Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/98dc6f-be56-4c8d-b94e-57227982a000/1/enUOttEsV-pkMLnwI5XK8qgb7Pg.mft
File:                     enUOttEsV-pkMLnwI5XK8qgb7Pg.mft (raw, json)
Hash identifier:          yrWFHoGEAvUbxNKIy/C01nXsFKTMYVgOxhFqW16XWps=
Subject key identifier:   0D:75:56:31:9C:D7:4F:B2:91:D1:75:A1:4E:59:22:C2:06:69:CC:A8
Authority key identifier: 7A:75:0E:B6:D1:2C:57:EA:64:30:B9:F0:23:95:CA:F2:A8:1B:EC:F8
Certificate issuer:       /CN=7a750eb6d12c57ea6430b9f02395caf2a81becf8
Certificate serial:       0197470B9A2F7675E4BBEE5BD2CA00FEC64B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/enUOttEsV-pkMLnwI5XK8qgb7Pg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/98dc6f-be56-4c8d-b94e-57227982a000/1/enUOttEsV-pkMLnwI5XK8qgb7Pg.mft
Manifest number:          1579
Signing time:             Fri 06 Jun 2025 21:00:32 +0000
Manifest this update:     Fri 06 Jun 2025 21:00:32 +0000
Manifest next update:     Sat 07 Jun 2025 21:00:32 +0000
Files and hashes:         1: enUOttEsV-pkMLnwI5XK8qgb7Pg.crl (hash: tJGNfukKH5pPdiSJaQMJTj8x1H6MT9tjQmnph2cBI4A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/98dc6f-be56-4c8d-b94e-57227982a000/1/enUOttEsV-pkMLnwI5XK8qgb7Pg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/98dc6f-be56-4c8d-b94e-57227982a000/1/enUOttEsV-pkMLnwI5XK8qgb7Pg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/enUOttEsV-pkMLnwI5XK8qgb7Pg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:0b:9a:2f:76:75:e4:bb:ee:5b:d2:ca:00:fe:c6:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a750eb6d12c57ea6430b9f02395caf2a81becf8
        Validity
            Not Before: Jun  6 21:00:32 2025 GMT
            Not After : Jun  7 21:00:32 2025 GMT
        Subject: CN=0d7556319cd74fb291d175a14e5922c20669cca8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7d:37:c7:b4:bc:ae:1e:67:69:ef:06:f8:c2:
                    19:47:b4:69:56:42:e0:93:c8:96:1b:44:1b:1c:d2:
                    c2:8f:74:17:70:7d:2f:cb:f5:2a:9a:f8:fd:aa:c0:
                    88:c4:91:bc:76:5e:c3:30:00:98:2a:af:3c:e6:a7:
                    47:68:67:00:de:cd:52:f2:f8:62:54:63:82:e9:27:
                    eb:b8:5d:2d:a3:ce:f8:9b:69:a8:47:af:b5:69:7b:
                    76:72:8e:b0:1d:0e:6b:03:33:4a:ef:ad:5b:6d:4b:
                    0e:b3:70:8f:fe:c5:0d:fd:f3:af:93:2f:12:8a:af:
                    14:cb:ba:14:da:f5:d9:77:3e:3a:d8:b4:48:11:c9:
                    dd:3f:58:c5:55:7d:99:d6:95:92:98:0f:28:ae:40:
                    80:38:78:70:24:cf:f3:73:65:3a:ff:2c:14:4c:8d:
                    c6:d4:76:e6:3c:fa:b7:62:06:9f:3d:74:f6:71:ad:
                    2f:fd:fa:40:a7:67:3a:98:0c:f7:67:80:84:5b:c1:
                    e2:a0:c1:b7:86:aa:5c:69:c1:25:2f:16:d9:d3:c4:
                    35:79:af:46:5e:71:49:f1:fd:88:55:5d:6c:f6:c2:
                    e8:dc:93:a6:60:b9:41:72:9a:69:17:45:64:55:d2:
                    69:7a:10:f3:9c:ce:55:2f:cc:de:b1:59:55:4e:39:
                    41:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:75:56:31:9C:D7:4F:B2:91:D1:75:A1:4E:59:22:C2:06:69:CC:A8
            X509v3 Authority Key Identifier:
                keyid:7A:75:0E:B6:D1:2C:57:EA:64:30:B9:F0:23:95:CA:F2:A8:1B:EC:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/enUOttEsV-pkMLnwI5XK8qgb7Pg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/98dc6f-be56-4c8d-b94e-57227982a000/1/enUOttEsV-pkMLnwI5XK8qgb7Pg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/98dc6f-be56-4c8d-b94e-57227982a000/1/enUOttEsV-pkMLnwI5XK8qgb7Pg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:93:19:d1:a8:5a:0e:b2:26:3d:51:6f:28:fe:77:a5:c7:5f:
         70:08:5b:67:19:40:7e:57:28:38:ba:dd:4e:98:aa:c6:01:0e:
         88:93:ed:2c:55:a8:5a:c0:64:1d:16:0f:87:68:77:fb:27:ab:
         df:03:56:04:ed:53:48:21:ee:c3:4b:f3:16:81:09:b9:a5:5d:
         8a:fb:09:f8:be:0c:c6:77:74:2b:eb:1f:38:48:a4:d4:82:ab:
         90:fc:30:40:fd:68:08:5b:45:eb:0f:11:a0:a2:f8:df:e1:94:
         99:09:7b:7e:f2:cb:8a:a4:48:53:50:1f:a7:f2:60:cc:bd:b2:
         0a:c7:34:57:a3:5a:74:70:10:7f:26:e1:29:65:e0:44:b5:36:
         98:c9:a3:11:ef:00:1e:f4:1b:56:61:e2:eb:1d:88:eb:23:36:
         6f:f3:0a:8d:7e:9d:28:45:8f:f9:12:2e:2d:9f:6e:98:a3:dc:
         3c:7b:1d:bc:8e:44:d8:e9:80:5e:6f:6b:48:fa:2e:81:d2:84:
         06:ec:dc:0b:cb:3b:39:ce:3d:be:b6:20:49:7d:6d:f2:7a:39:
         29:be:dd:17:ae:c3:b8:9e:9d:85:19:ae:76:da:1c:89:71:45:
         ea:e8:6f:47:64:b0:6a:62:d9:57:43:69:d6:3d:58:44:10:f7:
         0e:9d:81:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:00:37 2025 by rpki-client