Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft
File:                     44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft (raw, json)
Hash identifier:          YSmkggMozweH4BsotrZD126CM6cmts9ZF9yT3ub86go=
Subject key identifier:   D3:BF:2F:B0:E0:E0:7A:E1:41:54:C1:76:D9:8F:26:8B:A1:B2:03:2A
Authority key identifier: E3:85:73:32:13:B3:42:36:01:9A:14:0F:F1:9C:53:98:ED:71:73:0E
Certificate issuer:       /CN=e385733213b34236019a140ff19c5398ed71730e
Certificate serial:       01976282FAC496213CBF4BF5B17B9FB976B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/44VzMhOzQjYBmhQP8ZxTmO1xcw4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft
Manifest number:          0C5B
Signing time:             Thu 12 Jun 2025 05:00:40 +0000
Manifest this update:     Thu 12 Jun 2025 05:00:40 +0000
Manifest next update:     Fri 13 Jun 2025 05:00:40 +0000
Files and hashes:         1: 44VzMhOzQjYBmhQP8ZxTmO1xcw4.crl (hash: D7S7yOdX7qga9JdHCgdL9TehwRfhNoqYOlWSMdV4+x4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/44VzMhOzQjYBmhQP8ZxTmO1xcw4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 21:26:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:62:82:fa:c4:96:21:3c:bf:4b:f5:b1:7b:9f:b9:76:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e385733213b34236019a140ff19c5398ed71730e
        Validity
            Not Before: Jun 12 05:00:40 2025 GMT
            Not After : Jun 13 05:00:40 2025 GMT
        Subject: CN=d3bf2fb0e0e07ae14154c176d98f268ba1b2032a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f6:d5:6b:2d:3f:d9:af:df:07:ae:2f:92:a3:
                    dc:ac:80:bc:fb:81:7c:f3:bf:4a:e6:23:35:28:81:
                    3e:a8:03:81:19:04:e4:d0:21:79:f2:14:55:e8:f5:
                    ab:56:30:b4:3b:ee:60:50:60:68:f4:f7:b5:fe:14:
                    23:1c:21:21:67:4c:6b:54:9b:35:21:c4:ed:84:76:
                    70:34:6c:93:36:e9:e6:68:98:8a:09:ba:20:e1:26:
                    9c:77:48:b2:57:5f:9d:d8:2e:66:99:95:cf:c7:42:
                    83:ed:4f:a3:7b:9e:7d:10:61:d9:48:4b:e3:1f:ef:
                    9b:93:be:0a:be:c3:5b:e7:bd:22:04:78:1c:dc:cb:
                    02:32:27:fb:5a:19:86:d1:a0:35:27:30:f4:c1:bf:
                    05:a7:28:1d:1e:7a:fd:59:de:48:8a:d8:c0:3a:06:
                    1a:c1:14:a0:25:1c:ac:d0:ee:5f:0b:d7:98:c1:c3:
                    29:d8:fd:aa:18:58:32:12:eb:9e:e1:49:19:b2:b9:
                    3d:32:c6:a1:fa:be:2b:e9:c4:1e:86:4e:4e:8c:e5:
                    5c:7e:e8:c8:aa:b8:8d:52:3a:f0:4f:ac:03:e0:92:
                    0f:f1:ee:22:41:3c:41:89:88:4c:dc:90:a5:51:e6:
                    f6:e0:70:c8:66:8e:03:a4:49:fa:cf:0a:4a:6c:ad:
                    cc:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:BF:2F:B0:E0:E0:7A:E1:41:54:C1:76:D9:8F:26:8B:A1:B2:03:2A
            X509v3 Authority Key Identifier:
                keyid:E3:85:73:32:13:B3:42:36:01:9A:14:0F:F1:9C:53:98:ED:71:73:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/44VzMhOzQjYBmhQP8ZxTmO1xcw4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:b8:35:09:bd:3a:e6:c4:b2:bc:00:46:a0:94:f9:ab:23:ff:
         c2:88:62:21:56:cf:67:6e:fb:72:67:12:84:ad:95:99:13:02:
         b9:c8:b7:fb:51:7c:6b:0d:54:8b:05:b6:5c:59:5e:cd:b0:a9:
         d6:bb:5b:70:aa:70:f2:f7:ab:7e:44:02:b4:5a:1d:d8:63:ae:
         5b:b5:a4:a0:d8:26:1f:8d:be:ad:fd:2c:39:b1:1e:1b:eb:f5:
         dd:32:8c:c3:f1:3c:dd:bb:96:22:6c:b6:9f:57:58:eb:29:83:
         79:b0:8c:e6:28:d7:6e:1c:8a:79:a4:9a:d6:38:54:7d:c7:56:
         cf:84:6a:0f:97:20:15:4b:eb:77:51:5e:50:9f:ca:3d:bc:55:
         85:f4:18:37:44:52:97:1f:56:be:2e:2d:ce:bd:fb:c5:cb:e8:
         75:3c:99:0e:7e:4e:85:d8:94:fc:9b:d1:79:79:d4:5e:71:5e:
         63:77:c0:35:84:f7:de:9f:55:9e:a0:ec:18:e4:94:56:84:93:
         fb:c0:b7:d2:11:8e:5a:8b:4f:7e:ee:a3:71:42:72:66:c5:d1:
         25:81:78:7c:c9:27:8e:58:f2:9e:7b:36:6a:b2:42:c9:a2:d5:
         e7:f1:32:7f:b9:6a:55:d5:2e:54:98:d6:dc:be:73:8c:8c:fa:
         2d:4e:2a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 07:36:18 2025 by rpki-client