Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.mft
File:                     cUKDDu7SiwS83QP6P9pIxUha_P4.mft (raw, json)
Hash identifier:          5pDnjOQY8eumvX9bvUuLO8QViOLw1AbtbvF5d18I8b0=
Subject key identifier:   EB:37:02:DA:2C:58:5F:27:1E:E7:69:6C:45:D0:D2:F6:12:7C:21:39
Authority key identifier: 71:42:83:0E:EE:D2:8B:04:BC:DD:03:FA:3F:DA:48:C5:48:5A:FC:FE
Certificate issuer:       /CN=7142830eeed28b04bcdd03fa3fda48c5485afcfe
Certificate serial:       01976395F7B90BD4B14D2F657C9BCEAC17FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cUKDDu7SiwS83QP6P9pIxUha_P4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.mft
Manifest number:          0E5D
Signing time:             Thu 12 Jun 2025 10:01:02 +0000
Manifest this update:     Thu 12 Jun 2025 10:01:02 +0000
Manifest next update:     Fri 13 Jun 2025 10:01:02 +0000
Files and hashes:         1: cUKDDu7SiwS83QP6P9pIxUha_P4.crl (hash: DUKHZvhcYAI4Cskixs7vjhl4r19A6ZpPa2ORlPNcFi4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cUKDDu7SiwS83QP6P9pIxUha_P4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 10:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:63:95:f7:b9:0b:d4:b1:4d:2f:65:7c:9b:ce:ac:17:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7142830eeed28b04bcdd03fa3fda48c5485afcfe
        Validity
            Not Before: Jun 12 10:01:02 2025 GMT
            Not After : Jun 13 10:01:02 2025 GMT
        Subject: CN=eb3702da2c585f271ee7696c45d0d2f6127c2139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:45:24:43:eb:8c:eb:e1:f2:67:eb:5b:4f:07:
                    61:25:de:65:c9:ad:b4:b1:e1:e8:c6:dc:4f:9d:08:
                    90:de:7b:86:fc:92:c7:95:87:ee:ce:f9:ab:ed:94:
                    f7:30:eb:2f:77:f4:83:34:1c:cf:43:e2:ea:71:1f:
                    c3:b5:3a:8c:b5:f6:aa:a0:78:2b:af:f8:dd:30:00:
                    c3:13:4a:bc:0c:18:73:46:b8:f0:17:e0:18:dc:6d:
                    19:9e:2c:74:92:e8:fe:d2:59:eb:73:e1:a4:52:e2:
                    1f:d5:12:4e:83:be:4d:05:84:71:9d:27:2d:7c:04:
                    d6:94:38:ac:00:87:5c:8d:cd:81:be:22:0c:3e:cb:
                    24:1a:eb:38:3e:f6:83:c9:6a:5d:a4:14:80:95:b4:
                    92:8c:84:e1:ee:84:89:8b:b7:ee:04:8c:d7:e4:03:
                    4c:80:af:2b:ff:54:ab:aa:06:07:04:20:7e:77:30:
                    92:e6:87:52:48:7a:6e:76:ea:8b:5d:98:95:c4:f7:
                    62:97:38:da:17:c9:1b:54:de:92:f5:56:3a:71:9d:
                    85:ef:df:4c:ee:36:2b:c3:91:95:6a:fa:f4:20:07:
                    7d:0f:e4:93:55:0c:28:24:f4:37:5f:19:46:08:b0:
                    19:db:f6:87:cc:d4:6b:36:08:c5:87:a6:70:08:c8:
                    ff:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:37:02:DA:2C:58:5F:27:1E:E7:69:6C:45:D0:D2:F6:12:7C:21:39
            X509v3 Authority Key Identifier:
                keyid:71:42:83:0E:EE:D2:8B:04:BC:DD:03:FA:3F:DA:48:C5:48:5A:FC:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cUKDDu7SiwS83QP6P9pIxUha_P4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:99:02:2d:eb:fa:c5:25:20:0c:6f:d4:86:ed:ad:79:5d:ca:
         ae:e7:0a:40:82:a4:06:e9:ff:ca:19:4b:70:03:9c:a0:4d:46:
         d7:04:e9:09:ff:cd:9e:13:b8:5f:e7:ef:be:cf:a9:c6:2c:ab:
         01:ab:18:13:95:ac:3c:21:f5:c0:ad:7e:ef:e8:e3:39:d9:96:
         9b:25:d8:cc:65:c8:61:4d:63:98:ad:f5:f3:a9:8c:11:54:4c:
         ea:9a:8a:4f:92:49:8a:0b:f6:a4:6a:eb:d6:95:dc:8e:44:ac:
         2e:1d:d5:8c:79:57:78:2d:9e:ca:69:ba:43:34:b0:41:95:56:
         98:5e:fb:5c:9a:e1:90:7e:2e:50:37:0c:0f:02:9c:36:bc:73:
         41:4c:b7:61:eb:01:cf:aa:e2:6b:29:ef:ec:37:3b:49:3a:9f:
         cd:e1:03:5a:d3:11:f4:55:e8:5b:e3:20:7c:0e:ad:83:30:89:
         c1:c1:43:06:e5:57:28:61:80:6d:46:47:2e:5f:ee:17:41:5d:
         15:c7:56:7e:a3:d5:87:3d:99:9d:85:8e:ea:2b:98:77:ea:ec:
         fd:ea:90:f7:a2:22:db:7b:2a:b3:81:ea:57:3d:a3:db:8f:d5:
         0d:dc:75:e9:2b:d0:fd:19:d1:65:ed:42:a2:20:0e:34:0c:af:
         31:92:8d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 16:04:26 2025 by rpki-client