Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/d0815c-5b26-4317-8e75-5691f1738aba/1/Rx1zcSQTRsbqmkdpRoAhcsoHVms.mft
File:                     Rx1zcSQTRsbqmkdpRoAhcsoHVms.mft (raw, json)
Hash identifier:          mSDFvch1mpFQdJzoJ+xhXljYFrIJylwBkc/bW7sag4o=
Subject key identifier:   76:5B:E0:21:F4:1E:C4:EC:22:9E:41:95:0F:32:8D:4C:64:A3:9D:A3
Authority key identifier: 47:1D:73:71:24:13:46:C6:EA:9A:47:69:46:80:21:72:CA:07:56:6B
Certificate issuer:       /CN=471d7371241346c6ea9a476946802172ca07566b
Certificate serial:       01974A7AE9DDFE5FA6A178B0EC5D3633AEFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rx1zcSQTRsbqmkdpRoAhcsoHVms.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/d0815c-5b26-4317-8e75-5691f1738aba/1/Rx1zcSQTRsbqmkdpRoAhcsoHVms.mft
Manifest number:          08B2
Signing time:             Sat 07 Jun 2025 13:00:58 +0000
Manifest this update:     Sat 07 Jun 2025 13:00:58 +0000
Manifest next update:     Sun 08 Jun 2025 13:00:58 +0000
Files and hashes:         1: Rx1zcSQTRsbqmkdpRoAhcsoHVms.crl (hash: 1a/lR4g6pal0QQVhR3drcsFbNt6NPL3BQZoF+U/iXF0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/d0815c-5b26-4317-8e75-5691f1738aba/1/Rx1zcSQTRsbqmkdpRoAhcsoHVms.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/d0815c-5b26-4317-8e75-5691f1738aba/1/Rx1zcSQTRsbqmkdpRoAhcsoHVms.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rx1zcSQTRsbqmkdpRoAhcsoHVms.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:7a:e9:dd:fe:5f:a6:a1:78:b0:ec:5d:36:33:ae:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=471d7371241346c6ea9a476946802172ca07566b
        Validity
            Not Before: Jun  7 13:00:58 2025 GMT
            Not After : Jun  8 13:00:58 2025 GMT
        Subject: CN=765be021f41ec4ec229e41950f328d4c64a39da3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:74:d3:5a:89:0d:af:40:87:7f:31:15:5f:6d:
                    db:71:7b:30:92:e7:6d:d5:c7:0d:15:f8:e1:9c:c1:
                    af:94:b5:41:f4:2e:59:0c:93:7e:9f:d8:e9:87:9e:
                    d8:d5:01:e0:27:4b:87:49:98:b7:bb:10:09:76:f7:
                    3d:8f:7d:c8:59:03:39:3f:cc:14:71:e8:76:28:33:
                    98:c2:4d:ec:8b:be:3b:79:aa:32:80:ef:8b:d0:df:
                    0c:fb:f6:69:1d:42:80:a8:34:0e:82:7e:5f:92:bf:
                    ad:d8:e5:c5:f6:48:22:ee:d6:40:3e:46:85:fa:31:
                    7d:52:6d:ec:4f:eb:78:87:ed:04:47:9b:2c:08:fe:
                    e0:cf:7e:e3:bf:e0:6f:23:68:fa:a1:3d:f3:bf:c4:
                    39:c2:ff:d8:95:31:57:e3:1b:23:bd:46:37:3e:b4:
                    bb:0a:2a:7b:dd:6f:a9:b2:a4:f3:eb:b5:ec:82:9a:
                    01:93:8e:99:89:28:40:db:20:62:89:0b:ab:21:a6:
                    4f:7a:ae:06:e5:3a:ef:6f:43:4f:5d:f6:1b:62:16:
                    bd:2c:61:e2:07:8e:6e:6a:4b:0c:da:de:97:e7:39:
                    30:c7:7a:db:ac:04:7c:e5:90:9d:ae:02:cb:80:a4:
                    c3:3d:f5:af:c1:b6:c0:70:25:15:1d:97:b0:f3:83:
                    05:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:5B:E0:21:F4:1E:C4:EC:22:9E:41:95:0F:32:8D:4C:64:A3:9D:A3
            X509v3 Authority Key Identifier:
                keyid:47:1D:73:71:24:13:46:C6:EA:9A:47:69:46:80:21:72:CA:07:56:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rx1zcSQTRsbqmkdpRoAhcsoHVms.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d0815c-5b26-4317-8e75-5691f1738aba/1/Rx1zcSQTRsbqmkdpRoAhcsoHVms.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d0815c-5b26-4317-8e75-5691f1738aba/1/Rx1zcSQTRsbqmkdpRoAhcsoHVms.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:ec:4d:36:95:79:0b:67:5d:98:a5:90:55:ce:a5:f5:92:18:
         d4:7a:cb:09:ee:4f:9d:55:2b:e0:b9:53:ba:d9:78:21:80:a0:
         72:37:96:c8:f9:84:b7:d5:73:d0:e2:2e:e1:e1:4a:07:ab:46:
         1f:bd:9e:01:57:7c:c1:9e:74:6e:c3:2f:6a:3a:62:7a:67:fb:
         2e:9a:45:eb:d1:89:85:2b:9c:85:b1:f7:29:6b:7b:8d:8d:7b:
         a8:24:51:e4:1a:16:39:7c:37:81:ab:fb:b5:e3:2b:9f:a9:8f:
         72:77:f5:7d:a2:17:9e:1d:f5:e1:d1:17:8e:d6:a5:8d:0b:a3:
         37:c6:79:9f:62:0b:a8:04:c4:6a:e4:fb:43:85:2e:90:d7:a5:
         0f:7f:db:18:4b:ef:62:94:92:91:8d:2e:ca:d1:0f:a6:6a:af:
         43:07:f3:bc:ec:1b:40:6b:78:a8:9b:7f:63:1d:1a:ee:b6:55:
         27:eb:0f:ec:8a:4f:b4:08:73:91:3e:1e:9a:81:b9:39:d7:fd:
         18:f0:36:8f:64:9c:c5:8a:48:e9:a9:10:98:88:09:35:e8:1c:
         f9:70:61:fe:e9:26:be:a5:1f:07:d9:2c:79:70:77:4c:0c:10:
         e4:88:38:c9:af:b9:2f:da:89:7f:8c:e7:2f:52:a1:d4:62:87:
         53:59:84:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:49:16 2025 by rpki-client