Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/11f004-441f-470d-8927-76a9109a62e7/1/T7murXluvL6SUPqiksQOioWIx50.mft
File:                     T7murXluvL6SUPqiksQOioWIx50.mft (raw, json)
Hash identifier:          UHLpuL2A9s3BFWODqkNK/QgNT1oQH5MXBPh5fz7y7ao=
Subject key identifier:   1F:25:09:FE:47:B2:28:C6:E8:8E:5A:B0:2E:75:6A:EF:13:81:34:CF
Authority key identifier: 4F:B9:AE:AD:79:6E:BC:BE:92:50:FA:A2:92:C4:0E:8A:85:88:C7:9D
Certificate issuer:       /CN=4fb9aead796ebcbe9250faa292c40e8a8588c79d
Certificate serial:       01974A7ACE0FA222FA56FF9DCEDFB527D032
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T7murXluvL6SUPqiksQOioWIx50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/11f004-441f-470d-8927-76a9109a62e7/1/T7murXluvL6SUPqiksQOioWIx50.mft
Manifest number:          1061
Signing time:             Sat 07 Jun 2025 13:00:51 +0000
Manifest this update:     Sat 07 Jun 2025 13:00:51 +0000
Manifest next update:     Sun 08 Jun 2025 13:00:51 +0000
Files and hashes:         1: T7murXluvL6SUPqiksQOioWIx50.crl (hash: la++87ruPWHtovqdDrye77hD8tAjmsp27cN9Jg7GElA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/11f004-441f-470d-8927-76a9109a62e7/1/T7murXluvL6SUPqiksQOioWIx50.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/11f004-441f-470d-8927-76a9109a62e7/1/T7murXluvL6SUPqiksQOioWIx50.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T7murXluvL6SUPqiksQOioWIx50.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 11:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:7a:ce:0f:a2:22:fa:56:ff:9d:ce:df:b5:27:d0:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fb9aead796ebcbe9250faa292c40e8a8588c79d
        Validity
            Not Before: Jun  7 13:00:51 2025 GMT
            Not After : Jun  8 13:00:51 2025 GMT
        Subject: CN=1f2509fe47b228c6e88e5ab02e756aef138134cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:cd:15:7d:c0:20:4e:fa:b7:50:2b:71:59:48:
                    79:9c:2a:b6:9d:4f:5e:18:e7:9b:c3:06:dc:6b:87:
                    98:fa:d9:08:4f:96:e7:29:03:7c:9d:b3:64:90:26:
                    3a:f1:7b:de:f0:9e:65:3e:e9:13:66:66:36:48:98:
                    a4:98:f7:56:80:16:55:0c:df:19:d4:65:dc:b7:bf:
                    21:13:b5:46:04:10:ee:92:ab:44:e2:37:1f:32:49:
                    c3:af:1f:2b:57:86:87:f4:1c:7b:d4:10:45:6f:dc:
                    37:1b:d9:1f:62:63:6a:0e:da:28:32:c1:ca:c0:64:
                    96:18:52:fc:52:f9:6d:be:6b:6e:ac:41:b3:6b:cb:
                    0d:f4:17:90:64:a7:38:13:d5:4e:00:ff:e4:38:44:
                    d7:09:c9:41:ab:02:ad:99:8b:db:61:59:dc:c5:db:
                    9f:6c:51:35:b4:03:6f:d2:3e:ee:44:7f:ad:cc:dd:
                    db:12:08:14:bb:67:88:0e:4a:73:8c:d9:1a:cd:44:
                    a5:04:2c:2b:9b:0d:86:9e:6d:8d:18:c9:4e:d8:12:
                    a7:37:ba:58:a8:0f:80:d9:71:a0:84:e5:35:a7:d6:
                    6c:0a:8b:7d:65:de:74:c8:ee:b1:40:fc:c3:b9:f5:
                    7f:f7:a7:12:72:a3:e5:33:97:0e:ae:d2:1f:e2:a8:
                    c4:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:25:09:FE:47:B2:28:C6:E8:8E:5A:B0:2E:75:6A:EF:13:81:34:CF
            X509v3 Authority Key Identifier:
                keyid:4F:B9:AE:AD:79:6E:BC:BE:92:50:FA:A2:92:C4:0E:8A:85:88:C7:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7murXluvL6SUPqiksQOioWIx50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/11f004-441f-470d-8927-76a9109a62e7/1/T7murXluvL6SUPqiksQOioWIx50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/11f004-441f-470d-8927-76a9109a62e7/1/T7murXluvL6SUPqiksQOioWIx50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:9e:2e:8e:49:ff:57:7d:9f:85:ad:49:a7:4b:c1:da:72:76:
         79:29:9a:ac:12:cc:71:fe:d4:9a:6f:42:f9:6a:a6:8f:31:8f:
         d7:97:a1:1c:0b:e0:de:9b:83:77:38:db:ac:84:3e:48:50:38:
         e1:84:ed:7b:0b:d8:b8:1f:05:3f:bb:20:4b:6e:4b:8d:71:a6:
         ff:a8:66:a0:f0:09:3a:36:28:7f:7e:6a:be:91:69:9f:f2:8b:
         9a:8a:65:7f:86:0b:06:fe:51:2a:7d:71:a2:32:b5:15:2b:1f:
         14:12:be:95:bd:a2:a1:34:4f:56:59:29:91:9b:c0:eb:5c:a3:
         71:90:3c:98:4b:f5:52:20:40:6b:1a:de:55:45:f4:7e:7b:df:
         df:4b:d5:29:9e:07:92:8d:6b:08:2d:9f:f9:46:8d:6f:36:bc:
         1c:85:f9:47:a6:76:47:0a:e8:07:9c:e7:54:bb:43:26:3e:d8:
         ec:25:d3:30:ec:61:d6:2f:ca:47:45:60:32:b8:53:0e:49:87:
         d3:47:2f:2b:ec:e6:bc:fa:b8:35:48:56:e0:d1:da:88:e3:1e:
         01:67:72:59:c6:44:4e:df:c7:7a:4f:12:75:c1:66:bd:a3:cd:
         ee:a3:3e:11:f6:aa:ef:5f:26:08:d8:ec:60:fa:54:34:b8:56:
         60:c2:28:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:04:36 2025 by rpki-client