Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft
File:                     cI7ctL7wrwFvBYdt285M0kx9968.mft (raw, json)
Hash identifier:          ma3ZjswSng1AGvF699PXLAmWbn2h3tRKDwZJlMPLJWY=
Subject key identifier:   8C:0D:11:77:EC:FB:86:1F:26:C3:A2:76:BF:83:03:11:0A:22:ED:3F
Authority key identifier: 70:8E:DC:B4:BE:F0:AF:01:6F:05:87:6D:DB:CE:4C:D2:4C:7D:F7:AF
Certificate issuer:       /CN=708edcb4bef0af016f05876ddbce4cd24c7df7af
Certificate serial:       01976DABA99E3A44CF2EDE0C48528B968748
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cI7ctL7wrwFvBYdt285M0kx9968.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft
Manifest number:          03B4
Signing time:             Sat 14 Jun 2025 09:00:56 +0000
Manifest this update:     Sat 14 Jun 2025 09:00:56 +0000
Manifest next update:     Sun 15 Jun 2025 09:00:56 +0000
Files and hashes:         1: cI7ctL7wrwFvBYdt285M0kx9968.crl (hash: eQvOWeJ9IplZHtCe3dQTS104QW4RBkP7r9dzn4XakOU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cI7ctL7wrwFvBYdt285M0kx9968.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:ab:a9:9e:3a:44:cf:2e:de:0c:48:52:8b:96:87:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=708edcb4bef0af016f05876ddbce4cd24c7df7af
        Validity
            Not Before: Jun 14 09:00:56 2025 GMT
            Not After : Jun 15 09:00:56 2025 GMT
        Subject: CN=8c0d1177ecfb861f26c3a276bf8303110a22ed3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:aa:92:9f:da:19:3c:98:e4:74:22:0f:cc:5f:
                    fd:ba:e5:b7:4c:d6:7a:37:12:1f:50:f1:49:20:e9:
                    55:0e:82:11:5f:b6:5b:02:15:7b:6c:72:2c:d3:31:
                    12:0f:4c:5c:06:34:ed:35:68:a6:75:94:88:3c:82:
                    10:f5:bc:d0:fc:27:3f:30:f6:93:8f:d7:aa:0a:55:
                    f8:46:00:db:36:6c:01:18:1c:44:8c:50:51:e5:5b:
                    06:d8:55:cd:80:64:50:08:47:84:0e:84:78:d8:cb:
                    77:55:53:3a:2f:95:15:9b:dc:27:e4:0a:3f:b3:f2:
                    1e:62:a6:cb:fe:1b:65:af:7b:aa:93:09:0a:67:43:
                    bc:02:de:84:9f:c9:04:4e:5f:4f:77:29:ed:28:86:
                    15:b7:28:a5:63:4d:55:9b:c5:f6:de:3b:a8:ef:c0:
                    22:0e:84:41:44:1b:a9:89:d1:df:7a:ef:39:76:7f:
                    85:7d:63:b7:a5:e6:98:65:6e:dc:d0:bd:72:e2:03:
                    3c:2b:a4:66:03:8e:12:e5:48:38:0e:be:f2:55:cb:
                    90:8c:c8:30:03:b6:e5:56:51:df:7a:4d:60:6d:f3:
                    4a:4a:67:21:d1:40:76:ac:1c:19:62:53:7b:c6:fc:
                    10:a3:99:a2:ba:0c:10:c3:e2:6e:ae:83:43:1f:e7:
                    ea:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:0D:11:77:EC:FB:86:1F:26:C3:A2:76:BF:83:03:11:0A:22:ED:3F
            X509v3 Authority Key Identifier:
                keyid:70:8E:DC:B4:BE:F0:AF:01:6F:05:87:6D:DB:CE:4C:D2:4C:7D:F7:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cI7ctL7wrwFvBYdt285M0kx9968.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:2b:dd:f9:fa:9c:02:ad:a7:d4:24:71:08:58:ab:2b:0f:d1:
         1f:3e:a9:10:73:0d:84:41:21:59:45:8d:73:2e:35:ea:a9:0a:
         3a:0c:e2:e3:c5:79:da:0b:cb:e4:58:08:48:45:58:0c:02:25:
         49:8c:8c:52:fc:e3:73:57:a9:8e:9d:25:cd:f7:6c:ee:53:61:
         b7:4e:85:6a:ea:3b:48:c4:bc:97:cf:f4:0b:e6:a9:ef:8e:d3:
         85:13:49:8c:fb:f4:ad:25:02:ce:78:68:d8:12:31:ba:d8:98:
         d4:ca:a4:18:f8:ec:c8:e9:1d:f0:5b:92:0f:c6:55:04:b6:76:
         3f:a3:41:9a:b9:3e:9b:ea:53:2b:41:04:07:3f:37:ae:de:0a:
         a8:5b:62:03:2b:8f:03:41:6d:0b:3d:e6:77:a2:0d:ae:29:d5:
         f2:ea:9f:f5:0f:57:21:d7:9a:b8:6c:b9:ec:17:2e:9b:61:1f:
         88:9a:3d:57:47:94:5e:70:ae:d5:66:41:e8:1a:30:d2:00:14:
         85:8c:7c:c0:4e:37:8a:56:2a:76:91:3e:c0:cd:f9:0b:e6:8a:
         43:20:8d:2c:d5:55:72:4f:9e:83:2d:9d:f2:55:73:74:6d:a1:
         d9:8b:9c:bb:e8:3c:e1:eb:09:20:b0:5a:9b:3c:23:cb:99:b4:
         c5:79:b6:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 14:09:13 2025 by rpki-client