Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/7774e7-3b4a-4a16-abe5-b9c00ee5a490/1/55hPlAuxPQUcj4led5ZSsFrgwLM.mft
File:                     55hPlAuxPQUcj4led5ZSsFrgwLM.mft (raw, json)
Hash identifier:          p62tANE5A7Qi0AMfdoaEmuK1L7109axS/qkz8sYvUR4=
Subject key identifier:   F1:F2:64:EF:3C:B3:48:B2:AD:E6:37:13:EC:CE:EF:C3:6E:9C:E2:21
Authority key identifier: E7:98:4F:94:0B:B1:3D:05:1C:8F:89:5E:77:96:52:B0:5A:E0:C0:B3
Certificate issuer:       /CN=e7984f940bb13d051c8f895e779652b05ae0c0b3
Certificate serial:       019747E74CC08E54DB17127A6510D409B2BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/55hPlAuxPQUcj4led5ZSsFrgwLM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/7774e7-3b4a-4a16-abe5-b9c00ee5a490/1/55hPlAuxPQUcj4led5ZSsFrgwLM.mft
Manifest number:          09CE
Signing time:             Sat 07 Jun 2025 01:00:29 +0000
Manifest this update:     Sat 07 Jun 2025 01:00:29 +0000
Manifest next update:     Sun 08 Jun 2025 01:00:29 +0000
Files and hashes:         1: 55hPlAuxPQUcj4led5ZSsFrgwLM.crl (hash: +DDj4LkgU6us1X277y4a31K6JSdO4E5XWJnBkD1uYQQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/7774e7-3b4a-4a16-abe5-b9c00ee5a490/1/55hPlAuxPQUcj4led5ZSsFrgwLM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/7774e7-3b4a-4a16-abe5-b9c00ee5a490/1/55hPlAuxPQUcj4led5ZSsFrgwLM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/55hPlAuxPQUcj4led5ZSsFrgwLM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:e7:4c:c0:8e:54:db:17:12:7a:65:10:d4:09:b2:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7984f940bb13d051c8f895e779652b05ae0c0b3
        Validity
            Not Before: Jun  7 01:00:29 2025 GMT
            Not After : Jun  8 01:00:29 2025 GMT
        Subject: CN=f1f264ef3cb348b2ade63713ecceefc36e9ce221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:88:6e:16:5c:42:5d:9a:90:18:3f:88:eb:6b:
                    ed:8d:a3:e5:80:6e:0b:26:ab:dd:b4:4b:dc:46:7a:
                    22:d4:f1:f9:c4:7b:74:b5:60:04:07:65:d1:19:62:
                    38:2f:7d:fa:52:40:81:32:77:4d:c2:87:81:a8:c4:
                    8b:54:8d:b7:8d:6f:0e:f2:6a:ab:c9:9e:b3:06:90:
                    13:ab:2b:65:1c:b5:b8:4d:bd:db:9e:42:8f:c8:83:
                    84:07:e0:04:7f:30:e4:65:6e:48:7b:6e:a3:54:75:
                    50:ce:68:7f:61:cc:4f:90:13:86:f0:c6:cc:fc:da:
                    42:99:e3:2f:83:23:2a:c6:51:aa:bd:7b:fb:26:e3:
                    6b:2a:13:ea:14:af:21:dc:4d:0d:2d:6e:76:13:ae:
                    c6:88:00:23:4e:ba:ac:16:b8:44:4e:ae:24:92:3e:
                    74:ca:ba:02:09:44:a6:3b:fc:03:4d:f0:b4:43:2d:
                    4f:38:a1:80:25:da:60:d5:e9:4a:ff:2f:25:e0:5a:
                    34:67:d0:c5:da:34:a5:d7:ac:8e:41:99:6f:5a:48:
                    ff:d1:0b:99:50:13:df:23:46:c4:4e:3e:7a:b0:26:
                    72:a3:c6:57:cb:02:0a:a3:6d:7d:4a:7c:11:e2:93:
                    c7:92:2f:ba:ac:e1:ca:46:c5:6e:cb:f3:3d:39:cf:
                    dd:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:F2:64:EF:3C:B3:48:B2:AD:E6:37:13:EC:CE:EF:C3:6E:9C:E2:21
            X509v3 Authority Key Identifier:
                keyid:E7:98:4F:94:0B:B1:3D:05:1C:8F:89:5E:77:96:52:B0:5A:E0:C0:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/55hPlAuxPQUcj4led5ZSsFrgwLM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/7774e7-3b4a-4a16-abe5-b9c00ee5a490/1/55hPlAuxPQUcj4led5ZSsFrgwLM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/7774e7-3b4a-4a16-abe5-b9c00ee5a490/1/55hPlAuxPQUcj4led5ZSsFrgwLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:3d:03:5e:70:f5:3a:0f:36:79:77:21:fa:95:ed:d6:11:d9:
         3c:d5:9a:ce:4b:61:5b:02:9b:f2:d3:12:36:2e:e8:69:11:7c:
         24:fe:31:a7:cb:c3:1f:86:8d:90:04:2d:11:b8:5f:ef:71:eb:
         6e:4d:33:e0:e8:10:81:ee:5b:e4:f8:75:b5:96:d5:5a:b3:22:
         5b:90:27:b3:ec:66:7c:7e:72:bc:c7:2e:4c:5e:72:25:85:7a:
         52:1f:a4:83:62:d6:aa:ea:cf:59:16:da:ac:ce:33:1e:68:7c:
         eb:bd:39:b4:eb:aa:3f:6c:68:2d:31:26:cb:96:4e:01:1f:39:
         26:a0:f4:e0:6e:52:3b:80:a4:ea:7d:b8:f3:ea:1a:8f:c7:a3:
         b3:c6:16:d0:cf:66:80:e9:d1:6c:35:95:98:7f:36:6b:9d:ce:
         5c:c0:21:8d:9d:8b:5d:35:19:83:e5:39:b7:cd:53:ea:83:f3:
         44:3d:b8:ac:82:f5:74:6d:81:3e:11:bb:42:46:94:0e:57:de:
         86:12:9a:a0:b7:c4:f1:ed:c2:dd:7a:e3:81:b4:af:8a:48:55:
         fb:67:5b:2a:cc:cc:c3:ae:8e:4e:55:0f:9f:04:36:89:94:c9:
         7c:4d:46:ae:76:0b:d0:cb:1d:40:71:d4:f7:20:35:91:2f:94:
         31:1d:6b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:19:14 2025 by rpki-client