Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/dc5159-45f0-426f-9ef1-96e0c1c44483/1/g_65rfwvZVEiBb1IETJMnX9qAiI.mft
File:                     g_65rfwvZVEiBb1IETJMnX9qAiI.mft (raw, json)
Hash identifier:          130KESJbutnvwJyhg0+jZg1NEfolz0Nx2YbKUbrkTTc=
Subject key identifier:   63:5F:F4:BE:7B:C2:FA:26:EF:B6:9A:4A:E2:4D:74:85:D5:BD:52:E1
Authority key identifier: 83:FE:B9:AD:FC:2F:65:51:22:05:BD:48:11:32:4C:9D:7F:6A:02:22
Certificate issuer:       /CN=83feb9adfc2f65512205bd4811324c9d7f6a0222
Certificate serial:       01974E2050A1FA7F6692493C5738066C5949
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g_65rfwvZVEiBb1IETJMnX9qAiI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/dc5159-45f0-426f-9ef1-96e0c1c44483/1/g_65rfwvZVEiBb1IETJMnX9qAiI.mft
Manifest number:          0378
Signing time:             Sun 08 Jun 2025 06:00:29 +0000
Manifest this update:     Sun 08 Jun 2025 06:00:29 +0000
Manifest next update:     Mon 09 Jun 2025 06:00:29 +0000
Files and hashes:         1: g_65rfwvZVEiBb1IETJMnX9qAiI.crl (hash: O73JUKXjb9RIjwy4dy/cXGbhyyPmZ3Z1B4LIu6byNVk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/dc5159-45f0-426f-9ef1-96e0c1c44483/1/g_65rfwvZVEiBb1IETJMnX9qAiI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/dc5159-45f0-426f-9ef1-96e0c1c44483/1/g_65rfwvZVEiBb1IETJMnX9qAiI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g_65rfwvZVEiBb1IETJMnX9qAiI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:20:50:a1:fa:7f:66:92:49:3c:57:38:06:6c:59:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83feb9adfc2f65512205bd4811324c9d7f6a0222
        Validity
            Not Before: Jun  8 06:00:29 2025 GMT
            Not After : Jun  9 06:00:29 2025 GMT
        Subject: CN=635ff4be7bc2fa26efb69a4ae24d7485d5bd52e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:24:9d:b2:42:17:68:7e:b5:4b:e9:34:e1:87:
                    8c:98:1b:00:b8:a3:da:2b:48:14:b7:49:96:cd:aa:
                    69:f4:f2:4f:be:4b:6d:14:be:5c:01:b8:cc:48:a5:
                    3e:28:b6:31:67:8b:5f:93:c2:8a:f1:6c:7f:ce:13:
                    19:3e:93:73:02:ee:7e:03:aa:75:53:62:a7:e5:ff:
                    54:31:2e:31:97:6e:e9:68:89:32:eb:90:69:4b:54:
                    44:70:64:3b:bb:bc:a7:2a:0e:30:56:45:5c:6f:a5:
                    5c:e3:5f:83:88:eb:8a:74:4f:84:ba:c9:b3:c6:8f:
                    4c:86:b0:d1:9b:e3:56:43:7e:c1:ee:ad:3f:fe:ad:
                    bf:b9:0b:60:61:9e:a3:c6:b5:a3:74:03:1e:d7:dd:
                    c6:a4:05:16:d3:5e:07:7c:01:d2:3a:42:c1:7c:f2:
                    28:16:8b:aa:04:54:15:ae:92:a7:4a:03:72:46:50:
                    f9:4f:c9:70:b3:a0:31:ef:9f:cb:d3:86:81:9e:e8:
                    6d:c9:84:22:5b:2f:0a:4d:26:38:9a:92:70:62:10:
                    e5:21:e8:79:af:41:fd:40:91:30:c1:35:ee:66:a5:
                    d7:f9:d9:8d:0d:3b:42:a6:89:97:5d:d6:46:e8:6f:
                    bf:be:b1:7d:47:25:73:89:89:f5:5f:2e:7b:85:13:
                    17:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:5F:F4:BE:7B:C2:FA:26:EF:B6:9A:4A:E2:4D:74:85:D5:BD:52:E1
            X509v3 Authority Key Identifier:
                keyid:83:FE:B9:AD:FC:2F:65:51:22:05:BD:48:11:32:4C:9D:7F:6A:02:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_65rfwvZVEiBb1IETJMnX9qAiI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/dc5159-45f0-426f-9ef1-96e0c1c44483/1/g_65rfwvZVEiBb1IETJMnX9qAiI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/dc5159-45f0-426f-9ef1-96e0c1c44483/1/g_65rfwvZVEiBb1IETJMnX9qAiI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:25:51:d6:e9:a1:d0:ce:d3:09:8b:71:67:c1:08:04:cd:f8:
         27:ec:80:63:23:ee:d2:56:e7:35:30:d5:d1:8b:c1:1d:7d:a8:
         e0:1e:ee:06:af:11:2f:92:6a:3d:f6:e3:de:87:12:e1:0a:8b:
         9d:3b:7b:3c:ef:58:c9:9d:48:eb:32:ae:b4:a8:57:61:8b:59:
         67:33:8d:c6:87:3b:2d:e5:76:c8:be:a2:71:22:4a:7d:44:e1:
         8d:b1:b5:14:12:c7:0a:80:79:42:e8:e3:56:12:18:18:b3:36:
         9b:d6:4c:d6:7e:e4:fa:70:c4:69:f7:53:b6:dd:da:d3:e4:98:
         a8:d3:5d:1d:56:38:97:f2:28:0a:a2:2c:f8:a5:20:dd:30:bb:
         c2:0b:2b:76:85:6b:62:f2:11:96:d3:98:e7:12:47:74:cd:07:
         7b:3d:7a:ad:bd:9c:8e:30:a2:21:0c:94:24:be:79:5b:36:12:
         dc:3d:51:e4:eb:b2:0d:d5:18:8b:3f:e1:5b:39:ba:fd:29:62:
         a7:c6:0a:f1:ee:63:5e:b0:b3:2f:10:db:98:c3:1a:68:ac:22:
         b4:7e:da:e3:7b:e4:00:3e:19:fa:88:74:06:32:a2:6d:d7:99:
         09:e5:92:4b:5b:16:43:2c:6a:4d:d6:7b:48:2f:5a:2c:5f:9f:
         80:59:8d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 10:01:20 2025 by rpki-client