Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/677106-4099-4aef-8cc6-e960a50cdc81/1/tPo4W-BSv6QF36zSnyarbwAeYEc.mft
File:                     tPo4W-BSv6QF36zSnyarbwAeYEc.mft (raw, json)
Hash identifier:          rDaDzrO53KeHiTCCNh93F6lsQDXoxHz6SX2IBo7OiQk=
Subject key identifier:   4F:C6:5A:3D:2A:CB:D2:39:8E:28:38:F2:9E:44:BD:BA:AF:8B:B0:B2
Authority key identifier: B4:FA:38:5B:E0:52:BF:A4:05:DF:AC:D2:9F:26:AB:6F:00:1E:60:47
Certificate issuer:       /CN=b4fa385be052bfa405dfacd29f26ab6f001e6047
Certificate serial:       019759123FA8AEFF01C251F4E26B0CA06B91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tPo4W-BSv6QF36zSnyarbwAeYEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/677106-4099-4aef-8cc6-e960a50cdc81/1/tPo4W-BSv6QF36zSnyarbwAeYEc.mft
Manifest number:          03FE
Signing time:             Tue 10 Jun 2025 09:00:57 +0000
Manifest this update:     Tue 10 Jun 2025 09:00:57 +0000
Manifest next update:     Wed 11 Jun 2025 09:00:57 +0000
Files and hashes:         1: tPo4W-BSv6QF36zSnyarbwAeYEc.crl (hash: zZVldEwnNp3244Jk8j4aB5Gj53a1p3T9h78PzIpG1Bo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/677106-4099-4aef-8cc6-e960a50cdc81/1/tPo4W-BSv6QF36zSnyarbwAeYEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/677106-4099-4aef-8cc6-e960a50cdc81/1/tPo4W-BSv6QF36zSnyarbwAeYEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tPo4W-BSv6QF36zSnyarbwAeYEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:59:12:3f:a8:ae:ff:01:c2:51:f4:e2:6b:0c:a0:6b:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4fa385be052bfa405dfacd29f26ab6f001e6047
        Validity
            Not Before: Jun 10 09:00:57 2025 GMT
            Not After : Jun 11 09:00:57 2025 GMT
        Subject: CN=4fc65a3d2acbd2398e2838f29e44bdbaaf8bb0b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:4e:3e:42:69:b7:ff:e2:a0:d3:9f:20:77:59:
                    d1:b9:f8:d8:15:dc:2a:1d:0f:26:54:d1:25:fd:ef:
                    b1:68:ca:cd:e6:51:af:7a:50:ae:f3:90:ae:64:ba:
                    a1:f7:92:25:40:15:6f:4d:6c:bd:7e:d0:88:ab:84:
                    f0:93:0e:d1:40:f4:38:e6:5b:04:ed:af:ae:9f:de:
                    b9:24:31:3c:a5:58:0a:77:06:44:36:6b:cd:87:d3:
                    78:e3:05:d8:b0:4e:73:f7:dc:8f:19:d4:c1:c6:db:
                    fb:8d:85:0f:45:63:94:8d:3f:ba:1d:95:93:90:63:
                    27:60:56:0f:6a:b6:40:87:f8:4f:3e:bf:c4:92:7b:
                    1d:71:78:2d:70:c7:a7:be:75:ea:f1:77:6b:87:e0:
                    06:0f:b2:00:54:15:c3:fb:ab:34:4c:59:25:81:68:
                    9b:56:f6:e9:56:78:a0:81:04:38:2c:7e:8a:83:54:
                    07:e0:59:92:4a:ef:a6:8a:a8:57:8c:49:5a:7f:9f:
                    e3:a2:77:bb:17:28:d7:ce:f8:71:71:48:3f:90:cc:
                    9d:d2:22:71:f3:55:ab:6b:e8:39:3a:65:70:41:5e:
                    cb:af:37:11:e2:c5:10:09:19:39:13:c4:3d:a9:85:
                    b3:cf:7d:a9:a5:5b:3a:88:3f:78:e6:b3:0f:b8:5d:
                    f1:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:C6:5A:3D:2A:CB:D2:39:8E:28:38:F2:9E:44:BD:BA:AF:8B:B0:B2
            X509v3 Authority Key Identifier:
                keyid:B4:FA:38:5B:E0:52:BF:A4:05:DF:AC:D2:9F:26:AB:6F:00:1E:60:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPo4W-BSv6QF36zSnyarbwAeYEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/677106-4099-4aef-8cc6-e960a50cdc81/1/tPo4W-BSv6QF36zSnyarbwAeYEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/677106-4099-4aef-8cc6-e960a50cdc81/1/tPo4W-BSv6QF36zSnyarbwAeYEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:05:7e:10:9a:be:90:d4:9f:a8:95:9e:6b:ca:c0:48:11:dc:
         3c:b4:3e:19:f3:32:b9:da:74:b6:ed:57:e8:fb:5a:74:c5:61:
         d8:5d:6b:15:6d:08:31:a3:16:03:6d:96:b4:94:0b:b9:48:90:
         1f:1f:86:81:6a:d0:2b:ed:63:7a:05:3c:c8:b7:90:46:ba:03:
         b9:5e:a2:88:d9:3c:a1:23:01:9d:92:4d:74:1b:c2:eb:2b:53:
         aa:95:b8:31:44:38:97:4a:5d:c7:a9:ef:46:d9:86:0c:8f:37:
         e5:bc:c0:cf:f9:2f:5c:c2:2c:89:ea:ed:39:43:bc:14:e9:b2:
         a9:af:7e:f8:db:47:3a:f5:12:e2:08:e2:a5:28:79:f9:47:23:
         aa:ad:a8:e1:23:81:02:2b:73:1f:8f:19:f1:dc:34:65:ea:10:
         b0:64:58:93:2d:e8:27:7b:4e:40:fd:fa:cd:f5:81:0c:e7:d7:
         90:ab:ab:2c:b2:b3:63:e7:dc:7e:63:79:be:c7:21:4d:91:19:
         25:39:dd:02:37:c2:34:07:cd:e4:5b:1b:f3:f2:23:c4:ef:d5:
         68:eb:f4:16:eb:f8:1b:da:9e:c9:92:5b:42:a4:aa:e0:8e:f9:
         29:6c:8a:6b:9a:d9:16:ce:dd:4e:bf:94:04:4a:91:1f:df:46:
         7f:d9:65:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 12:11:50 2025 by rpki-client