Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/c8d78f-c28c-4116-a3a2-5bf998e27fc0/1/Hn19JBnxEYqsXJktKt_2l7A-mns.mft
File:                     Hn19JBnxEYqsXJktKt_2l7A-mns.mft (raw, json)
Hash identifier:          ws8A+amMb8xk/G0gAqK7CHQVNNBSlVjCe8fN5+/VxQE=
Subject key identifier:   46:4C:FA:60:13:67:DA:EC:99:79:16:0A:83:CF:F1:36:6F:71:AD:95
Authority key identifier: 1E:7D:7D:24:19:F1:11:8A:AC:5C:99:2D:2A:DF:F6:97:B0:3E:9A:7B
Certificate issuer:       /CN=1e7d7d2419f1118aac5c992d2adff697b03e9a7b
Certificate serial:       019749D5BA920CD5902F38AC3DE128B21488
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hn19JBnxEYqsXJktKt_2l7A-mns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/c8d78f-c28c-4116-a3a2-5bf998e27fc0/1/Hn19JBnxEYqsXJktKt_2l7A-mns.mft
Manifest number:          0755
Signing time:             Sat 07 Jun 2025 10:00:33 +0000
Manifest this update:     Sat 07 Jun 2025 10:00:33 +0000
Manifest next update:     Sun 08 Jun 2025 10:00:33 +0000
Files and hashes:         1: Hn19JBnxEYqsXJktKt_2l7A-mns.crl (hash: 7E48YEu//L9jy5wCuigIHCfSeyCMmLQeDeI38J+SIF0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/c8d78f-c28c-4116-a3a2-5bf998e27fc0/1/Hn19JBnxEYqsXJktKt_2l7A-mns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/c8d78f-c28c-4116-a3a2-5bf998e27fc0/1/Hn19JBnxEYqsXJktKt_2l7A-mns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hn19JBnxEYqsXJktKt_2l7A-mns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:d5:ba:92:0c:d5:90:2f:38:ac:3d:e1:28:b2:14:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e7d7d2419f1118aac5c992d2adff697b03e9a7b
        Validity
            Not Before: Jun  7 10:00:33 2025 GMT
            Not After : Jun  8 10:00:33 2025 GMT
        Subject: CN=464cfa601367daec9979160a83cff1366f71ad95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:31:b0:b4:62:33:42:8b:80:0a:1e:da:ee:7c:
                    e0:51:dd:f0:30:18:6f:f8:01:e9:e9:83:9b:a6:60:
                    c6:51:44:f1:d2:32:5d:c7:4a:79:79:f9:e0:8b:72:
                    20:15:2e:60:40:3b:d3:7f:a5:45:9c:fb:93:67:e1:
                    1f:66:3b:ec:23:15:61:a5:2a:d9:20:bb:34:20:54:
                    62:c7:14:c2:a4:ae:db:85:99:64:a2:d3:dd:4d:1c:
                    53:9c:c1:43:41:c3:d9:ab:d2:4e:4c:eb:03:18:56:
                    2c:e8:ac:7b:3b:ae:39:c4:be:2c:eb:fd:66:0c:8b:
                    fe:7d:73:81:31:c2:c8:b2:94:56:40:16:5d:1c:93:
                    e8:8f:da:1a:ca:a3:d8:62:57:9c:8d:32:b7:2f:56:
                    9e:8d:62:96:f6:94:f8:da:22:0c:fe:86:31:fa:b3:
                    33:68:f6:3f:77:38:ac:76:ef:a2:39:93:32:f7:37:
                    3c:76:25:e1:a8:ae:74:91:97:ff:98:af:34:00:cf:
                    03:06:c9:cb:2e:e1:bc:52:b9:e4:25:3d:7f:da:d3:
                    22:ee:ff:e2:38:85:ce:66:4c:f8:c5:89:2d:c6:c2:
                    03:42:dc:10:a3:02:55:4f:4b:0b:40:50:14:da:b1:
                    4e:65:a4:a1:1a:98:dd:83:60:d3:6e:51:40:90:0e:
                    c0:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:4C:FA:60:13:67:DA:EC:99:79:16:0A:83:CF:F1:36:6F:71:AD:95
            X509v3 Authority Key Identifier:
                keyid:1E:7D:7D:24:19:F1:11:8A:AC:5C:99:2D:2A:DF:F6:97:B0:3E:9A:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hn19JBnxEYqsXJktKt_2l7A-mns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/c8d78f-c28c-4116-a3a2-5bf998e27fc0/1/Hn19JBnxEYqsXJktKt_2l7A-mns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/c8d78f-c28c-4116-a3a2-5bf998e27fc0/1/Hn19JBnxEYqsXJktKt_2l7A-mns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:40:57:a1:dc:6c:c5:fa:05:69:76:e4:b0:79:83:13:39:76:
         47:98:d3:9e:f7:25:48:46:0c:2f:13:2b:14:1e:a2:c0:25:86:
         c7:c0:9a:79:c2:41:14:f3:12:5e:fa:c3:41:65:b5:81:11:6c:
         91:63:e8:66:4d:59:48:61:87:06:96:b1:37:8a:e4:33:04:f0:
         15:a4:b9:c8:3d:6a:74:1e:6a:79:ee:af:2a:0a:ce:4f:2a:8b:
         39:48:58:18:54:e6:4f:f6:a7:fa:01:83:69:69:60:5a:f8:2f:
         2c:80:7a:db:fb:f4:bd:4b:72:18:be:ee:41:f3:82:f2:41:72:
         f5:5e:16:96:8e:7b:18:cb:18:c7:c3:a7:d2:0d:6d:48:d5:b3:
         11:10:d8:c0:a5:96:37:3e:42:cb:41:34:15:c1:62:3c:1a:a4:
         f4:9d:fe:c2:6e:ce:9a:74:d9:65:04:30:17:50:4d:02:fa:40:
         52:a8:d8:69:d9:af:5c:70:98:02:d4:fd:9d:5f:1a:3b:36:3d:
         b1:0f:14:96:6a:15:1a:be:7b:f2:92:bb:78:23:87:02:2e:79:
         da:91:9e:51:83:48:07:73:65:b1:6d:58:34:a9:bc:3a:8b:4b:
         23:2b:84:71:4b:df:a3:33:27:16:45:53:6f:7a:ab:fa:56:bf:
         a0:97:cb:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:31:52 2025 by rpki-client