Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/746d3a-13be-492e-8cb3-62aa054a7851/1/cOWgYTFWcLW_JuJ3ySw4lNcs08U.mft
File:                     cOWgYTFWcLW_JuJ3ySw4lNcs08U.mft (raw, json)
Hash identifier:          1GS3u/YWaEENd70ouRAI+6WnCQWBlAm21pfH7esCzmM=
Subject key identifier:   EF:70:20:3F:F0:92:03:49:19:49:D3:86:C4:48:B8:7E:E6:06:FD:5A
Authority key identifier: 70:E5:A0:61:31:56:70:B5:BF:26:E2:77:C9:2C:38:94:D7:2C:D3:C5
Certificate issuer:       /CN=70e5a061315670b5bf26e277c92c3894d72cd3c5
Certificate serial:       01974DB254ABABC1278764577267CACF9E9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cOWgYTFWcLW_JuJ3ySw4lNcs08U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/746d3a-13be-492e-8cb3-62aa054a7851/1/cOWgYTFWcLW_JuJ3ySw4lNcs08U.mft
Manifest number:          0328
Signing time:             Sun 08 Jun 2025 04:00:22 +0000
Manifest this update:     Sun 08 Jun 2025 04:00:22 +0000
Manifest next update:     Mon 09 Jun 2025 04:00:22 +0000
Files and hashes:         1: cOWgYTFWcLW_JuJ3ySw4lNcs08U.crl (hash: xegwCgEo1ZFO6b8mM3VNgt4tEjCzndfdefKqPnBWJpI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/746d3a-13be-492e-8cb3-62aa054a7851/1/cOWgYTFWcLW_JuJ3ySw4lNcs08U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/746d3a-13be-492e-8cb3-62aa054a7851/1/cOWgYTFWcLW_JuJ3ySw4lNcs08U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cOWgYTFWcLW_JuJ3ySw4lNcs08U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 04:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:b2:54:ab:ab:c1:27:87:64:57:72:67:ca:cf:9e:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70e5a061315670b5bf26e277c92c3894d72cd3c5
        Validity
            Not Before: Jun  8 04:00:22 2025 GMT
            Not After : Jun  9 04:00:22 2025 GMT
        Subject: CN=ef70203ff09203491949d386c448b87ee606fd5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a0:3a:95:e5:da:37:fa:2b:5e:17:fb:c3:3c:
                    30:b2:e2:c9:c8:6c:15:78:51:ed:39:f5:ea:21:c1:
                    f6:7a:64:59:60:de:53:35:a6:b3:ad:86:7e:9f:9b:
                    f0:ed:d3:97:06:fd:63:70:6d:ae:a8:d3:d6:cf:59:
                    9a:f1:9c:da:5f:64:be:c7:1b:ee:77:5d:83:69:1c:
                    61:aa:15:4e:cd:84:4b:af:d6:6a:1b:b0:26:55:6e:
                    ec:22:ae:ee:47:41:00:db:39:80:2f:43:3d:c1:69:
                    3f:ff:9c:2a:e7:d0:78:ad:5c:3d:c0:ae:22:24:d1:
                    29:55:12:69:fc:18:94:85:9c:03:b6:af:89:72:32:
                    6e:fe:f8:e5:7f:35:51:6c:0d:e4:e8:22:4d:21:2c:
                    2d:1f:18:de:12:0f:40:15:8c:b7:d6:42:33:67:d0:
                    80:50:61:6a:3b:3a:82:d7:d6:c1:f3:20:90:9b:a4:
                    63:ac:64:aa:ad:ed:0c:16:93:1b:fd:28:c6:7e:90:
                    1e:ca:2b:6d:e6:15:26:97:08:f2:78:99:c8:cf:1c:
                    77:1c:18:c1:17:2c:ca:2b:bc:85:8c:14:d6:00:c9:
                    f4:32:19:f9:26:3b:0b:3f:ae:39:fe:46:be:34:f3:
                    ec:7d:db:36:0c:92:2e:31:04:45:46:e1:81:60:0a:
                    3f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:70:20:3F:F0:92:03:49:19:49:D3:86:C4:48:B8:7E:E6:06:FD:5A
            X509v3 Authority Key Identifier:
                keyid:70:E5:A0:61:31:56:70:B5:BF:26:E2:77:C9:2C:38:94:D7:2C:D3:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOWgYTFWcLW_JuJ3ySw4lNcs08U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/746d3a-13be-492e-8cb3-62aa054a7851/1/cOWgYTFWcLW_JuJ3ySw4lNcs08U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/746d3a-13be-492e-8cb3-62aa054a7851/1/cOWgYTFWcLW_JuJ3ySw4lNcs08U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:e5:6e:91:5c:d1:01:73:d7:35:de:d3:bf:40:e3:93:0e:fd:
         16:c0:b0:51:ac:c4:4d:bb:e1:04:50:62:e3:97:aa:81:eb:58:
         41:f8:c0:8b:f3:3a:55:07:9f:24:ef:63:de:94:da:e4:ab:ab:
         87:66:d8:d9:80:17:1b:0d:32:d5:b4:2f:7f:a5:af:5f:4a:6f:
         c2:dd:62:40:c1:29:a0:ae:68:eb:29:0f:b6:8a:dd:b0:bd:12:
         41:ab:0e:8e:68:2a:c5:c5:5c:1a:92:97:b6:b0:6a:d0:b2:80:
         6e:bb:d6:16:c9:59:24:50:e0:36:95:c4:9c:39:a1:c4:47:a7:
         42:54:c7:e2:13:3c:aa:f2:cc:55:5d:81:88:a5:ac:4c:98:8b:
         21:3b:f8:f2:9b:3b:02:91:a9:e0:4a:9e:0c:5d:79:6c:75:05:
         68:3d:2c:26:2d:94:cd:f7:28:a7:7d:32:ea:e9:03:64:d9:2c:
         34:61:f5:9a:58:1a:43:c1:42:8e:a9:f9:a1:39:79:0e:b1:02:
         b2:95:20:68:49:85:7d:d7:99:65:b1:90:0f:cf:0e:7a:b6:db:
         79:fc:a6:6f:b4:ae:d0:8c:a0:1f:5e:ee:40:7a:a9:85:b7:ce:
         ba:74:80:f3:47:aa:f5:c6:8e:23:0b:15:d8:60:d6:d4:e0:b8:
         af:2e:fb:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:36:54 2025 by rpki-client