Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft
File:                     8-7mn4nyRS3K6JgpR7LRRpU3lns.mft (raw, json)
Hash identifier:          CWapNIEPd/Xyx5kmYx75wodP4toz678VDSE7JFYk5SM=
Subject key identifier:   97:F6:87:FA:1E:5A:36:2D:E9:17:08:5B:59:7C:8C:CB:16:F6:98:0C
Authority key identifier: F3:EE:E6:9F:89:F2:45:2D:CA:E8:98:29:47:B2:D1:46:95:37:96:7B
Certificate issuer:       /CN=f3eee69f89f2452dcae8982947b2d1469537967b
Certificate serial:       01976F2CF26E51EA6AFB8BE9F06564336543
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8-7mn4nyRS3K6JgpR7LRRpU3lns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft
Manifest number:          158F
Signing time:             Sat 14 Jun 2025 16:01:45 +0000
Manifest this update:     Sat 14 Jun 2025 16:01:45 +0000
Manifest next update:     Sun 15 Jun 2025 16:01:45 +0000
Files and hashes:         1: 8-7mn4nyRS3K6JgpR7LRRpU3lns.crl (hash: ZkA+S+H49JS75mqxU/JJ3B9k6IuBPSkFdMqXKfm8Jvg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8-7mn4nyRS3K6JgpR7LRRpU3lns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 10:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:2c:f2:6e:51:ea:6a:fb:8b:e9:f0:65:64:33:65:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3eee69f89f2452dcae8982947b2d1469537967b
        Validity
            Not Before: Jun 14 16:01:45 2025 GMT
            Not After : Jun 15 16:01:45 2025 GMT
        Subject: CN=97f687fa1e5a362de917085b597c8ccb16f6980c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f1:59:52:a5:72:27:24:00:36:8b:e1:19:cb:
                    a9:77:d4:b8:71:0c:05:56:3d:c8:8c:74:2d:b0:92:
                    38:97:ac:5c:25:a1:2f:5b:22:4f:6d:8d:5c:69:a2:
                    e2:df:45:78:ac:c5:21:e4:dd:70:2b:b4:90:d9:6c:
                    ca:c3:4f:49:3d:ee:7a:51:38:4d:ff:bf:66:fd:1e:
                    9c:59:f0:6e:11:fa:88:d7:53:45:7e:cd:59:6c:10:
                    7b:48:1a:25:d8:f8:a4:e9:ce:8a:28:4b:08:0a:9f:
                    e8:ff:50:77:c0:86:4e:2b:04:c9:0d:03:5e:54:31:
                    f7:66:ff:92:9f:05:3a:36:ff:bf:01:13:5c:e4:10:
                    6a:25:3e:1c:07:6c:9d:0b:a4:67:ed:b9:32:cc:fe:
                    0a:91:5e:3a:df:4b:71:ad:e7:2d:2b:05:02:d0:98:
                    fc:97:18:28:b9:6e:9c:4f:88:ac:d4:e9:51:44:34:
                    d1:8f:56:b8:d8:ae:72:17:17:c7:ba:24:fc:d3:46:
                    42:6f:f5:ab:d4:99:52:ae:f9:cc:25:9f:1d:cd:67:
                    bf:d4:5a:13:35:82:9e:ef:34:9a:a9:93:a4:61:74:
                    9e:b3:a3:95:bb:61:75:4d:b4:2c:03:ae:8b:d0:65:
                    91:ed:fe:47:c0:3e:13:12:3c:ce:c3:4f:42:1e:a2:
                    6e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:F6:87:FA:1E:5A:36:2D:E9:17:08:5B:59:7C:8C:CB:16:F6:98:0C
            X509v3 Authority Key Identifier:
                keyid:F3:EE:E6:9F:89:F2:45:2D:CA:E8:98:29:47:B2:D1:46:95:37:96:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-7mn4nyRS3K6JgpR7LRRpU3lns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:b5:61:d0:33:74:65:3c:42:7c:d8:e3:3c:63:5f:75:b3:66:
         49:44:9e:a6:e4:1d:5a:24:f0:c5:5a:0e:d2:cf:6d:64:02:bb:
         47:ea:90:5c:c9:b6:43:5a:fa:3b:ca:1b:5f:c6:78:2d:7a:59:
         09:ea:5a:7e:77:0c:ea:f4:0f:7b:75:06:9c:c9:24:bc:ed:63:
         6b:2a:28:3c:16:54:de:5b:39:39:11:d0:f4:80:f3:b6:21:5b:
         94:da:55:ab:15:00:51:40:d9:3e:b5:39:60:93:93:2a:24:94:
         e0:13:e1:d3:b0:c3:cb:4a:7e:9c:13:ca:c1:67:0e:c5:3a:89:
         76:53:70:6c:26:04:51:14:e0:77:23:92:6d:32:58:ba:dd:2a:
         aa:69:c8:4d:80:8f:1e:82:78:a2:cf:fd:03:59:3f:da:e8:b4:
         94:47:80:34:b7:d1:28:77:30:2f:ca:fc:1b:91:a5:21:a8:bd:
         e0:f8:97:87:4f:43:4b:c6:a8:ac:bb:bc:b1:0a:87:5e:be:1d:
         b7:ed:8e:11:94:54:2d:57:5a:f0:4e:ef:32:cd:0e:e8:3c:f5:
         4a:71:34:6a:5a:15:31:71:7d:f7:52:40:21:42:59:d1:2d:9c:
         f4:d1:75:c2:54:8a:d9:f5:8f:c6:b3:a0:3b:a7:86:d3:e7:e6:
         c4:46:43:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:33:46 2025 by rpki-client