Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.mft
File:                     z5dREMc5t0-E1BcDxIgoMnJ73cw.mft (raw, json)
Hash identifier:          6T2NWkHJndL5V+AgSSHKPDPIzkQgYStu60ew1NnakKE=
Subject key identifier:   54:6F:E3:AB:31:21:59:C5:37:9A:7F:AA:6F:3C:6C:44:43:3E:81:9E
Authority key identifier: CF:97:51:10:C7:39:B7:4F:84:D4:17:03:C4:88:28:32:72:7B:DD:CC
Certificate issuer:       /CN=cf975110c739b74f84d41703c4882832727bddcc
Certificate serial:       0197639660F379130AF3CC3D78220B300BA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z5dREMc5t0-E1BcDxIgoMnJ73cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.mft
Manifest number:          1517
Signing time:             Thu 12 Jun 2025 10:01:29 +0000
Manifest this update:     Thu 12 Jun 2025 10:01:29 +0000
Manifest next update:     Fri 13 Jun 2025 10:01:29 +0000
Files and hashes:         1: z5dREMc5t0-E1BcDxIgoMnJ73cw.crl (hash: YKnFhU2EMI/JUOMIX4k9Df1uQYkWFibhyw2FnPFNgwg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z5dREMc5t0-E1BcDxIgoMnJ73cw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:63:96:60:f3:79:13:0a:f3:cc:3d:78:22:0b:30:0b:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf975110c739b74f84d41703c4882832727bddcc
        Validity
            Not Before: Jun 12 10:01:29 2025 GMT
            Not After : Jun 13 10:01:29 2025 GMT
        Subject: CN=546fe3ab312159c5379a7faa6f3c6c44433e819e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:19:aa:e0:19:16:a9:8e:7b:9f:d3:90:3a:a3:
                    3f:dd:3b:b9:c2:e8:13:bf:45:8d:c7:9f:ce:40:0e:
                    e9:09:bd:12:c7:98:99:4e:9e:35:35:46:3b:8c:f0:
                    5d:c2:9a:2b:ab:32:a1:bf:eb:ec:41:fe:e3:e9:75:
                    7f:ef:8b:81:d8:65:8d:f8:6b:1a:8b:9a:82:70:0f:
                    ca:cf:59:cb:b5:ff:0b:81:50:73:3d:c9:81:22:45:
                    af:94:95:29:d9:13:13:4d:d4:85:c0:40:81:97:1b:
                    2a:de:b6:23:4e:20:cc:04:03:ce:30:76:b7:85:b8:
                    46:ff:e6:7a:d9:40:5b:83:7b:5d:d8:93:c1:c6:66:
                    35:44:c4:74:4d:1f:fa:3c:64:a9:7f:e3:24:cd:2f:
                    92:2c:67:d1:2e:a0:d1:b8:03:b1:3c:f1:7d:64:80:
                    df:39:de:1f:7b:0b:3d:08:14:53:da:f0:f2:b4:94:
                    09:aa:58:80:bf:27:0a:1f:4e:77:cd:ad:05:8c:d0:
                    8b:67:ae:10:54:fd:a2:da:cb:5b:f3:08:b4:c1:d4:
                    ba:42:a9:12:b8:80:c5:04:96:3a:44:7c:7c:d5:1e:
                    f9:a0:79:68:be:f5:c6:82:87:31:a7:5d:04:34:d5:
                    df:8e:88:f0:d6:e0:af:d4:cf:79:04:68:50:7e:3d:
                    f1:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:6F:E3:AB:31:21:59:C5:37:9A:7F:AA:6F:3C:6C:44:43:3E:81:9E
            X509v3 Authority Key Identifier:
                keyid:CF:97:51:10:C7:39:B7:4F:84:D4:17:03:C4:88:28:32:72:7B:DD:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z5dREMc5t0-E1BcDxIgoMnJ73cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:b3:f4:69:61:bc:08:e8:43:98:25:83:62:52:f4:9e:ed:8f:
         cf:0a:fd:fb:39:98:72:4b:d9:63:fe:22:aa:49:ab:e4:4f:c5:
         56:48:df:7a:7d:6a:5c:b3:42:4c:8c:b1:cf:44:a9:0f:75:8f:
         5c:78:83:f6:1e:f9:82:30:26:04:07:d4:d2:79:30:1f:ec:c4:
         f6:57:80:6b:01:ec:87:e7:e0:bd:ab:b4:1f:58:84:cb:99:54:
         dc:0a:49:2a:9f:82:25:1e:66:a6:54:75:c7:c7:04:7c:4a:99:
         1f:28:ce:d5:69:ac:d0:45:0e:b4:2a:4b:00:22:2d:75:cf:c8:
         f6:3b:49:86:46:e6:b6:6c:a2:b1:27:9a:59:36:55:1a:21:7c:
         c8:d3:19:d0:08:1d:5c:a7:bd:28:20:ae:c6:55:ae:59:f5:64:
         f1:be:e6:6f:f1:c2:c9:c4:ab:2a:b0:00:b8:75:04:c3:5c:90:
         a2:00:47:61:a8:f0:bb:a2:6a:76:a2:8d:f6:9b:dc:12:84:08:
         01:43:93:ef:16:e3:c0:df:8e:c4:f7:0d:22:99:1e:fe:45:2f:
         18:61:79:5c:9b:5a:d8:14:23:cc:db:b9:97:d8:cc:38:37:60:
         da:79:00:f4:b8:a1:97:1f:d8:f5:8c:ea:32:86:dc:11:81:e3:
         cd:13:cf:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 14:06:41 2025 by rpki-client