Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/26abf3-5b31-4181-a3f7-e7acb5b44eee/1/x0oNp1cJLW7M99lO3idYdToc14Q.mft
File:                     x0oNp1cJLW7M99lO3idYdToc14Q.mft (raw, json)
Hash identifier:          Q30RgHeBYdqD9w9hzBdaZYLkBx6tHUIVQGWHN4icUjE=
Subject key identifier:   40:94:1A:70:DD:0F:4B:AA:CC:76:4B:95:CB:DC:B3:D7:01:51:2B:09
Authority key identifier: C7:4A:0D:A7:57:09:2D:6E:CC:F7:D9:4E:DE:27:58:75:3A:1C:D7:84
Certificate issuer:       /CN=c74a0da757092d6eccf7d94ede2758753a1cd784
Certificate serial:       019750B3568B3B6EC2421E6C306AFC1BF6C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x0oNp1cJLW7M99lO3idYdToc14Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/26abf3-5b31-4181-a3f7-e7acb5b44eee/1/x0oNp1cJLW7M99lO3idYdToc14Q.mft
Manifest number:          1478
Signing time:             Sun 08 Jun 2025 18:00:19 +0000
Manifest this update:     Sun 08 Jun 2025 18:00:19 +0000
Manifest next update:     Mon 09 Jun 2025 18:00:19 +0000
Files and hashes:         1: x0oNp1cJLW7M99lO3idYdToc14Q.crl (hash: KJWBjP/Xv90FJ+ltpvza+nvF3zPs0GEv5F7Mqr5SHFw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/26abf3-5b31-4181-a3f7-e7acb5b44eee/1/x0oNp1cJLW7M99lO3idYdToc14Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/26abf3-5b31-4181-a3f7-e7acb5b44eee/1/x0oNp1cJLW7M99lO3idYdToc14Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x0oNp1cJLW7M99lO3idYdToc14Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:50:b3:56:8b:3b:6e:c2:42:1e:6c:30:6a:fc:1b:f6:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c74a0da757092d6eccf7d94ede2758753a1cd784
        Validity
            Not Before: Jun  8 18:00:19 2025 GMT
            Not After : Jun  9 18:00:19 2025 GMT
        Subject: CN=40941a70dd0f4baacc764b95cbdcb3d701512b09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:18:fe:be:50:33:83:a8:6c:1b:e4:24:01:04:
                    61:c3:99:b1:c2:09:ca:fb:0e:1e:70:5d:df:2c:aa:
                    72:1e:e0:0e:9e:46:83:5a:97:10:ae:e8:74:87:5d:
                    0d:57:f4:61:c7:1d:1a:bf:07:cd:19:c8:f3:33:b1:
                    ce:01:c9:cc:e8:93:6c:6a:02:d0:13:e3:27:4b:36:
                    5a:7b:2f:f2:64:11:75:9d:f5:0c:38:11:86:2f:47:
                    56:89:fa:e8:b2:8a:85:67:4c:98:c0:41:90:0f:d6:
                    2f:45:3a:1c:70:4b:c2:4e:51:26:9c:10:58:fe:85:
                    7f:f3:a1:25:75:d7:25:9c:56:76:6a:6e:76:69:7f:
                    db:1d:e5:da:7c:3c:92:dc:41:b3:ac:32:74:7e:19:
                    cc:fc:4d:31:80:5e:af:73:50:68:ad:72:4a:0c:cb:
                    91:d2:21:d0:e5:fb:0e:a8:91:bd:05:d9:db:04:a3:
                    d9:3f:61:76:e7:31:f9:c0:92:5d:08:ad:47:5d:94:
                    c5:6f:cb:31:c7:ee:83:76:0e:f8:c7:1e:8f:fa:66:
                    97:e8:9f:bd:cf:ed:c0:45:92:15:ff:90:d1:5b:77:
                    83:07:b9:98:4b:e9:12:44:b2:b8:9c:8b:76:d8:7a:
                    11:e3:e4:53:89:3e:d1:48:cf:bf:c3:06:11:f9:4b:
                    c0:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:94:1A:70:DD:0F:4B:AA:CC:76:4B:95:CB:DC:B3:D7:01:51:2B:09
            X509v3 Authority Key Identifier:
                keyid:C7:4A:0D:A7:57:09:2D:6E:CC:F7:D9:4E:DE:27:58:75:3A:1C:D7:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0oNp1cJLW7M99lO3idYdToc14Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/26abf3-5b31-4181-a3f7-e7acb5b44eee/1/x0oNp1cJLW7M99lO3idYdToc14Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/26abf3-5b31-4181-a3f7-e7acb5b44eee/1/x0oNp1cJLW7M99lO3idYdToc14Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:e8:48:6d:5f:9a:a2:0f:fe:68:7e:00:e0:44:d9:e8:42:6c:
         97:c1:23:d9:e6:1b:d5:7f:15:6e:b4:60:da:81:88:9b:66:ab:
         10:46:ed:94:10:08:f4:d5:ac:9a:d3:0b:e3:10:34:15:0a:97:
         ee:d1:48:bb:b1:a5:24:0f:88:bd:5e:4e:e1:e2:eb:63:d8:fa:
         90:19:f9:03:71:d5:11:0d:1c:2d:2a:99:50:58:cd:f3:fe:d2:
         df:23:1c:7e:56:17:3b:be:af:83:cd:2d:ab:42:05:66:88:25:
         8d:7f:80:ab:3a:44:89:86:bf:e7:af:9a:2f:69:99:b2:39:98:
         9b:2f:7c:e5:2c:47:f9:29:80:78:c0:05:65:90:2d:6d:d6:31:
         5f:39:8e:83:cf:ef:4a:42:03:ad:5d:03:0c:f0:6a:f6:f3:b3:
         f5:b5:dd:9c:a3:e5:31:d1:83:16:09:7f:16:01:c5:5a:7b:64:
         ef:28:28:d0:a2:fa:87:15:d5:30:d5:9e:ef:94:0b:ce:53:52:
         fe:33:1c:6d:9f:46:57:04:a9:ca:8f:91:a1:15:13:34:82:48:
         86:98:f8:76:22:ec:96:5f:50:59:1c:15:64:a7:72:4b:85:2f:
         aa:ad:eb:5e:08:24:4d:fd:ab:b7:f5:f2:f7:3a:4e:7f:9d:14:
         3e:23:57:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:56:00 2025 by rpki-client