Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.mft
File:                     fE6qxnNkfEicoVs_GEx64mfB6ms.mft (raw, json)
Hash identifier:          pJ+nSdsHOjaPjcyzlz94pwIxRu9agKMvaulRL4gsGS0=
Subject key identifier:   AA:33:E5:8F:D0:CD:80:35:B3:0F:20:71:31:06:72:3D:40:4D:CA:71
Authority key identifier: 7C:4E:AA:C6:73:64:7C:48:9C:A1:5B:3F:18:4C:7A:E2:67:C1:EA:6B
Certificate issuer:       /CN=7c4eaac673647c489ca15b3f184c7ae267c1ea6b
Certificate serial:       01975A5C03D68915503DD8DE5E77A508DD6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fE6qxnNkfEicoVs_GEx64mfB6ms.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.mft
Manifest number:          0F01
Signing time:             Tue 10 Jun 2025 15:01:09 +0000
Manifest this update:     Tue 10 Jun 2025 15:01:09 +0000
Manifest next update:     Wed 11 Jun 2025 15:01:09 +0000
Files and hashes:         1: fE6qxnNkfEicoVs_GEx64mfB6ms.crl (hash: FbtkTB3Mqo56Us850ucDG/G4svogcRMjSXV+2nnzsFo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fE6qxnNkfEicoVs_GEx64mfB6ms.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 14:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5a:5c:03:d6:89:15:50:3d:d8:de:5e:77:a5:08:dd:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4eaac673647c489ca15b3f184c7ae267c1ea6b
        Validity
            Not Before: Jun 10 15:01:09 2025 GMT
            Not After : Jun 11 15:01:09 2025 GMT
        Subject: CN=aa33e58fd0cd8035b30f20713106723d404dca71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:86:dd:60:f4:5e:21:65:60:6d:51:56:ca:1d:
                    71:08:87:7e:91:64:a4:1b:d0:9e:5d:af:a6:44:ce:
                    eb:28:4d:fc:4f:17:67:f7:cd:18:46:55:29:d5:46:
                    1d:ec:c5:5f:69:93:3f:e7:5f:e2:cd:a1:53:ed:8e:
                    38:c3:d4:c7:fd:5a:ec:94:49:68:27:fa:47:81:b8:
                    28:38:4e:04:71:c7:e2:c3:72:6d:a8:6d:04:24:d7:
                    1c:93:09:49:6a:2a:86:53:de:15:ca:85:cd:a0:45:
                    0c:28:6c:75:c4:91:27:d8:b9:4e:bd:6d:c2:34:8b:
                    1f:5e:5f:51:f7:3d:1d:7f:5b:f5:e4:62:1e:22:4d:
                    53:c9:a6:52:34:63:11:37:b2:16:5e:8d:4c:1d:b4:
                    5e:7a:9f:c5:eb:cd:1e:03:f2:6c:b0:a2:23:ae:78:
                    04:92:81:20:4c:4a:47:c9:d1:93:b6:8e:41:d6:af:
                    51:f8:58:64:28:14:c3:e6:e9:18:35:8e:d7:bf:ad:
                    0e:08:dd:65:e5:ed:8e:ce:32:fd:1d:7f:c0:5b:30:
                    4e:b2:dd:1b:b5:29:aa:85:af:fc:a3:75:46:12:f4:
                    c0:c8:c3:1c:85:01:90:df:ef:f4:c7:71:51:0a:35:
                    b6:9b:39:63:7c:a0:28:b2:ab:ed:db:aa:02:13:29:
                    21:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:33:E5:8F:D0:CD:80:35:B3:0F:20:71:31:06:72:3D:40:4D:CA:71
            X509v3 Authority Key Identifier:
                keyid:7C:4E:AA:C6:73:64:7C:48:9C:A1:5B:3F:18:4C:7A:E2:67:C1:EA:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fE6qxnNkfEicoVs_GEx64mfB6ms.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:03:1a:54:5b:49:64:4d:b8:d2:77:67:65:ba:5d:0e:79:6f:
         38:46:d2:54:a4:6a:1e:27:75:cb:82:01:76:c1:33:18:b8:44:
         cb:5a:71:53:12:33:fe:a8:cb:aa:dd:b7:67:79:d0:8b:7b:f2:
         f0:95:2d:de:ac:ac:cd:d7:f4:62:c0:e0:05:ad:e8:c1:3e:67:
         43:0e:47:29:e6:32:b2:e2:52:7f:dc:bd:03:4f:b2:99:64:61:
         22:71:a6:bc:c0:c3:ca:a2:c2:3e:5b:81:9e:e3:03:97:cc:94:
         f1:7d:61:b6:91:9c:94:9c:47:b2:05:66:fb:ef:a3:e9:b6:74:
         1c:e2:2f:12:f6:a6:1f:eb:d1:1e:8b:5b:06:fc:58:25:56:97:
         3d:a5:db:5b:2a:d0:1a:c3:25:ba:be:36:d8:a4:64:fb:13:4f:
         c4:48:5c:d7:ef:f6:ec:6d:5b:1f:a1:b2:38:40:a1:a3:f4:ca:
         c6:85:52:b6:04:29:98:5b:0b:38:0b:a7:66:d7:63:f0:de:79:
         0d:b1:1a:60:0d:3e:a0:1e:dc:72:79:8b:ae:df:6c:f8:96:00:
         08:d4:ca:a5:c8:1c:9f:ce:15:b9:88:0b:86:6a:b6:61:df:c6:
         b2:ce:f1:48:5d:d5:f9:65:38:b1:d2:77:d2:5d:cc:fb:99:d8:
         31:22:e0:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 20:48:05 2025 by rpki-client