:86:d1:45:ff:f3:6a:9d:a9:bb:
         cf:51:c6:9b:95:d8:27:10:18:94:42:3d:db:d8:0a:61:b3:2f:
         4e:96:04:6e:32:a9:60:61:9b:13:f4:99:97:9e:cc:9c:10:35:
         7c:9e:88:47:c5:4d:a9:a4:f2:86:aa:82:51:53:a9:75:8c:e5:
         5f:e8:93:71:13:2c:56:19:81:36:c5:6e:79:5e:98:30:c2:24:
         cd:4a:df:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:02:06 2025 by rpki-client