Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/38c26f-25a2-4b20-9ecd-0e6bced00463/1/IMnySVGbH_R5NQ8xclT0Bei_yr0.mft
File:                     IMnySVGbH_R5NQ8xclT0Bei_yr0.mft (raw, json)
Hash identifier:          9pNnAGUbWvWrWHtiDJyQbdSzV1wM4i2oFyfMC348EFY=
Subject key identifier:   B7:E0:CE:93:4F:A4:97:C0:95:17:C3:AD:E1:4E:DA:13:B6:10:32:B0
Authority key identifier: 20:C9:F2:49:51:9B:1F:F4:79:35:0F:31:72:54:F4:05:E8:BF:CA:BD
Certificate issuer:       /CN=20c9f249519b1ff479350f317254f405e8bfcabd
Certificate serial:       019747799EA84F70A6098D8B3D57133C7807
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IMnySVGbH_R5NQ8xclT0Bei_yr0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/38c26f-25a2-4b20-9ecd-0e6bced00463/1/IMnySVGbH_R5NQ8xclT0Bei_yr0.mft
Manifest number:          0F71
Signing time:             Fri 06 Jun 2025 23:00:42 +0000
Manifest this update:     Fri 06 Jun 2025 23:00:42 +0000
Manifest next update:     Sat 07 Jun 2025 23:00:42 +0000
Files and hashes:         1: IMnySVGbH_R5NQ8xclT0Bei_yr0.crl (hash: 1na7J481hx8WStSZfOYAEuF0SkwjOp8ssjUTNfpKUW0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/38c26f-25a2-4b20-9ecd-0e6bced00463/1/IMnySVGbH_R5NQ8xclT0Bei_yr0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/38c26f-25a2-4b20-9ecd-0e6bced00463/1/IMnySVGbH_R5NQ8xclT0Bei_yr0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IMnySVGbH_R5NQ8xclT0Bei_yr0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 23:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:79:9e:a8:4f:70:a6:09:8d:8b:3d:57:13:3c:78:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20c9f249519b1ff479350f317254f405e8bfcabd
        Validity
            Not Before: Jun  6 23:00:42 2025 GMT
            Not After : Jun  7 23:00:42 2025 GMT
        Subject: CN=b7e0ce934fa497c09517c3ade14eda13b61032b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0a:8b:4e:65:0f:f6:85:53:57:ab:46:c8:3c:
                    33:38:8f:ff:93:5f:f0:7b:25:d5:83:b8:3d:f5:02:
                    d9:e4:49:e1:ad:89:9b:e1:5f:41:fb:a1:a8:05:c3:
                    f2:bf:34:44:c8:9a:1a:72:fc:94:5f:16:ad:64:a5:
                    05:d3:52:1c:96:03:54:3a:55:e3:aa:a5:85:34:cd:
                    a7:11:d9:2f:f6:75:0a:33:b9:df:8c:ff:e2:a5:84:
                    ad:23:30:36:60:84:67:12:b5:c1:07:01:4b:fe:20:
                    7a:59:8e:48:9d:18:57:0b:60:5c:17:2a:52:38:d6:
                    c9:f5:0c:67:18:33:90:a3:ea:84:96:1a:a6:4f:7d:
                    e2:a4:b7:d6:2b:87:4b:00:bc:df:83:db:24:ee:f7:
                    f4:23:a3:43:aa:bd:ab:dd:c0:43:e9:81:e7:22:42:
                    68:bf:cf:24:6c:a4:54:ec:0d:f0:85:67:1f:36:42:
                    9c:5e:b9:75:2a:59:15:2c:1e:67:98:9e:25:f0:35:
                    79:21:86:48:b9:5c:aa:b3:04:41:b1:f7:a0:c3:d9:
                    e1:1b:09:16:bd:ec:ba:d6:dd:b5:c2:5f:95:1d:9c:
                    eb:0c:71:2a:3f:2c:82:a2:85:8d:e4:20:2b:2a:25:
                    63:24:4c:f6:aa:cb:f1:8c:43:67:19:23:0c:f2:d1:
                    de:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:E0:CE:93:4F:A4:97:C0:95:17:C3:AD:E1:4E:DA:13:B6:10:32:B0
            X509v3 Authority Key Identifier:
                keyid:20:C9:F2:49:51:9B:1F:F4:79:35:0F:31:72:54:F4:05:E8:BF:CA:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMnySVGbH_R5NQ8xclT0Bei_yr0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/38c26f-25a2-4b20-9ecd-0e6bced00463/1/IMnySVGbH_R5NQ8xclT0Bei_yr0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/38c26f-25a2-4b20-9ecd-0e6bced00463/1/IMnySVGbH_R5NQ8xclT0Bei_yr0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:2e:63:a5:59:12:8a:88:89:4b:0c:89:18:f5:52:65:8a:cd:
         72:b6:b8:d3:c4:37:b6:3f:74:c6:38:ed:44:40:64:dd:43:c6:
         fd:90:20:4c:f9:d3:63:3a:1c:24:01:66:31:37:e1:46:f4:8a:
         87:71:e9:dd:f6:f7:74:04:cb:6c:85:0a:9c:ba:00:9e:f9:6b:
         7d:4f:dd:f4:a8:3c:51:8e:aa:1b:08:d5:7d:0f:9a:29:1c:76:
         94:61:a7:df:d9:5e:68:17:37:49:2b:e7:c2:08:fc:cd:6e:27:
         e1:84:d9:29:69:37:84:88:07:95:8e:d6:39:51:72:95:b4:85:
         2d:b1:cc:89:b3:6d:5e:9d:60:b5:f3:49:31:06:5a:04:70:3b:
         44:c9:96:11:07:4a:db:9a:71:92:7a:f4:50:ee:86:a9:6c:5d:
         32:af:7d:38:5b:52:cb:a6:a7:ca:5a:10:bd:b1:7c:49:f9:e6:
         d4:ec:85:51:d8:ee:d6:a5:62:0b:48:4d:97:3c:ec:78:73:94:
         41:ea:d2:84:22:3b:58:32:e3:17:6c:05:f7:d8:21:f2:da:b8:
         0f:8a:73:45:00:48:f2:95:fd:4b:da:15:91:32:33:14:52:ca:
         b0:ab:35:7b:38:32:fa:7e:d6:55:0a:b0:dd:47:b5:8a:c3:02:
         c9:27:f2:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:14:16 2025 by rpki-client