Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/dcd400-6dbf-4f2e-8a96-e0d9929b8d01/1/fqQd0tUnX7allrJhoCfMjX-fNGw.mft
File:                     fqQd0tUnX7allrJhoCfMjX-fNGw.mft (raw, json)
Hash identifier:          Yt/WfbVj7QyKZHqEnlAzKDa6s4s9ro1y4Mj2PGCxcTk=
Subject key identifier:   48:46:8C:9E:FB:F1:52:D0:57:F7:03:4E:46:40:A6:F6:BA:5C:87:89
Authority key identifier: 7E:A4:1D:D2:D5:27:5F:B6:A5:96:B2:61:A0:27:CC:8D:7F:9F:34:6C
Certificate issuer:       /CN=7ea41dd2d5275fb6a596b261a027cc8d7f9f346c
Certificate serial:       01974A7AEF2216736D286E62529CB9209229
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fqQd0tUnX7allrJhoCfMjX-fNGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/dcd400-6dbf-4f2e-8a96-e0d9929b8d01/1/fqQd0tUnX7allrJhoCfMjX-fNGw.mft
Manifest number:          0C65
Signing time:             Sat 07 Jun 2025 13:00:59 +0000
Manifest this update:     Sat 07 Jun 2025 13:00:59 +0000
Manifest next update:     Sun 08 Jun 2025 13:00:59 +0000
Files and hashes:         1: fqQd0tUnX7allrJhoCfMjX-fNGw.crl (hash: VuxUqKdUyBMUCu5sHQ7h5g9PKDx1ZkUvaLW4HglFQG8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/dcd400-6dbf-4f2e-8a96-e0d9929b8d01/1/fqQd0tUnX7allrJhoCfMjX-fNGw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/dcd400-6dbf-4f2e-8a96-e0d9929b8d01/1/fqQd0tUnX7allrJhoCfMjX-fNGw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fqQd0tUnX7allrJhoCfMjX-fNGw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 13:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:7a:ef:22:16:73:6d:28:6e:62:52:9c:b9:20:92:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ea41dd2d5275fb6a596b261a027cc8d7f9f346c
        Validity
            Not Before: Jun  7 13:00:59 2025 GMT
            Not After : Jun  8 13:00:59 2025 GMT
        Subject: CN=48468c9efbf152d057f7034e4640a6f6ba5c8789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b6:8c:de:2e:f2:98:8b:fd:46:c5:68:7d:88:
                    5b:9e:82:82:75:0a:79:83:b8:cb:fc:b7:2b:2c:b5:
                    1f:85:41:8f:3e:84:93:2a:0d:24:42:5e:5d:ca:ee:
                    86:15:56:ed:65:6d:ad:a6:59:1b:5f:4b:b6:ca:ae:
                    12:71:3a:15:22:39:48:5f:9d:97:97:8f:42:96:09:
                    26:bc:10:a8:cf:61:e7:4f:dc:5e:e0:a5:92:62:a3:
                    c1:7f:cf:7c:14:24:66:8a:e3:b1:ae:9d:1e:29:c8:
                    bd:51:c1:a1:10:2c:2e:49:4a:d0:d5:84:3c:3e:ad:
                    73:69:e3:c0:a7:12:58:2c:94:60:68:37:77:e0:87:
                    4a:4b:3e:76:04:70:c6:3f:f3:67:d2:a0:46:91:60:
                    53:57:85:03:79:13:2f:05:fb:2a:93:d0:5b:81:50:
                    b5:61:f6:f5:bd:ae:ee:9f:0e:26:be:b6:a6:b1:a8:
                    d5:ac:be:cf:0b:25:63:ae:00:56:e0:9d:b7:70:c0:
                    05:49:b1:c0:77:0b:a9:39:46:3a:4a:94:c6:54:73:
                    be:93:f8:1c:0f:a9:f0:30:47:19:a5:35:40:50:0e:
                    28:f7:45:c3:a8:36:ab:35:29:a2:98:84:e6:36:ef:
                    f6:1d:d7:20:33:f3:ec:56:fb:79:c0:c8:c0:75:3f:
                    ed:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:46:8C:9E:FB:F1:52:D0:57:F7:03:4E:46:40:A6:F6:BA:5C:87:89
            X509v3 Authority Key Identifier:
                keyid:7E:A4:1D:D2:D5:27:5F:B6:A5:96:B2:61:A0:27:CC:8D:7F:9F:34:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqQd0tUnX7allrJhoCfMjX-fNGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/dcd400-6dbf-4f2e-8a96-e0d9929b8d01/1/fqQd0tUnX7allrJhoCfMjX-fNGw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/dcd400-6dbf-4f2e-8a96-e0d9929b8d01/1/fqQd0tUnX7allrJhoCfMjX-fNGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:5b:d1:94:d9:ec:9f:30:e7:d9:ef:86:a3:7d:d8:91:3e:c1:
         41:15:55:54:ab:2e:d0:e9:6a:ef:94:08:e7:e7:11:11:1c:39:
         24:37:9a:0f:ba:05:18:e3:38:0c:f1:6d:82:54:d4:52:b5:43:
         15:fc:60:f6:0c:7d:ae:6d:f4:8f:3a:6b:94:61:b4:2d:e1:55:
         3f:c4:15:84:b9:e9:07:51:d3:e6:90:e2:fe:69:0a:89:4b:d5:
         0d:4b:9f:8b:e2:dc:53:f7:e8:4f:2a:1b:5c:79:da:8c:2c:0d:
         dd:e1:ec:b8:64:80:ff:4b:27:7e:dc:07:2b:92:35:68:48:7c:
         11:79:99:9e:95:9b:4d:29:d2:f5:60:78:e0:57:ef:6e:61:c3:
         03:6f:bd:65:88:70:00:a9:1f:8f:fe:96:7f:5c:2b:3d:b7:91:
         92:5a:b9:60:28:b1:96:64:d4:86:38:4f:73:19:63:d4:6c:a3:
         12:d6:13:73:6e:87:5f:d4:88:92:2b:ae:09:e9:36:a6:45:38:
         f1:b8:8d:95:b7:b9:29:35:6c:5e:7f:06:50:38:1e:1c:17:5e:
         e3:48:14:3d:87:bb:c8:3b:ca:26:82:79:d3:e1:d3:b6:8c:7a:
         93:06:57:79:7a:97:39:3a:3a:9e:88:4d:ad:98:be:2a:f2:41:
         4f:37:44:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:12:39 2025 by rpki-client