Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/eBd1rflxcuL2j8kQUwnTdTuh9M0.mft
File:                     eBd1rflxcuL2j8kQUwnTdTuh9M0.mft (raw, json)
Hash identifier:          41fdPg2rMwI0GywwdE6lWtf6z0xyERQJsNgFvO6c2zw=
Subject key identifier:   CB:18:8D:39:02:4D:1B:47:5A:20:E3:CD:0F:0F:C8:14:BD:57:75:88
Authority key identifier: 78:17:75:AD:F9:71:72:E2:F6:8F:C9:10:53:09:D3:75:3B:A1:F4:CD
Certificate issuer:       /CN=781775adf97172e2f68fc9105309d3753ba1f4cd
Certificate serial:       0197488C148232991607290111D930753F96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eBd1rflxcuL2j8kQUwnTdTuh9M0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/eBd1rflxcuL2j8kQUwnTdTuh9M0.mft
Manifest number:          1578
Signing time:             Sat 07 Jun 2025 04:00:29 +0000
Manifest this update:     Sat 07 Jun 2025 04:00:29 +0000
Manifest next update:     Sun 08 Jun 2025 04:00:29 +0000
Files and hashes:         1: eBd1rflxcuL2j8kQUwnTdTuh9M0.crl (hash: gPzaF0hbqV/jmhCJ9UI7pFBY1fzkR5S9Kmv0wSOuDxU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/eBd1rflxcuL2j8kQUwnTdTuh9M0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/eBd1rflxcuL2j8kQUwnTdTuh9M0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eBd1rflxcuL2j8kQUwnTdTuh9M0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:8c:14:82:32:99:16:07:29:01:11:d9:30:75:3f:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=781775adf97172e2f68fc9105309d3753ba1f4cd
        Validity
            Not Before: Jun  7 04:00:29 2025 GMT
            Not After : Jun  8 04:00:29 2025 GMT
        Subject: CN=cb188d39024d1b475a20e3cd0f0fc814bd577588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2c:13:6b:73:77:8f:6b:1c:2a:71:b9:85:1c:
                    e4:ef:9f:69:d4:0b:3f:48:af:c6:63:ee:d7:25:30:
                    b1:88:f9:ee:17:6c:90:b5:2c:0d:b0:11:56:c8:87:
                    0c:d3:75:96:10:d9:c0:48:50:b0:34:4b:e2:68:48:
                    11:ca:a9:0f:90:41:c2:82:0f:c1:06:3f:de:db:c6:
                    ba:e8:b0:d8:6e:6c:4a:9c:90:a2:e2:49:14:1d:3a:
                    4c:73:44:2a:3a:6f:c7:6c:af:f1:7c:c7:00:aa:34:
                    1b:7d:fd:45:21:9a:97:5d:3d:64:20:59:26:c8:8f:
                    07:31:52:63:a6:85:d3:cc:88:73:bb:f2:62:ad:a3:
                    e3:bc:2c:d0:11:b3:c0:33:08:ef:12:1a:c0:95:79:
                    89:87:85:b5:29:ef:52:33:74:b5:89:f2:3e:6b:3a:
                    a7:6f:19:a8:fb:a9:10:40:d6:b4:df:76:c6:ec:12:
                    c0:1e:a8:7b:13:c3:c3:22:20:6c:7e:74:a4:b5:44:
                    ba:90:e8:b7:ec:e9:34:e1:78:7d:1e:8a:82:c5:a9:
                    ab:59:2b:a8:80:61:c8:f9:78:4d:d3:aa:12:3d:0a:
                    b5:75:15:2e:5d:66:e5:85:69:f9:25:24:84:63:4b:
                    95:b2:15:25:d5:24:06:b3:b5:6e:95:42:3d:62:8d:
                    e1:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:18:8D:39:02:4D:1B:47:5A:20:E3:CD:0F:0F:C8:14:BD:57:75:88
            X509v3 Authority Key Identifier:
                keyid:78:17:75:AD:F9:71:72:E2:F6:8F:C9:10:53:09:D3:75:3B:A1:F4:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eBd1rflxcuL2j8kQUwnTdTuh9M0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/eBd1rflxcuL2j8kQUwnTdTuh9M0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/eBd1rflxcuL2j8kQUwnTdTuh9M0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:e6:5a:fc:4f:0f:9d:12:da:d5:34:69:22:14:a7:37:a2:b2:
         b1:6e:c4:58:07:b5:31:dc:61:1f:7e:ce:4a:0a:09:90:7d:b4:
         bb:90:3e:0d:ff:4d:12:c2:bb:77:32:1a:24:84:31:9d:3b:ac:
         a8:6d:60:9f:8c:cd:11:79:69:55:5b:79:e0:68:4c:4e:9f:bc:
         f9:86:b1:8e:00:a1:58:20:0d:1f:6f:3b:07:75:25:22:e8:3c:
         89:40:ae:68:01:5a:10:8c:8a:bf:44:6e:de:2d:8f:c0:3f:ce:
         75:ac:e2:b4:8b:17:1e:5a:af:e6:48:d1:ca:e9:6c:22:c9:5d:
         17:5e:67:00:67:af:14:c4:d7:c0:c9:fa:a7:e2:15:b9:26:37:
         e7:f0:fb:14:6c:a6:24:74:60:46:22:ea:b5:0c:ef:f1:2c:8b:
         e0:55:25:26:e4:21:d2:2e:b3:96:87:e2:ae:50:ab:55:57:16:
         b9:ec:cf:66:d9:04:a2:72:f1:78:4e:c2:2b:8e:21:f3:75:d8:
         fa:09:48:9d:80:b4:d2:ec:b8:a6:65:84:01:9b:c5:6b:92:43:
         41:01:87:ef:7e:6c:26:1a:9c:49:b1:ec:d3:fe:5f:7e:d5:84:
         94:e7:3d:01:01:53:16:be:86:a9:cd:c8:bc:ae:61:ea:80:14:
         49:62:02:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:39:19 2025 by rpki-client