Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/0df30e-b0bf-4d10-a066-6917cb4c99bc/1/P591E-0Eyp_o96RU6CeY0E8agKg.mft
File:                     P591E-0Eyp_o96RU6CeY0E8agKg.mft (raw, json)
Hash identifier:          czEt8rJ/YAezh2ha+bBmVkYLbwe9BR/HSNjRQRww4yM=
Subject key identifier:   16:19:1C:B7:8D:B1:13:38:C2:F1:4C:4E:36:FA:D6:A1:13:CF:98:B5
Authority key identifier: 3F:9F:75:13:ED:04:CA:9F:E8:F7:A4:54:E8:27:98:D0:4F:1A:80:A8
Certificate issuer:       /CN=3f9f7513ed04ca9fe8f7a454e82798d04f1a80a8
Certificate serial:       01974E203FB371671518816D5B99EDBF0838
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P591E-0Eyp_o96RU6CeY0E8agKg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/0df30e-b0bf-4d10-a066-6917cb4c99bc/1/P591E-0Eyp_o96RU6CeY0E8agKg.mft
Manifest number:          04A0
Signing time:             Sun 08 Jun 2025 06:00:25 +0000
Manifest this update:     Sun 08 Jun 2025 06:00:25 +0000
Manifest next update:     Mon 09 Jun 2025 06:00:25 +0000
Files and hashes:         1: P591E-0Eyp_o96RU6CeY0E8agKg.crl (hash: B3cuHzD8o3Lx9M2XBUNC60RvIz+yM5BQwTcL3hV/nR4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/0df30e-b0bf-4d10-a066-6917cb4c99bc/1/P591E-0Eyp_o96RU6CeY0E8agKg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/0df30e-b0bf-4d10-a066-6917cb4c99bc/1/P591E-0Eyp_o96RU6CeY0E8agKg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P591E-0Eyp_o96RU6CeY0E8agKg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 06:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:20:3f:b3:71:67:15:18:81:6d:5b:99:ed:bf:08:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f9f7513ed04ca9fe8f7a454e82798d04f1a80a8
        Validity
            Not Before: Jun  8 06:00:25 2025 GMT
            Not After : Jun  9 06:00:25 2025 GMT
        Subject: CN=16191cb78db11338c2f14c4e36fad6a113cf98b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:de:52:6f:a0:37:aa:90:d2:92:a6:d1:b5:60:
                    be:30:9d:9d:27:f0:2f:0d:2b:09:48:8d:17:01:46:
                    be:7a:3d:cf:4e:4d:17:f7:45:e7:8b:a1:b4:fc:4c:
                    55:a4:5d:a6:94:b6:51:b0:3b:1b:2a:39:62:f6:ce:
                    db:40:41:ab:3e:6a:f8:2e:4d:e2:59:4d:cf:83:b5:
                    9d:18:30:1e:d6:af:c9:e3:2d:82:31:a4:87:76:67:
                    ec:02:81:db:cd:48:a9:bb:5e:c2:37:2b:22:07:94:
                    fd:43:2e:7f:6f:c3:ff:3f:82:5a:6a:92:f6:e7:83:
                    91:37:86:41:55:d1:20:ed:d7:02:f4:6d:30:78:70:
                    00:39:c2:d7:0c:8e:48:7b:55:a0:62:f6:81:fd:61:
                    08:e4:ca:4d:06:04:ef:7b:b2:8a:54:ef:4b:7a:54:
                    ae:16:40:2d:ca:43:76:14:3d:13:fa:d1:91:ce:7f:
                    fb:82:84:00:17:97:68:6b:fe:c9:d1:5b:09:ec:f2:
                    d4:0b:ee:24:ad:fd:c1:5e:2c:74:54:4b:ff:b3:4f:
                    a3:a2:03:e3:f8:0c:82:84:08:74:55:82:85:5c:79:
                    8c:91:23:6c:f6:43:b0:75:ec:f0:f7:58:fe:0a:f2:
                    c8:1b:f5:97:38:27:57:90:ad:69:bc:4f:94:4d:7e:
                    66:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:19:1C:B7:8D:B1:13:38:C2:F1:4C:4E:36:FA:D6:A1:13:CF:98:B5
            X509v3 Authority Key Identifier:
                keyid:3F:9F:75:13:ED:04:CA:9F:E8:F7:A4:54:E8:27:98:D0:4F:1A:80:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P591E-0Eyp_o96RU6CeY0E8agKg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/0df30e-b0bf-4d10-a066-6917cb4c99bc/1/P591E-0Eyp_o96RU6CeY0E8agKg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/0df30e-b0bf-4d10-a066-6917cb4c99bc/1/P591E-0Eyp_o96RU6CeY0E8agKg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:09:40:7d:c3:12:c8:0a:d5:59:16:7b:28:b3:fa:29:eb:b5:
         a2:c3:bf:ca:52:a7:30:97:35:93:0c:00:58:9b:a4:51:68:97:
         0b:f2:47:4c:68:c0:50:a9:56:b0:ba:b4:ab:8c:14:e1:f8:ff:
         ee:a6:38:e4:15:22:dc:b4:2e:33:33:13:8b:51:90:6a:04:d8:
         48:38:69:1e:00:cc:45:c8:2a:ae:f0:ed:31:02:6d:51:ff:da:
         03:2e:97:c6:e5:07:a8:58:d9:74:28:62:3c:4c:fb:a9:b9:8c:
         52:8a:ab:37:77:ea:b5:0c:de:1d:24:13:86:6b:1f:e2:0b:d7:
         27:b1:53:1c:e4:65:63:a0:b9:88:c4:0c:9f:ab:6b:e3:7b:f5:
         7a:33:27:21:a0:29:b9:9f:e8:1e:00:92:cd:b3:9b:75:96:bd:
         2e:e6:62:32:da:a3:cb:ab:c2:55:25:b1:51:04:7b:40:50:a4:
         97:d8:38:5a:2e:20:fc:1f:46:05:3a:ca:ac:fd:17:d2:6b:ab:
         1f:31:f3:21:a8:6f:68:b0:15:fe:98:4d:33:e1:f3:8f:0c:74:
         a6:7e:8d:dc:f9:09:01:8b:ab:03:bc:f3:ba:44:2e:bf:0b:98:
         c1:9e:24:f6:b6:8c:73:c4:2a:d5:4d:e0:76:e2:e6:8e:9b:81:
         bc:35:06:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:02:31 2025 by rpki-client