Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/2644a0-3d8f-4ebd-8588-356c411b430e/1/d_Sa-EwLigmns7Tx8nFE6yWRD7U.mft
File:                     d_Sa-EwLigmns7Tx8nFE6yWRD7U.mft (raw, json)
Hash identifier:          /cqnWnQ4J+n/FvIOW43NBLjZeSWhrE1o4KlZDIpXL+8=
Subject key identifier:   15:0A:52:43:65:3C:85:5B:8B:10:2C:67:ED:89:AB:F8:43:55:08:8F
Authority key identifier: 77:F4:9A:F8:4C:0B:8A:09:A7:B3:B4:F1:F2:71:44:EB:25:91:0F:B5
Certificate issuer:       /CN=77f49af84c0b8a09a7b3b4f1f27144eb25910fb5
Certificate serial:       019758366F0CF4AFDD30D8A1D4B26A538834
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d_Sa-EwLigmns7Tx8nFE6yWRD7U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/2644a0-3d8f-4ebd-8588-356c411b430e/1/d_Sa-EwLigmns7Tx8nFE6yWRD7U.mft
Manifest number:          03F0
Signing time:             Tue 10 Jun 2025 05:00:51 +0000
Manifest this update:     Tue 10 Jun 2025 05:00:51 +0000
Manifest next update:     Wed 11 Jun 2025 05:00:51 +0000
Files and hashes:         1: d_Sa-EwLigmns7Tx8nFE6yWRD7U.crl (hash: uVhgQtjNbTgp0XUQI4gXOIKydPRrCSbKKO+OPLwt19A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/2644a0-3d8f-4ebd-8588-356c411b430e/1/d_Sa-EwLigmns7Tx8nFE6yWRD7U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/2644a0-3d8f-4ebd-8588-356c411b430e/1/d_Sa-EwLigmns7Tx8nFE6yWRD7U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d_Sa-EwLigmns7Tx8nFE6yWRD7U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 05:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:58:36:6f:0c:f4:af:dd:30:d8:a1:d4:b2:6a:53:88:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77f49af84c0b8a09a7b3b4f1f27144eb25910fb5
        Validity
            Not Before: Jun 10 05:00:51 2025 GMT
            Not After : Jun 11 05:00:51 2025 GMT
        Subject: CN=150a5243653c855b8b102c67ed89abf84355088f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:61:7d:e5:34:dd:9f:b1:81:10:70:38:b0:01:
                    ab:dd:2b:d6:eb:50:a9:58:63:c4:20:76:06:e0:17:
                    e9:c2:a6:3e:15:3d:27:23:41:6b:c1:b7:ab:e2:b8:
                    43:4c:7b:1e:85:38:00:63:d1:33:c2:c5:d7:c6:bc:
                    80:4a:72:e4:a9:30:cf:39:c1:ae:7c:3f:13:28:a8:
                    ac:cf:1a:e3:38:41:c5:33:cf:2f:af:5f:7b:4e:08:
                    f2:35:c0:e5:59:19:71:7c:6f:a2:98:df:f0:2b:14:
                    93:c6:67:00:bb:6e:27:d9:ac:51:45:1b:18:a7:0d:
                    ba:18:b9:db:2d:ae:b2:61:23:63:ad:89:27:c1:94:
                    a6:fd:37:c4:81:99:b9:61:2a:4a:8a:0d:fd:0a:52:
                    92:18:53:d8:f5:6f:65:d3:5b:8e:ba:c4:3e:93:67:
                    df:2f:d6:08:bf:ca:4e:4e:c3:84:6d:e1:81:97:93:
                    ef:51:51:17:66:5f:37:45:a6:98:7b:52:c3:91:fb:
                    a7:df:3c:46:9b:86:fd:47:90:ee:ff:96:d7:ff:c6:
                    f9:3b:71:e0:b9:2b:0f:b8:d9:34:88:78:18:f4:d8:
                    25:d2:32:de:20:e4:42:29:20:f4:57:a4:f9:75:c3:
                    dc:cb:07:ad:16:2a:20:b5:08:f9:36:9a:cc:5b:ff:
                    e3:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:0A:52:43:65:3C:85:5B:8B:10:2C:67:ED:89:AB:F8:43:55:08:8F
            X509v3 Authority Key Identifier:
                keyid:77:F4:9A:F8:4C:0B:8A:09:A7:B3:B4:F1:F2:71:44:EB:25:91:0F:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Sa-EwLigmns7Tx8nFE6yWRD7U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2644a0-3d8f-4ebd-8588-356c411b430e/1/d_Sa-EwLigmns7Tx8nFE6yWRD7U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2644a0-3d8f-4ebd-8588-356c411b430e/1/d_Sa-EwLigmns7Tx8nFE6yWRD7U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:4f:8c:3e:d2:af:81:db:b3:a0:52:e9:f1:84:d3:56:c2:cc:
         9f:a8:fe:12:6c:0a:c3:1d:81:43:9e:a2:54:47:15:f0:4a:8c:
         94:2e:59:e6:9c:f7:3b:65:2a:7e:21:50:8a:ba:d7:ed:23:7f:
         00:aa:50:58:42:98:66:bf:d5:26:d5:db:92:a7:79:95:ef:8e:
         66:7c:66:9d:84:27:42:4b:d0:fc:2a:2b:93:3d:d6:9e:bf:37:
         b1:6f:00:69:0d:cb:e2:e7:ef:5b:a6:58:0d:21:74:61:aa:14:
         c8:f7:e7:ee:4b:dd:07:84:20:cb:c4:32:57:8c:ba:39:73:5f:
         64:b4:1e:9d:0f:50:5a:5a:01:ce:08:3c:58:ee:31:96:97:ce:
         ab:aa:48:55:ab:b9:38:cc:17:be:0c:ea:2a:96:4e:3e:2c:a4:
         d8:1b:8d:76:0f:ff:89:90:85:3a:6c:a0:7f:df:23:c2:5f:16:
         e2:a2:be:6c:92:65:34:ca:f1:4a:a7:f1:8d:59:e0:46:8d:7a:
         b6:0f:90:ad:ce:f0:7d:73:1d:00:5e:9a:e8:de:1d:c4:d3:6d:
         f6:23:11:1b:c0:95:fa:70:82:64:95:89:40:26:98:2a:b5:48:
         6c:85:58:d0:f8:dc:a2:99:83:68:fc:59:a6:bf:f6:9e:4f:76:
         c3:76:84:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 11:37:15 2025 by rpki-client