Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.mft
File:                     0N8zCbPxj7vsmZxBL97x3EQg5Cw.mft (raw, json)
Hash identifier:          aclx8Jr1xDngP9zPFjkQuI8RY6Rz8P690lYIOqVHUPQ=
Subject key identifier:   4D:F7:6A:D0:A1:6E:A8:90:75:E3:22:60:D9:55:F7:24:72:8E:E5:9F
Authority key identifier: D0:DF:33:09:B3:F1:8F:BB:EC:99:9C:41:2F:DE:F1:DC:44:20:E4:2C
Certificate issuer:       /CN=d0df3309b3f18fbbec999c412fdef1dc4420e42c
Certificate serial:       01975A24783E43F4B7A08A90696059A2C544
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0N8zCbPxj7vsmZxBL97x3EQg5Cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.mft
Manifest number:          0551
Signing time:             Tue 10 Jun 2025 14:00:28 +0000
Manifest this update:     Tue 10 Jun 2025 14:00:28 +0000
Manifest next update:     Wed 11 Jun 2025 14:00:28 +0000
Files and hashes:         1: 0N8zCbPxj7vsmZxBL97x3EQg5Cw.crl (hash: xr9IGFlmrkA9RJohqZIx9DTpzpeUNJs4JKgT1HV2WyQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0N8zCbPxj7vsmZxBL97x3EQg5Cw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 14:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5a:24:78:3e:43:f4:b7:a0:8a:90:69:60:59:a2:c5:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0df3309b3f18fbbec999c412fdef1dc4420e42c
        Validity
            Not Before: Jun 10 14:00:28 2025 GMT
            Not After : Jun 11 14:00:28 2025 GMT
        Subject: CN=4df76ad0a16ea89075e32260d955f724728ee59f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:44:50:bf:53:11:02:44:b6:bc:50:80:5e:dd:
                    b9:15:25:c8:93:a6:eb:ef:c8:58:4e:6d:4b:84:16:
                    ad:01:2d:c0:8d:9b:58:e9:46:fa:6b:ff:ef:19:f4:
                    14:e3:4b:22:3f:ab:62:32:e9:91:dc:6f:6f:b1:78:
                    8f:4b:0f:7d:58:e6:64:64:b1:ec:e2:4c:12:67:fe:
                    d0:0b:a7:30:56:d2:77:fc:6e:b0:d6:46:54:27:6e:
                    4b:f5:8a:9d:d8:66:16:99:cb:80:86:10:da:70:28:
                    82:5d:52:ab:21:99:3b:22:4d:f1:73:cf:84:77:b2:
                    0d:0e:8e:86:23:ee:66:bb:de:e3:0f:45:66:2d:0b:
                    64:f2:01:46:45:6b:4b:4b:46:32:ba:c4:74:00:b8:
                    eb:2a:db:ff:ea:45:a4:20:c0:75:68:b7:8a:a9:21:
                    16:dc:1a:6e:b7:0c:29:72:bb:a6:5b:16:19:1e:e6:
                    2b:ce:95:78:2d:43:21:c3:82:a7:3b:87:b9:6a:75:
                    b6:8a:5b:98:0b:08:75:b4:da:70:b6:e9:b2:e7:b3:
                    25:1d:31:a2:2d:70:f7:06:0e:5d:9c:3a:98:aa:ee:
                    32:15:58:62:5a:4f:51:27:61:43:4e:b0:fd:e3:bc:
                    3b:83:87:6d:44:90:a4:19:6a:fa:d7:95:23:92:5a:
                    13:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:F7:6A:D0:A1:6E:A8:90:75:E3:22:60:D9:55:F7:24:72:8E:E5:9F
            X509v3 Authority Key Identifier:
                keyid:D0:DF:33:09:B3:F1:8F:BB:EC:99:9C:41:2F:DE:F1:DC:44:20:E4:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0N8zCbPxj7vsmZxBL97x3EQg5Cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:eb:60:90:ba:3f:bb:8d:82:21:bf:a5:64:f7:42:7c:ca:55:
         56:b3:12:f7:18:fb:7b:4b:0f:16:01:c5:4a:a4:7d:b5:bd:cc:
         7f:b5:a0:3c:19:77:8d:9b:7e:60:ee:ac:5b:21:ff:47:d0:4a:
         0b:2b:c0:fc:74:f1:ab:ef:5d:e4:01:b8:46:5a:54:a1:be:69:
         a4:d0:5c:79:ef:de:ee:19:42:3a:bb:a2:45:4e:a6:f5:76:f1:
         ca:fe:a2:1a:3c:85:8c:3a:b0:18:03:56:ab:01:13:11:30:4c:
         88:21:7a:a1:2e:0b:fd:e6:16:fc:c2:50:d4:0a:68:22:01:03:
         94:45:e5:76:f4:ee:c8:d4:10:9d:8a:ab:11:e4:dd:6b:65:07:
         3e:09:6c:4b:da:24:1a:fb:6f:98:bf:08:f6:0d:34:58:f2:43:
         57:2d:bf:4b:54:41:71:93:d3:a4:f3:93:29:71:24:e4:18:1d:
         ca:26:79:39:c9:ff:d7:7b:84:e3:1d:4c:35:06:02:42:fa:fc:
         ff:c5:23:d7:6d:0a:53:67:26:82:c1:e5:2c:a6:3d:76:fd:a0:
         ff:a2:86:6e:02:40:58:d4:16:80:cd:3c:94:80:83:87:e9:b9:
         ea:34:76:38:8a:a0:94:d1:02:15:15:8f:d0:d5:d2:5a:fc:55:
         5e:b7:a0:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 19:27:49 2025 by rpki-client