Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft
File:                     KVdFdunOo46j9u6ybIMnUooKG_8.mft (raw, json)
Hash identifier:          Al8v9kkmSLOQ0A9ZFmWoCDmxL50Yx1nx8BySEZy9K+Y=
Subject key identifier:   26:5E:E3:27:40:92:FB:38:4E:09:22:37:B0:98:0B:DB:73:32:4F:6E
Authority key identifier: 29:57:45:76:E9:CE:A3:8E:A3:F6:EE:B2:6C:83:27:52:8A:0A:1B:FF
Certificate issuer:       /CN=29574576e9cea38ea3f6eeb26c8327528a0a1bff
Certificate serial:       01974B1F8A0D9F055936EFA744A2313C4F98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KVdFdunOo46j9u6ybIMnUooKG_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft
Manifest number:          05CE
Signing time:             Sat 07 Jun 2025 16:00:47 +0000
Manifest this update:     Sat 07 Jun 2025 16:00:47 +0000
Manifest next update:     Sun 08 Jun 2025 16:00:47 +0000
Files and hashes:         1: KVdFdunOo46j9u6ybIMnUooKG_8.crl (hash: VaU/IJRDj/E1MZIpeTWrtk+9iHATROrlbBDDvi6puFs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KVdFdunOo46j9u6ybIMnUooKG_8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 16:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:1f:8a:0d:9f:05:59:36:ef:a7:44:a2:31:3c:4f:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29574576e9cea38ea3f6eeb26c8327528a0a1bff
        Validity
            Not Before: Jun  7 16:00:47 2025 GMT
            Not After : Jun  8 16:00:47 2025 GMT
        Subject: CN=265ee3274092fb384e092237b0980bdb73324f6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:12:e3:55:31:9b:63:59:c2:15:5d:6b:f2:d6:
                    1c:89:67:2e:0b:65:af:39:fe:9e:23:2c:59:01:0d:
                    72:6a:09:ce:bc:dd:c1:22:51:f3:9d:66:e1:f5:62:
                    36:14:ac:0d:39:eb:9c:7d:b7:e3:1c:f2:c9:27:01:
                    98:89:fc:84:90:7f:cb:f5:e4:d2:80:25:00:48:35:
                    51:2f:4d:da:58:21:d7:81:cb:68:3b:aa:88:2e:ec:
                    ed:30:8c:92:01:01:fa:60:b7:f0:01:ed:4a:da:05:
                    ef:88:43:e1:09:a2:56:a5:00:96:9e:3b:15:f9:ec:
                    24:0d:ab:10:29:c9:e2:a8:a0:2e:ea:da:97:03:d9:
                    86:2d:81:7f:33:c5:4c:2e:53:60:6e:03:3c:20:fc:
                    bb:3b:8e:ce:18:f6:90:b9:bb:2b:b8:1f:e4:4d:83:
                    ae:f0:cc:71:86:2c:88:6b:47:19:c5:8f:6f:cd:9a:
                    61:76:ed:ba:9d:c7:fa:64:6e:33:10:88:0d:b4:e0:
                    92:c1:75:f6:80:9b:91:0b:62:8d:24:dd:5c:21:1c:
                    ce:28:32:3c:98:1c:db:a9:c8:0f:ec:8d:84:ed:0f:
                    8f:9c:2b:f7:61:29:6e:6a:56:11:98:d9:99:6b:dc:
                    8b:53:0b:30:b9:6f:bb:38:e9:69:61:8b:4e:5f:af:
                    08:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:5E:E3:27:40:92:FB:38:4E:09:22:37:B0:98:0B:DB:73:32:4F:6E
            X509v3 Authority Key Identifier:
                keyid:29:57:45:76:E9:CE:A3:8E:A3:F6:EE:B2:6C:83:27:52:8A:0A:1B:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVdFdunOo46j9u6ybIMnUooKG_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:5d:c4:be:18:35:31:3c:98:04:e5:30:5c:27:23:99:1b:6c:
         6b:d7:9c:7c:08:fd:b2:c5:ec:15:8f:cc:f0:16:ec:25:13:a0:
         44:7e:e5:02:81:f0:20:a0:96:73:e6:6b:6a:be:a5:47:ae:3c:
         3e:e9:c7:84:ac:1e:79:13:17:12:56:6c:9c:50:ee:0a:ac:f2:
         e2:f7:48:2e:d4:d6:5b:59:e7:32:2d:60:5a:75:90:d8:97:0e:
         68:d0:93:28:0a:d7:6e:04:a8:e8:0f:78:9c:45:e5:9c:5f:f6:
         b5:74:37:bc:1c:96:10:39:b2:32:e0:4d:aa:7e:8f:e3:47:81:
         70:61:34:35:af:20:41:87:69:14:91:65:fe:73:95:86:4a:2e:
         b4:fe:c3:68:0e:2f:1b:36:3a:52:38:b1:43:93:fb:5b:c7:a0:
         b7:6e:ec:19:c7:91:a3:54:94:87:68:83:ce:d6:d3:cf:fc:18:
         36:18:48:70:15:85:11:c2:db:22:bd:25:dd:5b:f4:19:99:de:
         e6:c4:34:a7:eb:00:0a:05:54:d4:e2:6a:e3:cf:65:e6:5c:30:
         40:a2:48:47:b3:38:ea:f5:5b:cb:53:f4:cc:c2:fc:28:37:b9:
         c8:c1:47:21:57:98:ca:75:32:22:d3:b9:69:e0:16:a4:5f:e0:
         9c:a3:5c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:27:30 2025 by rpki-client