Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
File:                     0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft (raw, json)
Hash identifier:          Wlpbe4rTfPvjUHA7rZcCQDe1UwKBhfuaobFllGrfBZ4=
Subject key identifier:   B3:37:4E:AD:38:8E:94:29:98:62:0B:F1:FD:CA:71:D9:AC:91:B4:19
Authority key identifier: D1:87:D4:C9:8B:3E:D8:A7:17:C7:D6:E4:55:54:D3:53:EA:3E:05:CA
Certificate issuer:       /CN=d187d4c98b3ed8a717c7d6e45554d353ea3e05ca
Certificate serial:       01975CB8073A4551982904ED7491B49F618C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
Manifest number:          1583
Signing time:             Wed 11 Jun 2025 02:00:53 +0000
Manifest this update:     Wed 11 Jun 2025 02:00:53 +0000
Manifest next update:     Thu 12 Jun 2025 02:00:53 +0000
Files and hashes:         1: 0YfUyYs-2KcXx9bkVVTTU-o-Bco.crl (hash: SZPZro3axnFV5TazX2vlMlvj9CD2bmp7gWiGne0/Dt8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 02:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5c:b8:07:3a:45:51:98:29:04:ed:74:91:b4:9f:61:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d187d4c98b3ed8a717c7d6e45554d353ea3e05ca
        Validity
            Not Before: Jun 11 02:00:53 2025 GMT
            Not After : Jun 12 02:00:53 2025 GMT
        Subject: CN=b3374ead388e942998620bf1fdca71d9ac91b419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:93:d6:27:90:78:37:0b:0f:67:75:82:2b:70:
                    4a:b8:46:ad:f2:3f:7f:45:35:24:55:32:fc:3e:ba:
                    37:81:15:31:5b:58:df:8f:34:76:80:7c:db:12:d5:
                    f7:cb:b7:7f:b0:66:d1:ae:6d:35:6d:49:27:51:5a:
                    3d:86:78:12:c9:aa:63:a0:c7:5d:fc:14:f6:74:3c:
                    d4:0a:33:75:5d:20:79:06:91:96:62:7a:14:6a:51:
                    fd:5e:74:12:30:af:43:b0:a9:dc:53:fd:de:94:f5:
                    b8:b6:93:64:07:97:62:ae:02:ed:85:58:52:a1:1a:
                    8f:a3:91:4d:27:8c:f8:f5:34:52:0d:41:e7:9d:3e:
                    6e:70:38:17:ca:4c:ad:50:8b:30:e7:85:56:8d:55:
                    05:32:03:8e:4c:49:b0:b3:f2:25:89:1b:38:97:79:
                    9f:0e:87:03:e1:1f:0b:8a:88:9c:f7:16:27:7d:9f:
                    53:56:de:9c:e0:22:39:ec:2d:87:0c:77:5c:3f:22:
                    de:c5:21:0f:c7:07:7b:03:5c:2e:9a:14:25:52:4e:
                    82:7f:f0:39:5e:28:02:80:82:b6:7c:c2:d2:93:fe:
                    15:14:3e:ff:b2:0c:9e:ac:90:7a:f5:fa:f7:d7:8b:
                    04:94:0e:51:a5:47:39:7c:4f:02:69:46:46:4f:a8:
                    80:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:37:4E:AD:38:8E:94:29:98:62:0B:F1:FD:CA:71:D9:AC:91:B4:19
            X509v3 Authority Key Identifier:
                keyid:D1:87:D4:C9:8B:3E:D8:A7:17:C7:D6:E4:55:54:D3:53:EA:3E:05:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:fd:4e:a5:07:93:37:19:c3:f9:91:a7:4e:cd:d7:86:f2:92:
         66:44:59:34:49:6b:29:43:77:66:c7:00:28:10:88:a0:de:b7:
         77:a1:26:0f:60:cf:f5:af:e2:69:40:82:87:60:d9:1f:c9:94:
         8b:6b:95:18:b1:32:1a:0f:65:67:1f:99:b7:f0:9f:07:72:2d:
         6a:4b:66:c8:1b:78:1d:46:73:99:3c:68:3d:d7:4f:2e:d3:4a:
         66:c5:cb:73:bb:ec:9c:95:e0:6d:d8:53:13:60:f8:ce:d9:f3:
         16:06:7a:d6:21:2d:bb:e9:e5:8f:11:b8:a7:26:c2:63:49:3b:
         25:f7:74:43:18:a1:d2:88:be:42:cc:d6:c7:8b:ac:b6:bf:1c:
         79:fc:24:13:02:39:e5:da:56:44:c6:04:5d:00:20:91:7c:b0:
         18:e9:db:9a:9e:01:3f:47:56:6d:a5:fe:7a:c3:f0:50:16:55:
         7c:d1:75:17:fd:52:e6:ac:d8:1a:c6:5a:1d:d2:e4:db:18:cb:
         5d:fa:46:de:c9:d3:c4:39:15:15:ee:07:21:b5:a0:8c:ea:2e:
         f0:c7:9a:b9:e3:9a:94:68:52:28:5f:b9:4b:92:08:f3:09:20:
         5b:f0:f9:33:ed:56:96:91:60:24:bc:d5:ab:e3:ed:fd:91:5a:
         4b:ca:83:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 11:53:13 2025 by rpki-client