Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.mft
File:                     79MNaTKdM_RCEr-Gtp_yCIEFEGM.mft (raw, json)
Hash identifier:          AUzMmRmaHhKQmzBY7xwP+chMjg1TN/cWBuORh7MUs0E=
Subject key identifier:   94:7C:E7:08:22:A3:7F:76:18:DB:51:0C:02:7F:C5:B6:D1:8B:2B:1B
Authority key identifier: EF:D3:0D:69:32:9D:33:F4:42:12:BF:86:B6:9F:F2:08:81:05:10:63
Certificate issuer:       /CN=efd30d69329d33f44212bf86b69ff20881051063
Certificate serial:       019765F222C4358AFF25008E55E8801A8549
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/79MNaTKdM_RCEr-Gtp_yCIEFEGM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.mft
Manifest number:          1587
Signing time:             Thu 12 Jun 2025 21:00:56 +0000
Manifest this update:     Thu 12 Jun 2025 21:00:56 +0000
Manifest next update:     Fri 13 Jun 2025 21:00:56 +0000
Files and hashes:         1: 79MNaTKdM_RCEr-Gtp_yCIEFEGM.crl (hash: QE/XuDZkZRrODmn7tTrK7rGHj2IGYe5i5PSZIEZaTDo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/79MNaTKdM_RCEr-Gtp_yCIEFEGM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 21:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:65:f2:22:c4:35:8a:ff:25:00:8e:55:e8:80:1a:85:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efd30d69329d33f44212bf86b69ff20881051063
        Validity
            Not Before: Jun 12 21:00:56 2025 GMT
            Not After : Jun 13 21:00:56 2025 GMT
        Subject: CN=947ce70822a37f7618db510c027fc5b6d18b2b1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4c:09:9c:ef:80:83:ce:e0:b5:58:a3:e6:95:
                    77:cf:96:cc:87:ba:9b:01:0f:cb:f8:fe:bc:84:34:
                    33:35:ce:3f:c1:8d:58:d8:e5:6f:29:b4:2a:3b:6d:
                    00:9f:62:db:8d:9a:3a:cd:fe:b0:13:f2:7a:95:d3:
                    84:38:d7:fb:e1:93:d3:49:87:ba:52:8b:99:8a:29:
                    78:e1:4c:3e:c9:e6:8e:f2:63:1b:0b:81:cc:bb:9b:
                    61:98:23:8d:5b:f5:f0:29:24:da:60:58:f9:47:57:
                    1f:89:e1:50:86:03:fb:3a:3b:51:bc:b0:5c:0c:9d:
                    5f:b6:ce:b3:6e:f3:b1:15:5c:68:99:d1:11:15:c8:
                    46:96:cf:a2:23:e0:40:1c:94:00:ca:df:d0:b8:1d:
                    04:fa:99:06:ec:84:1a:2e:44:2e:4d:f9:ca:bd:1d:
                    97:20:da:53:78:95:12:d6:2f:de:6a:5b:30:05:12:
                    da:79:8a:fd:7b:62:7e:4e:bf:02:4b:9d:cd:72:ec:
                    f8:d1:05:47:8c:fe:ef:98:90:a3:44:57:93:d2:8a:
                    6f:1d:f1:1b:f7:94:62:17:3e:5d:53:5e:40:c0:c7:
                    13:ef:9e:4b:14:a0:53:bb:1b:e4:6a:b7:d0:2a:95:
                    25:0b:ec:34:0a:84:b1:1d:82:99:0d:55:e1:6c:b6:
                    de:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:7C:E7:08:22:A3:7F:76:18:DB:51:0C:02:7F:C5:B6:D1:8B:2B:1B
            X509v3 Authority Key Identifier:
                keyid:EF:D3:0D:69:32:9D:33:F4:42:12:BF:86:B6:9F:F2:08:81:05:10:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/79MNaTKdM_RCEr-Gtp_yCIEFEGM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:87:df:e0:85:44:a7:80:cd:83:50:f1:77:e3:69:d1:36:6a:
         99:92:e4:8d:32:90:a5:f3:4a:5c:a3:2b:cc:3b:9a:c5:c7:30:
         2a:c2:0e:3e:47:b7:5c:dc:a8:a0:63:59:20:bd:82:c6:dd:52:
         fc:62:2c:4d:4c:d9:60:fd:4a:b6:85:c1:e9:0a:4c:48:18:95:
         6c:5b:d7:1a:0b:91:df:1a:1e:98:cc:e9:c6:6c:33:f8:a3:f9:
         95:91:73:00:15:30:4e:29:36:17:47:4b:c0:80:8c:89:c5:17:
         0b:dd:f9:08:00:7d:43:b4:a1:c4:e5:90:9a:b0:ee:a6:0a:47:
         f5:60:6f:e7:ee:3a:5b:18:36:e1:1f:28:09:9e:fa:ba:30:90:
         7a:f4:dd:af:7a:3f:c9:72:2f:09:2c:b2:71:78:aa:3d:3c:2b:
         8b:ae:c1:13:32:fe:d7:29:c2:51:d7:67:77:0d:bb:46:fe:cf:
         eb:38:c5:64:c6:9f:9a:80:26:2e:7e:ca:f8:4e:46:c7:75:aa:
         39:c6:51:47:fa:e9:09:2c:20:a1:d1:32:fd:5d:15:4d:31:07:
         54:0c:3a:a1:f1:cc:3f:8e:24:7b:a4:0a:27:bf:b6:11:cb:bd:
         74:34:a6:5a:41:4b:48:2d:92:39:6c:92:6a:1a:17:4b:8c:a6:
         80:6d:cc:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 01:45:59 2025 by rpki-client