Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/669554-3697-4d29-8fa3-4eb96e9acb16/1/RLnEibS7yF3nNEF-u6ThN7F8B50.mft
File:                     RLnEibS7yF3nNEF-u6ThN7F8B50.mft (raw, json)
Hash identifier:          8DfMmPLYMTpnEARakIuZ15eR7r4yI7EXrR17IZHqr3k=
Subject key identifier:   B1:7D:4F:65:3A:A8:1C:B9:8C:CC:E7:AE:5E:2E:9E:F8:76:39:82:65
Authority key identifier: 44:B9:C4:89:B4:BB:C8:5D:E7:34:41:7E:BB:A4:E1:37:B1:7C:07:9D
Certificate issuer:       /CN=44b9c489b4bbc85de734417ebba4e137b17c079d
Certificate serial:       019768F2BFD15088D3BD4F479C92FA170CB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RLnEibS7yF3nNEF-u6ThN7F8B50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/669554-3697-4d29-8fa3-4eb96e9acb16/1/RLnEibS7yF3nNEF-u6ThN7F8B50.mft
Manifest number:          0464
Signing time:             Fri 13 Jun 2025 11:00:28 +0000
Manifest this update:     Fri 13 Jun 2025 11:00:28 +0000
Manifest next update:     Sat 14 Jun 2025 11:00:28 +0000
Files and hashes:         1: RLnEibS7yF3nNEF-u6ThN7F8B50.crl (hash: TyCNr788CAST049IVY064nGcPukLMKOWzd7aKXHamU8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/669554-3697-4d29-8fa3-4eb96e9acb16/1/RLnEibS7yF3nNEF-u6ThN7F8B50.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/669554-3697-4d29-8fa3-4eb96e9acb16/1/RLnEibS7yF3nNEF-u6ThN7F8B50.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RLnEibS7yF3nNEF-u6ThN7F8B50.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 07:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:f2:bf:d1:50:88:d3:bd:4f:47:9c:92:fa:17:0c:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44b9c489b4bbc85de734417ebba4e137b17c079d
        Validity
            Not Before: Jun 13 11:00:28 2025 GMT
            Not After : Jun 14 11:00:28 2025 GMT
        Subject: CN=b17d4f653aa81cb98ccce7ae5e2e9ef876398265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d0:5e:80:71:0b:bb:d3:e2:50:9c:fd:ce:36:
                    65:60:4e:5f:47:bd:a1:0f:1d:9a:40:17:c0:8b:b3:
                    9c:73:fc:9a:4c:38:87:b8:46:95:e3:bd:5c:c0:6e:
                    51:34:3d:59:91:a2:73:ac:7c:c4:c6:9b:07:35:18:
                    53:e9:d9:d7:34:3b:a2:ac:ec:31:5d:cb:03:e3:c3:
                    2a:dc:33:e0:fa:02:d2:00:9a:83:fb:34:6a:58:ff:
                    75:49:dc:cc:34:89:91:f2:36:cd:ce:e9:d3:da:29:
                    45:bf:64:ee:18:81:41:77:eb:e4:75:81:99:16:dc:
                    7d:d2:31:38:c2:c4:8a:89:e1:ef:a8:4f:69:37:f5:
                    b2:f8:14:23:09:49:b4:2a:e2:68:18:98:9e:18:93:
                    02:fa:a5:1a:be:a4:25:72:bb:0b:66:c9:03:41:ae:
                    22:ed:03:63:0f:f6:21:53:f1:e8:34:98:eb:fd:8e:
                    3c:ec:51:69:3d:8f:2d:19:c3:ba:94:b6:e9:c2:46:
                    af:be:e0:9e:73:8e:10:fb:6d:1c:00:7a:5f:e2:81:
                    62:ce:b0:6b:b9:4f:d1:69:6e:82:3f:a1:e6:b0:92:
                    61:5b:fe:59:ae:59:57:21:8b:89:6a:b8:54:79:ef:
                    5e:3a:5f:47:f2:83:8d:c3:c0:f7:03:83:94:04:de:
                    f9:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:7D:4F:65:3A:A8:1C:B9:8C:CC:E7:AE:5E:2E:9E:F8:76:39:82:65
            X509v3 Authority Key Identifier:
                keyid:44:B9:C4:89:B4:BB:C8:5D:E7:34:41:7E:BB:A4:E1:37:B1:7C:07:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RLnEibS7yF3nNEF-u6ThN7F8B50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/669554-3697-4d29-8fa3-4eb96e9acb16/1/RLnEibS7yF3nNEF-u6ThN7F8B50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/669554-3697-4d29-8fa3-4eb96e9acb16/1/RLnEibS7yF3nNEF-u6ThN7F8B50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:ee:e6:98:d5:12:96:d4:99:cc:8a:c1:db:ea:08:ed:90:c2:
         69:c9:2a:e9:f9:25:9e:1a:1c:e5:1a:30:2a:a6:99:c0:88:5d:
         62:30:d8:a1:ba:d2:92:28:73:40:93:6c:6b:40:ee:b6:4e:be:
         73:50:4a:fa:42:ca:07:3e:f8:0b:71:6c:02:33:bc:28:63:96:
         e0:eb:1f:c9:3c:45:d5:a5:ed:cf:9b:d2:8d:a3:fd:fa:54:66:
         cc:a9:4c:29:2d:5c:e6:f5:6f:91:68:0a:c1:22:db:c6:e5:82:
         4f:65:f0:18:4c:61:61:71:1b:08:32:e0:a8:48:e3:6a:f1:96:
         3b:88:34:10:aa:4d:54:3b:41:69:35:a5:2a:d8:8f:3a:ff:aa:
         13:ba:4a:f6:8a:e9:9b:11:47:25:1d:79:42:c3:26:f1:f2:b7:
         a1:06:31:ae:ca:21:a4:5d:35:68:a2:11:33:5e:da:52:45:7d:
         f1:dd:e7:92:c6:58:0f:fd:ce:78:a1:3f:cc:23:1d:be:4e:33:
         a6:53:35:b1:da:a7:3d:88:0e:97:85:2b:78:34:be:63:de:0a:
         39:43:e5:48:95:55:62:c2:d0:a0:e0:5c:1f:50:cf:66:6a:a1:
         be:9a:95:40:29:8f:f1:f6:5c:c7:ff:43:80:42:92:ea:33:f3:
         43:fb:8a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 17:43:18 2025 by rpki-client