Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/575915-ff7f-4364-a3e6-731e8b11d55d/1/8mAhR5HPhJn8k68B96Q_XL6QKpg.mft
File:                     8mAhR5HPhJn8k68B96Q_XL6QKpg.mft (raw, json)
Hash identifier:          CCYzKBquEK2mzuYyPcL+Kb0CagT3OBDqYKZdh/W+248=
Subject key identifier:   19:0B:11:7D:B2:A2:D5:22:88:32:B7:6F:49:9B:56:95:38:9F:E7:18
Authority key identifier: F2:60:21:47:91:CF:84:99:FC:93:AF:01:F7:A4:3F:5C:BE:90:2A:98
Certificate issuer:       /CN=f260214791cf8499fc93af01f7a43f5cbe902a98
Certificate serial:       01974A7B69684B18DD7BA91862463391709E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8mAhR5HPhJn8k68B96Q_XL6QKpg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/575915-ff7f-4364-a3e6-731e8b11d55d/1/8mAhR5HPhJn8k68B96Q_XL6QKpg.mft
Manifest number:          0E62
Signing time:             Sat 07 Jun 2025 13:01:31 +0000
Manifest this update:     Sat 07 Jun 2025 13:01:31 +0000
Manifest next update:     Sun 08 Jun 2025 13:01:31 +0000
Files and hashes:         1: 8mAhR5HPhJn8k68B96Q_XL6QKpg.crl (hash: dsXfjV3XlWsjp6zx16Mt4E7nS0V3Jp8FWT6VR53uFW8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/575915-ff7f-4364-a3e6-731e8b11d55d/1/8mAhR5HPhJn8k68B96Q_XL6QKpg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/575915-ff7f-4364-a3e6-731e8b11d55d/1/8mAhR5HPhJn8k68B96Q_XL6QKpg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8mAhR5HPhJn8k68B96Q_XL6QKpg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 13:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:7b:69:68:4b:18:dd:7b:a9:18:62:46:33:91:70:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f260214791cf8499fc93af01f7a43f5cbe902a98
        Validity
            Not Before: Jun  7 13:01:31 2025 GMT
            Not After : Jun  8 13:01:31 2025 GMT
        Subject: CN=190b117db2a2d5228832b76f499b5695389fe718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:56:33:b0:c1:f4:78:f6:db:74:11:dd:b1:46:
                    2a:c8:d1:95:29:56:84:b8:cf:96:a2:38:b6:f8:c8:
                    da:0c:71:a4:d6:e5:06:9a:1f:61:67:b7:c4:e0:26:
                    2f:27:d2:ca:d5:28:fd:0e:3a:87:c2:b3:27:45:80:
                    d7:96:65:81:d9:f2:48:33:9c:3e:78:b1:f8:3f:60:
                    8a:71:f1:4f:7c:47:1a:0d:22:1f:80:ae:46:87:02:
                    8c:34:ba:d1:87:1b:ce:b0:68:cb:84:58:7e:3e:93:
                    b1:64:6c:67:28:d5:26:71:fb:dc:58:0b:ae:86:4d:
                    f2:51:b8:f5:d1:2a:07:ae:73:17:e5:cb:28:f4:69:
                    04:ee:46:15:04:8b:6f:a0:b5:50:e4:a3:0f:42:90:
                    26:0f:65:e3:b4:bd:d6:22:92:22:b1:91:1e:54:c1:
                    2f:f1:9f:04:0d:7f:bc:4d:67:85:7a:e9:db:84:de:
                    64:2b:31:78:78:30:1e:7a:5f:7d:55:63:37:84:bb:
                    db:d6:dd:34:f0:6c:bf:46:f1:c5:e6:3c:75:05:76:
                    cc:83:52:11:7b:db:4b:89:4c:3c:22:ad:fe:f9:85:
                    9c:1c:e7:46:f3:b3:cd:33:b8:81:02:b2:2d:68:f1:
                    97:91:db:05:be:f1:14:0a:1d:0f:3c:51:80:4e:76:
                    09:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:0B:11:7D:B2:A2:D5:22:88:32:B7:6F:49:9B:56:95:38:9F:E7:18
            X509v3 Authority Key Identifier:
                keyid:F2:60:21:47:91:CF:84:99:FC:93:AF:01:F7:A4:3F:5C:BE:90:2A:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mAhR5HPhJn8k68B96Q_XL6QKpg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/575915-ff7f-4364-a3e6-731e8b11d55d/1/8mAhR5HPhJn8k68B96Q_XL6QKpg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/575915-ff7f-4364-a3e6-731e8b11d55d/1/8mAhR5HPhJn8k68B96Q_XL6QKpg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:c1:c7:8d:20:bb:b4:e5:5e:12:c6:79:2b:20:a4:96:91:a1:
         b2:63:54:41:20:83:3b:b8:fe:4d:3d:af:e7:e7:29:a5:ae:63:
         da:71:48:44:70:cc:ce:ca:35:e4:96:b2:9a:b8:2b:71:61:17:
         c1:fd:1e:ed:d6:11:65:e1:64:df:7e:46:86:69:6a:5c:55:a8:
         0c:8e:26:d3:73:c6:25:d5:ce:bf:d5:9c:e9:e7:6c:9f:15:02:
         02:46:56:bf:75:45:73:71:77:d5:42:f2:9c:85:92:10:63:ad:
         a6:3d:2d:b3:ad:50:7c:ae:9a:dc:b4:77:de:1a:d0:49:46:6e:
         ab:ae:dc:15:b4:ef:b2:42:02:b4:16:4f:c9:ee:30:9a:3f:d7:
         48:86:6a:24:90:3f:7f:59:cf:3b:13:c5:c1:4e:90:1f:41:44:
         0a:e2:e4:4d:67:e7:cd:bf:49:9e:04:fc:8b:03:3c:53:5b:f6:
         3b:8d:11:c1:78:38:8c:64:d5:c2:21:23:98:d8:f1:93:12:e9:
         04:f2:15:68:34:a9:93:73:5c:0d:be:7e:96:c2:57:0f:b2:7a:
         bb:01:ce:ae:5a:36:8a:c5:69:ff:79:fa:77:a2:85:72:ff:cf:
         8f:f7:99:71:17:7b:67:7c:08:cc:71:b4:14:6c:67:9c:be:87:
         5f:b3:c7:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:24:27 2025 by rpki-client