Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft
File:                     2n_WDMjnu2KTIE8woibgCHUksLU.mft (raw, json)
Hash identifier:          bM0bkOf6wHMKJttY620IfTW5Y1034czfuGbWUJ0ePbE=
Subject key identifier:   68:6D:79:64:4F:A5:6F:81:1B:01:F1:08:B1:9A:F8:75:54:66:5D:CD
Authority key identifier: DA:7F:D6:0C:C8:E7:BB:62:93:20:4F:30:A2:26:E0:08:75:24:B0:B5
Certificate issuer:       /CN=da7fd60cc8e7bb6293204f30a226e0087524b0b5
Certificate serial:       019748FAA0279BFC470FE0FB4F05273FDC10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2n_WDMjnu2KTIE8woibgCHUksLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft
Manifest number:          1578
Signing time:             Sat 07 Jun 2025 06:01:13 +0000
Manifest this update:     Sat 07 Jun 2025 06:01:13 +0000
Manifest next update:     Sun 08 Jun 2025 06:01:13 +0000
Files and hashes:         1: 2n_WDMjnu2KTIE8woibgCHUksLU.crl (hash: ZpOdI90AAljEhoQaF3/2uhr5ws5tQOsCUofpmNBYag4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2n_WDMjnu2KTIE8woibgCHUksLU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:fa:a0:27:9b:fc:47:0f:e0:fb:4f:05:27:3f:dc:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da7fd60cc8e7bb6293204f30a226e0087524b0b5
        Validity
            Not Before: Jun  7 06:01:13 2025 GMT
            Not After : Jun  8 06:01:13 2025 GMT
        Subject: CN=686d79644fa56f811b01f108b19af87554665dcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:25:3f:b5:b0:54:ba:40:4e:38:05:53:ed:75:
                    8b:b8:de:0a:1a:d8:e4:2f:3a:1f:04:49:15:86:32:
                    7e:65:84:94:13:00:92:8b:61:3d:e4:c7:ac:bd:0a:
                    55:6b:56:da:ba:9d:4a:ef:8a:fa:2d:1a:7d:24:6f:
                    0a:51:95:95:5a:07:dd:42:b3:21:8a:74:61:d5:75:
                    a8:a7:62:b0:89:60:e2:3d:95:9c:fb:7f:39:07:1b:
                    89:be:51:0e:99:b1:66:12:7d:04:ec:4e:18:aa:77:
                    68:40:81:90:9b:97:b2:1a:69:a3:c8:8c:9e:b7:32:
                    e7:31:5d:e2:40:79:bb:19:9d:3b:c6:3c:2e:08:2e:
                    eb:35:70:66:db:56:33:f1:4d:e9:ef:e8:bd:df:ce:
                    b9:9c:7e:74:15:cf:73:cd:f5:92:2d:91:2b:8f:ce:
                    ae:8f:17:25:d4:a8:77:61:7e:c3:d9:6a:ab:1d:5b:
                    20:fa:8d:f2:f0:43:d2:92:1d:04:bd:8c:b7:74:fe:
                    de:08:b7:b9:31:e4:4a:80:f0:30:63:0a:81:3a:92:
                    78:73:22:d3:db:1e:cd:41:89:e0:ae:f9:f1:8f:e8:
                    eb:d4:5b:d4:20:77:48:8b:cf:74:26:8d:0c:91:70:
                    8f:df:89:41:a8:1f:44:24:43:68:a2:36:b5:06:32:
                    43:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:6D:79:64:4F:A5:6F:81:1B:01:F1:08:B1:9A:F8:75:54:66:5D:CD
            X509v3 Authority Key Identifier:
                keyid:DA:7F:D6:0C:C8:E7:BB:62:93:20:4F:30:A2:26:E0:08:75:24:B0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2n_WDMjnu2KTIE8woibgCHUksLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:bc:08:55:05:d3:4d:c8:71:a0:6c:86:97:1b:31:bd:0e:f9:
         1a:0b:fb:c3:35:e4:72:b4:3a:c6:3d:3e:17:9e:2b:cb:d1:c3:
         d1:21:c4:5b:75:f4:b4:ad:eb:e6:50:9c:c0:02:df:db:d4:e8:
         16:cd:5f:56:67:04:f7:3b:6c:da:b3:c1:cf:53:7b:aa:73:6c:
         84:a0:0a:64:ef:25:a7:fb:25:bf:65:30:f2:bc:cf:ba:d5:ac:
         fd:ed:31:2f:86:0b:46:28:62:c3:1a:1f:44:ad:58:09:3d:2e:
         ea:dd:a7:01:26:58:56:02:ee:8c:5a:93:90:64:71:8a:fc:19:
         be:8b:70:07:a6:bb:82:d6:8c:f3:8d:58:38:a4:7b:4b:96:00:
         23:14:a5:78:80:77:fb:34:5d:cd:a2:65:d0:bb:90:67:5c:8e:
         dd:0d:de:c8:9e:49:d1:2f:2c:89:ea:17:dd:a9:c7:08:d8:1c:
         65:be:e5:14:66:b2:1d:53:b6:50:68:51:fb:a5:9c:da:fc:f7:
         b2:5d:41:1c:d9:21:1a:41:26:cc:25:bf:e1:ed:cb:bf:fe:23:
         70:0e:c7:89:ba:3c:74:be:cb:f2:2f:ef:c3:64:4d:41:9f:85:
         e5:ff:ff:28:6d:66:4f:49:93:5d:63:0a:c6:87:25:c8:ab:1c:
         35:47:dc:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:56:48 2025 by rpki-client