Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/5172cb-4b4b-43f1-8d27-f62766974353/1/skX7DTNtIH91Ns4pX55phiihTuQ.mft
File:                     skX7DTNtIH91Ns4pX55phiihTuQ.mft (raw, json)
Hash identifier:          8Bg9VGHgAT0hiD3N9iQioQXsK17dpxZtxPNReFjc7cQ=
Subject key identifier:   87:BC:53:14:C2:ED:46:0A:81:E2:8A:0A:E3:6F:B0:79:56:20:AA:5D
Authority key identifier: B2:45:FB:0D:33:6D:20:7F:75:36:CE:29:5F:9E:69:86:28:A1:4E:E4
Certificate issuer:       /CN=b245fb0d336d207f7536ce295f9e698628a14ee4
Certificate serial:       01976583D40BF9F38921BCC2DA5B38F34F0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/skX7DTNtIH91Ns4pX55phiihTuQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/5172cb-4b4b-43f1-8d27-f62766974353/1/skX7DTNtIH91Ns4pX55phiihTuQ.mft
Manifest number:          0997
Signing time:             Thu 12 Jun 2025 19:00:27 +0000
Manifest this update:     Thu 12 Jun 2025 19:00:27 +0000
Manifest next update:     Fri 13 Jun 2025 19:00:27 +0000
Files and hashes:         1: skX7DTNtIH91Ns4pX55phiihTuQ.crl (hash: IyqHNYued070i7e2hkE9TJNmAth7qJIc1VKnmNF1wGg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/5172cb-4b4b-43f1-8d27-f62766974353/1/skX7DTNtIH91Ns4pX55phiihTuQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/5172cb-4b4b-43f1-8d27-f62766974353/1/skX7DTNtIH91Ns4pX55phiihTuQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/skX7DTNtIH91Ns4pX55phiihTuQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:65:83:d4:0b:f9:f3:89:21:bc:c2:da:5b:38:f3:4f:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b245fb0d336d207f7536ce295f9e698628a14ee4
        Validity
            Not Before: Jun 12 19:00:27 2025 GMT
            Not After : Jun 13 19:00:27 2025 GMT
        Subject: CN=87bc5314c2ed460a81e28a0ae36fb0795620aa5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:4f:0d:61:f4:31:b8:39:46:95:0d:28:e2:f1:
                    93:7b:11:e4:6a:a8:bb:74:48:ac:26:c9:3a:67:89:
                    aa:d4:67:b5:5e:2e:b8:f8:56:fe:a6:02:15:c6:00:
                    2c:99:0b:b8:64:8d:5c:27:22:b6:0f:f2:32:91:43:
                    82:35:04:87:8a:e2:65:d4:dc:b6:e1:2b:db:99:3f:
                    85:56:85:0f:fc:e4:f0:ce:ac:4c:b7:82:c7:a4:fb:
                    38:84:c4:a8:ac:bd:f7:84:e3:3b:e1:fa:fc:54:8b:
                    e1:e6:24:8f:d3:86:63:cb:af:a3:df:76:6f:33:12:
                    74:e7:d9:7b:6e:b6:df:70:5c:f4:6d:bb:02:72:a5:
                    61:fe:2b:7d:c7:77:56:7d:c8:c8:2a:b4:92:1d:62:
                    a5:87:f4:b1:18:25:f8:83:94:e1:63:68:f9:22:71:
                    7a:80:34:b3:b5:14:00:61:a9:e1:1e:86:5b:98:88:
                    cd:2c:d1:12:6d:fe:a5:55:80:22:74:3f:0c:24:9b:
                    43:ff:c9:13:26:7c:20:7b:21:44:2e:b8:67:3d:53:
                    05:14:6f:46:5a:b6:1c:f5:05:ad:2f:e8:7b:fe:c2:
                    47:14:ba:e8:62:1b:49:c8:26:0f:e1:7e:a7:75:9c:
                    98:05:d2:91:7b:4b:72:f0:36:bc:e6:ef:cc:aa:f6:
                    1e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:BC:53:14:C2:ED:46:0A:81:E2:8A:0A:E3:6F:B0:79:56:20:AA:5D
            X509v3 Authority Key Identifier:
                keyid:B2:45:FB:0D:33:6D:20:7F:75:36:CE:29:5F:9E:69:86:28:A1:4E:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skX7DTNtIH91Ns4pX55phiihTuQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5172cb-4b4b-43f1-8d27-f62766974353/1/skX7DTNtIH91Ns4pX55phiihTuQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5172cb-4b4b-43f1-8d27-f62766974353/1/skX7DTNtIH91Ns4pX55phiihTuQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:18:9c:77:60:1a:1a:84:60:10:8d:05:9a:b6:c9:09:0a:58:
         37:5f:78:da:dc:ac:51:71:53:07:9b:d6:a2:a9:c1:3c:18:d2:
         ed:f6:c2:3d:7d:9d:0f:2c:54:34:22:07:8a:57:09:7d:c8:f7:
         43:19:85:b1:01:0e:25:45:76:2a:c0:86:f6:ce:65:3a:f4:d8:
         cb:83:c0:d9:aa:36:36:24:e5:67:cf:23:a5:eb:ce:f3:46:8b:
         43:c9:d9:5e:3b:13:c7:53:08:0a:bd:bc:b1:35:93:22:95:95:
         b9:c9:56:00:4c:3d:e3:49:35:14:af:8a:1c:62:b2:f8:27:40:
         a9:58:c2:2e:55:94:32:40:35:29:23:c5:3f:24:b7:17:fc:58:
         ce:c4:1a:4f:f9:61:e6:e7:dc:95:c6:6b:cb:3b:7f:e2:b0:67:
         15:53:63:8b:b0:8f:79:13:ef:98:41:e2:11:90:fb:de:73:8e:
         82:38:32:65:39:ba:12:29:e7:2e:57:66:67:4e:ec:16:0a:dd:
         8f:8f:d7:eb:a0:7a:68:3f:78:00:96:f3:c7:06:fb:ef:25:d9:
         e7:67:f3:ac:9a:56:ee:35:c8:23:a2:6d:aa:53:b2:2e:c1:d5:
         c4:ba:8e:0e:1f:a9:35:4b:27:ce:19:dd:a5:5e:20:a1:f6:82:
         9f:0f:81:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 22:07:55 2025 by rpki-client