Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6e3744-9dd9-423e-ab99-78f982dfc32f/1/7XlzzE58-_RHB0eBDEFuzH6YGIU.mft
File:                     7XlzzE58-_RHB0eBDEFuzH6YGIU.mft (raw, json)
Hash identifier:          b73BK6d0e5M5AlY39N/j2iIoGIt+M6yLKhT+6mMvbHk=
Subject key identifier:   5F:29:AF:78:77:C3:9A:2A:DA:65:9E:E6:70:AB:52:14:2F:98:F6:7F
Authority key identifier: ED:79:73:CC:4E:7C:FB:F4:47:07:47:81:0C:41:6E:CC:7E:98:18:85
Certificate issuer:       /CN=ed7973cc4e7cfbf4470747810c416ecc7e981885
Certificate serial:       01974BC45CAB89FAACDF374382E5C218C459
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7XlzzE58-_RHB0eBDEFuzH6YGIU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/6e3744-9dd9-423e-ab99-78f982dfc32f/1/7XlzzE58-_RHB0eBDEFuzH6YGIU.mft
Manifest number:          10F5
Signing time:             Sat 07 Jun 2025 19:00:49 +0000
Manifest this update:     Sat 07 Jun 2025 19:00:49 +0000
Manifest next update:     Sun 08 Jun 2025 19:00:49 +0000
Files and hashes:         1: 7XlzzE58-_RHB0eBDEFuzH6YGIU.crl (hash: xGD0yitj1Vo452x5EYdOf09BlEI5lqYda3HxW/JZdhI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/6e3744-9dd9-423e-ab99-78f982dfc32f/1/7XlzzE58-_RHB0eBDEFuzH6YGIU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/6e3744-9dd9-423e-ab99-78f982dfc32f/1/7XlzzE58-_RHB0eBDEFuzH6YGIU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7XlzzE58-_RHB0eBDEFuzH6YGIU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 11:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:c4:5c:ab:89:fa:ac:df:37:43:82:e5:c2:18:c4:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed7973cc4e7cfbf4470747810c416ecc7e981885
        Validity
            Not Before: Jun  7 19:00:49 2025 GMT
            Not After : Jun  8 19:00:49 2025 GMT
        Subject: CN=5f29af7877c39a2ada659ee670ab52142f98f67f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:7e:98:f0:b0:2c:dc:51:b7:93:06:4b:78:0c:
                    2b:01:eb:46:79:8a:7b:f4:63:73:c9:54:f2:5c:66:
                    de:68:ad:9d:d4:72:df:4f:a5:8a:ff:14:92:11:33:
                    f7:bc:97:1a:4e:04:f2:c9:9b:55:00:91:76:f1:73:
                    6f:ca:4b:33:72:ea:fb:0b:94:d0:7a:e3:df:5e:4e:
                    b1:63:18:b3:ec:d4:3d:dc:bc:cc:8a:20:46:34:0a:
                    24:1b:43:8c:c6:76:6d:ee:3f:dd:d7:d3:d4:a4:b2:
                    cd:f9:d0:e5:07:5f:9a:39:ac:84:dd:b0:ec:7d:cb:
                    c5:f6:50:b3:58:56:49:5d:6a:e6:b5:5e:ff:2c:90:
                    e4:ba:4f:4c:db:3e:f9:ac:9e:ca:85:23:2a:60:a4:
                    92:21:05:8d:53:b3:28:d5:3c:30:a6:8a:33:fe:a0:
                    8f:b7:eb:3e:37:e0:1c:a9:ee:8a:54:1c:a6:11:bd:
                    a6:12:92:27:98:91:51:db:9d:3b:fb:1e:44:5d:2d:
                    db:a3:f0:d1:84:a3:4a:e7:ae:ac:59:fa:40:7f:2a:
                    de:43:01:d4:e4:a8:bb:b3:15:de:73:aa:54:79:7e:
                    d6:e1:5a:b9:47:77:29:bd:6c:07:87:86:30:d3:ee:
                    07:f3:22:83:75:21:1b:72:07:af:fd:6a:05:2b:65:
                    0d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:29:AF:78:77:C3:9A:2A:DA:65:9E:E6:70:AB:52:14:2F:98:F6:7F
            X509v3 Authority Key Identifier:
                keyid:ED:79:73:CC:4E:7C:FB:F4:47:07:47:81:0C:41:6E:CC:7E:98:18:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XlzzE58-_RHB0eBDEFuzH6YGIU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6e3744-9dd9-423e-ab99-78f982dfc32f/1/7XlzzE58-_RHB0eBDEFuzH6YGIU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6e3744-9dd9-423e-ab99-78f982dfc32f/1/7XlzzE58-_RHB0eBDEFuzH6YGIU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:35:d6:86:f9:00:f2:f7:01:32:2c:f0:ce:d2:a9:83:e3:45:
         8e:de:17:b9:04:18:59:af:19:71:d4:5b:2d:f5:ea:b8:cb:8a:
         5d:19:26:a2:fe:32:ba:03:cc:1f:d1:9f:d0:bb:b4:6a:fc:9b:
         ac:a9:23:80:53:4e:e5:44:bf:2d:6c:58:47:88:d8:fd:a9:54:
         a8:26:0a:7e:02:50:48:db:7b:7e:95:58:80:11:b0:28:4b:e0:
         a9:a2:c3:08:30:37:ef:9f:a5:7c:d3:56:c0:0d:7a:23:93:19:
         46:b8:35:11:c7:c7:44:c0:94:2d:c5:ec:54:c0:55:91:93:75:
         2b:b5:6a:8d:d7:80:73:84:27:c3:1e:74:38:52:4a:3c:d7:34:
         50:62:2f:55:00:ef:9c:da:23:ab:ab:f3:cd:83:d3:2d:31:3f:
         a1:0b:59:2e:f5:02:80:91:55:44:5f:01:50:13:a3:ac:e9:bd:
         cc:9c:01:a1:bd:ba:09:f3:ed:45:b3:5f:72:3a:3a:22:cc:7f:
         99:72:5b:ad:b3:5f:e3:2a:6c:49:64:6d:58:d7:12:73:70:fd:
         21:b7:17:f1:87:a8:40:77:38:ad:ca:e0:b1:b2:08:05:94:1d:
         51:0c:9e:4e:a7:e1:bb:b2:e7:51:62:f0:87:bd:b9:d5:61:1c:
         39:64:b4:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:35:28 2025 by rpki-client