Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/fd001c-3338-40a7-af1f-361eba30355e/1/E3ueCmc-FAe_PmWfLqYlN462Mng.mft
File:                     E3ueCmc-FAe_PmWfLqYlN462Mng.mft (raw, json)
Hash identifier:          R1ye7xUt64sGnzGJKJt6Ev8e8FAvMfnZBZ+3rnYbChw=
Subject key identifier:   95:44:AD:3E:F2:33:AE:D7:97:76:43:2F:7C:E7:29:1E:1C:82:34:64
Authority key identifier: 13:7B:9E:0A:67:3E:14:07:BF:3E:65:9F:2E:A6:25:37:8E:B6:32:78
Certificate issuer:       /CN=137b9e0a673e1407bf3e659f2ea625378eb63278
Certificate serial:       0197493111FECB6995D4EAE7336C18136234
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E3ueCmc-FAe_PmWfLqYlN462Mng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/fd001c-3338-40a7-af1f-361eba30355e/1/E3ueCmc-FAe_PmWfLqYlN462Mng.mft
Manifest number:          0649
Signing time:             Sat 07 Jun 2025 07:00:42 +0000
Manifest this update:     Sat 07 Jun 2025 07:00:42 +0000
Manifest next update:     Sun 08 Jun 2025 07:00:42 +0000
Files and hashes:         1: E3ueCmc-FAe_PmWfLqYlN462Mng.crl (hash: A3qFpcrkBo3XUwjodLdYLjLWaSF9AVmvqLstS+O6D4Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/fd001c-3338-40a7-af1f-361eba30355e/1/E3ueCmc-FAe_PmWfLqYlN462Mng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/fd001c-3338-40a7-af1f-361eba30355e/1/E3ueCmc-FAe_PmWfLqYlN462Mng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E3ueCmc-FAe_PmWfLqYlN462Mng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 07:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:31:11:fe:cb:69:95:d4:ea:e7:33:6c:18:13:62:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137b9e0a673e1407bf3e659f2ea625378eb63278
        Validity
            Not Before: Jun  7 07:00:42 2025 GMT
            Not After : Jun  8 07:00:42 2025 GMT
        Subject: CN=9544ad3ef233aed79776432f7ce7291e1c823464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:45:4e:de:7c:04:bc:c9:83:92:65:71:fd:cb:
                    57:a1:da:11:52:79:5b:cd:e8:2e:6a:30:cc:34:e7:
                    4d:30:f4:b3:6b:96:cb:67:c3:fe:83:e9:17:99:03:
                    4d:93:38:e0:1d:56:e2:85:39:64:c4:01:a4:2e:e1:
                    63:b7:fb:49:93:39:99:80:aa:f5:52:5f:88:93:f6:
                    15:d3:2d:e2:04:ab:33:fb:ba:0e:a2:2d:62:65:6e:
                    44:ec:63:28:75:c8:3e:d7:3e:ca:a4:89:46:64:16:
                    57:6d:57:d6:e9:c2:43:e6:64:91:b2:dc:3d:7d:f6:
                    e4:27:49:ea:43:48:57:12:38:a9:9b:02:c0:da:bc:
                    97:99:24:24:cb:0e:59:83:95:65:95:45:96:99:e6:
                    18:07:fc:0f:12:fb:ec:84:83:e6:e6:21:18:f1:08:
                    90:08:6f:7b:2f:43:c0:a0:f5:9b:da:6f:4e:8f:83:
                    f7:4c:aa:1d:45:59:dd:66:ef:73:61:e9:5f:f2:15:
                    94:47:39:e2:94:33:5b:be:1e:0a:e2:99:ba:6f:ad:
                    78:c2:3f:d6:ae:af:20:71:77:58:7c:01:0d:40:81:
                    29:74:9f:a1:17:26:36:bb:bf:05:ec:04:19:6f:d2:
                    18:aa:43:1a:01:9f:6b:7f:91:97:7b:fc:12:31:87:
                    d4:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:44:AD:3E:F2:33:AE:D7:97:76:43:2F:7C:E7:29:1E:1C:82:34:64
            X509v3 Authority Key Identifier:
                keyid:13:7B:9E:0A:67:3E:14:07:BF:3E:65:9F:2E:A6:25:37:8E:B6:32:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3ueCmc-FAe_PmWfLqYlN462Mng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fd001c-3338-40a7-af1f-361eba30355e/1/E3ueCmc-FAe_PmWfLqYlN462Mng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fd001c-3338-40a7-af1f-361eba30355e/1/E3ueCmc-FAe_PmWfLqYlN462Mng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:18:23:f1:24:98:d4:ec:fc:a0:9c:4f:ce:8e:af:00:c4:a6:
         1f:c2:0e:5b:77:ba:15:04:c2:7d:4c:d2:37:4a:95:eb:ca:56:
         cd:52:8b:1b:2a:9a:a2:10:31:55:f0:bf:cf:78:2a:43:08:cd:
         5f:a3:1a:ef:4e:ce:87:ba:c1:7b:ab:21:a5:7b:95:eb:88:8e:
         90:78:20:3e:37:35:f0:55:98:76:61:9c:7b:1b:83:0e:bf:d9:
         dd:52:6b:56:81:a7:c4:b6:7f:d9:c9:a9:04:db:5f:65:4d:98:
         e7:81:4c:d4:da:fc:7a:f2:6b:43:90:fe:43:b8:22:54:02:0e:
         52:99:9a:2a:2a:b2:e1:94:91:de:d4:e7:ea:8e:d7:1c:52:a7:
         34:8d:ef:c8:4d:59:64:ee:ef:58:f1:a3:cf:bb:09:53:08:97:
         16:16:3c:80:de:13:ea:7c:a5:72:2d:76:8d:0e:59:a8:2a:49:
         c2:f4:f0:a2:05:b7:13:18:dd:4f:68:66:f7:e7:d6:65:5b:2e:
         47:f2:d2:82:a8:f4:fe:f9:18:3b:c3:59:f9:63:f3:66:0b:d3:
         de:fa:ec:36:bb:d4:de:5a:19:9f:c6:0a:5d:b0:9b:31:d2:7a:
         85:45:45:28:c0:82:e1:8c:18:1a:f0:2b:70:22:24:13:9e:ae:
         e6:81:df:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:48:29 2025 by rpki-client