Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.mft
File:                     _EeASzKQyJovwgWF9BpGgM3Y3zE.mft (raw, json)
Hash identifier:          5nzHLxjT53AJ4wSRcFhg/eD2fTVV/9tqPwh+dVH4tNA=
Subject key identifier:   49:61:AB:DD:F6:DC:9B:82:39:55:B0:81:83:0C:38:4A:22:96:C6:B7
Authority key identifier: FC:47:80:4B:32:90:C8:9A:2F:C2:05:85:F4:1A:46:80:CD:D8:DF:31
Certificate issuer:       /CN=fc47804b3290c89a2fc20585f41a4680cdd8df31
Certificate serial:       01977075B2B271C894C31474DD39F25CCF06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_EeASzKQyJovwgWF9BpGgM3Y3zE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.mft
Manifest number:          12F6
Signing time:             Sat 14 Jun 2025 22:00:50 +0000
Manifest this update:     Sat 14 Jun 2025 22:00:50 +0000
Manifest next update:     Sun 15 Jun 2025 22:00:50 +0000
Files and hashes:         1: _EeASzKQyJovwgWF9BpGgM3Y3zE.crl (hash: c0d5Q4UqYUeQOQ4TpplqjWZx0ZJvrsQAVjvGbseo9nI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_EeASzKQyJovwgWF9BpGgM3Y3zE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:75:b2:b2:71:c8:94:c3:14:74:dd:39:f2:5c:cf:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc47804b3290c89a2fc20585f41a4680cdd8df31
        Validity
            Not Before: Jun 14 22:00:50 2025 GMT
            Not After : Jun 15 22:00:50 2025 GMT
        Subject: CN=4961abddf6dc9b823955b081830c384a2296c6b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:06:cc:51:a9:8e:c0:e2:63:e7:1e:98:7e:34:
                    fd:a2:8d:f5:35:ae:6c:40:64:d5:e8:47:8e:4b:8b:
                    59:8b:1b:52:3b:35:0b:b0:29:5f:47:ea:d7:a5:08:
                    b1:0f:87:06:89:05:44:23:6d:3a:43:7e:0a:cd:20:
                    9e:a9:46:24:d1:5d:3a:d7:ee:f8:df:d5:3d:2e:3b:
                    23:b1:1a:92:a0:c6:5d:f5:15:d4:b6:0f:4c:15:07:
                    ed:4d:4a:c0:a9:b4:97:af:7a:78:a2:47:41:9c:ab:
                    7a:8e:da:7b:1e:ce:85:42:1f:5d:16:ab:d9:d0:f8:
                    af:95:3d:98:b0:cb:d7:4a:41:70:03:26:77:db:2d:
                    e9:ee:c3:54:e0:d1:22:7c:ad:a1:08:45:7a:8a:af:
                    af:4f:45:3d:d9:59:e1:d1:96:d7:93:ec:10:30:71:
                    a6:8e:f5:2a:4b:71:d7:8f:a7:57:4b:67:6d:ee:27:
                    09:03:f8:2c:8a:57:68:7e:fb:0b:0c:4f:f5:c4:36:
                    4c:58:78:5a:48:87:21:0e:d1:3a:87:fa:de:63:a1:
                    0e:c2:68:fd:7a:cd:e3:94:4e:fb:be:e4:c1:17:7c:
                    c6:67:5e:6d:86:c7:ef:cc:6d:c2:0c:f6:6d:53:2d:
                    19:bb:35:03:4d:fd:cd:60:c5:11:61:6b:7a:6b:89:
                    f4:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:61:AB:DD:F6:DC:9B:82:39:55:B0:81:83:0C:38:4A:22:96:C6:B7
            X509v3 Authority Key Identifier:
                keyid:FC:47:80:4B:32:90:C8:9A:2F:C2:05:85:F4:1A:46:80:CD:D8:DF:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EeASzKQyJovwgWF9BpGgM3Y3zE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:5b:f6:3d:44:4e:92:65:76:51:67:39:70:7f:53:4b:44:c7:
         bf:8f:1e:8a:7b:10:56:33:24:b5:8f:19:97:32:e9:05:34:a4:
         4f:8b:4b:55:45:e2:d0:fb:60:3d:46:f0:84:f9:37:ae:5c:f3:
         80:b1:a6:97:e6:88:15:0b:99:20:f1:4f:0c:22:4d:dc:17:7b:
         ce:c6:3d:f2:bf:4d:41:2a:a7:3a:11:24:15:9c:e7:15:61:0c:
         39:64:38:20:a1:bc:f6:31:b9:93:d4:70:3d:e7:d0:42:09:89:
         64:e2:68:55:63:12:bc:3f:d5:21:cc:af:cf:3f:21:e2:37:2e:
         b8:8c:31:93:ec:81:b6:43:93:a6:29:fe:f2:be:5a:8a:17:6d:
         33:ac:32:37:f6:9e:6a:1a:aa:b1:d6:03:60:aa:85:be:48:6d:
         17:1d:e0:5a:62:67:00:e8:2f:c4:ac:2d:79:98:31:84:d2:25:
         51:fe:ed:2e:13:0f:37:90:dd:00:b9:88:32:60:3c:63:fe:f0:
         04:67:15:55:5a:24:1f:f7:40:7f:c6:c3:69:37:32:6e:ec:9e:
         13:6e:b0:08:ca:c4:ca:51:93:eb:7f:fb:fd:70:19:33:95:72:
         b6:3e:1b:df:1c:f0:2b:96:4b:3e:86:47:f7:b2:98:e4:a9:3e:
         39:88:a1:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 01:14:55 2025 by rpki-client