Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/5a2da8-15c7-4bd9-976d-2162458eace5/1/meB6Mav-wkkJsYhGOEb99lWHJCM.mft
File:                     meB6Mav-wkkJsYhGOEb99lWHJCM.mft (raw, json)
Hash identifier:          GEgJp8AJxjUTsO0yuNn5DJGyV8lSxdr3PYZkJrZxKXw=
Subject key identifier:   BB:53:1E:02:D1:F4:82:2E:D1:5D:67:F5:0C:CE:CC:78:3D:14:E7:30
Authority key identifier: 99:E0:7A:31:AB:FE:C2:49:09:B1:88:46:38:46:FD:F6:55:87:24:23
Certificate issuer:       /CN=99e07a31abfec24909b188463846fdf655872423
Certificate serial:       01975045B14CE39710EC38DABB3DB4711C1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/meB6Mav-wkkJsYhGOEb99lWHJCM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/5a2da8-15c7-4bd9-976d-2162458eace5/1/meB6Mav-wkkJsYhGOEb99lWHJCM.mft
Manifest number:          1162
Signing time:             Sun 08 Jun 2025 16:00:34 +0000
Manifest this update:     Sun 08 Jun 2025 16:00:34 +0000
Manifest next update:     Mon 09 Jun 2025 16:00:34 +0000
Files and hashes:         1: meB6Mav-wkkJsYhGOEb99lWHJCM.crl (hash: w606DS8NC0FSXcWZBFU+CvvCxtASuktbyT319t0uWk4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/5a2da8-15c7-4bd9-976d-2162458eace5/1/meB6Mav-wkkJsYhGOEb99lWHJCM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/5a2da8-15c7-4bd9-976d-2162458eace5/1/meB6Mav-wkkJsYhGOEb99lWHJCM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/meB6Mav-wkkJsYhGOEb99lWHJCM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 11:44:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:50:45:b1:4c:e3:97:10:ec:38:da:bb:3d:b4:71:1c:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99e07a31abfec24909b188463846fdf655872423
        Validity
            Not Before: Jun  8 16:00:34 2025 GMT
            Not After : Jun  9 16:00:34 2025 GMT
        Subject: CN=bb531e02d1f4822ed15d67f50ccecc783d14e730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:89:45:ba:87:5c:5d:c5:8a:a4:6d:75:dd:e2:
                    c4:c2:fb:32:66:dd:42:de:47:65:7f:65:2f:cf:14:
                    a3:e8:dd:31:12:5d:29:f4:27:f4:56:90:b0:56:35:
                    05:cc:44:ca:a0:9a:ef:00:fb:95:24:3e:25:c3:0a:
                    24:be:cd:63:97:6a:f9:24:41:2b:ad:b2:06:d5:1e:
                    05:9f:81:93:5d:c0:26:5c:75:b0:49:d4:ba:5f:09:
                    09:e0:f3:98:9d:cf:d4:78:b9:5c:f6:55:6b:ec:0f:
                    d2:f9:a7:ae:76:22:89:d7:89:11:bf:d3:5d:a9:a2:
                    2e:89:9a:a0:02:5f:43:ef:f0:ab:3f:82:7e:a2:f5:
                    f6:4a:ee:a1:ec:27:1f:a4:db:9d:06:47:b1:71:f5:
                    35:a7:64:3f:41:38:e0:18:c0:5f:02:71:9f:7a:39:
                    b9:c2:5a:39:58:11:da:00:6d:19:87:ea:28:03:88:
                    db:3f:30:ba:e9:28:c0:b6:8d:1a:ba:75:35:b5:60:
                    b6:ff:33:b9:f2:99:9d:2a:ef:b9:d3:63:b0:87:4d:
                    5e:ed:31:9a:1f:56:2f:5e:8e:7f:3b:64:7e:ad:23:
                    ed:0d:39:f1:67:37:50:4b:f8:cd:b3:6c:24:f0:61:
                    a1:e8:8d:8e:1b:4f:af:da:e1:e9:2c:da:eb:e0:ae:
                    25:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:53:1E:02:D1:F4:82:2E:D1:5D:67:F5:0C:CE:CC:78:3D:14:E7:30
            X509v3 Authority Key Identifier:
                keyid:99:E0:7A:31:AB:FE:C2:49:09:B1:88:46:38:46:FD:F6:55:87:24:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/meB6Mav-wkkJsYhGOEb99lWHJCM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5a2da8-15c7-4bd9-976d-2162458eace5/1/meB6Mav-wkkJsYhGOEb99lWHJCM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5a2da8-15c7-4bd9-976d-2162458eace5/1/meB6Mav-wkkJsYhGOEb99lWHJCM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:8f:02:21:8d:78:a3:11:db:fd:cd:00:ab:6e:e0:b0:e5:08:
         34:f0:31:f4:b3:7a:be:2d:6e:34:c3:c0:e5:eb:1b:5a:fd:31:
         a6:c3:3f:a8:ff:73:6d:d2:5c:fc:35:c1:9f:dc:64:b2:cd:88:
         54:3f:58:0a:2c:6f:fc:b3:d4:4a:ee:7f:6f:e0:31:c7:33:fe:
         4a:88:41:47:18:7b:df:ac:29:13:f5:20:3a:fb:93:25:27:ad:
         09:62:89:04:f3:c2:b2:b6:02:b3:ae:0b:ee:4d:71:5a:15:08:
         1d:8b:64:82:5b:4a:99:ef:fa:ff:c8:9e:ea:e9:3a:d7:db:36:
         cc:a3:d0:89:d7:d2:a1:a7:6f:bd:69:84:b9:d3:ea:7a:61:0e:
         31:91:36:0c:d3:ee:42:7a:eb:02:69:c4:0d:7b:f7:68:1b:a6:
         79:79:a1:03:f0:0f:97:2d:e5:51:dd:1a:0d:6a:c6:a8:e1:9d:
         d5:26:c0:d9:45:f7:79:09:43:7e:25:f5:6d:eb:f0:5a:6c:4f:
         26:fb:92:42:49:e8:37:26:ab:79:8d:b8:08:1b:52:90:62:34:
         2a:45:69:18:a5:6a:af:ef:13:a0:55:7d:5c:12:74:d6:b3:44:
         94:23:a4:1f:26:38:c8:ae:15:fb:88:89:a1:74:92:d1:d7:66:
         c6:4c:a9:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:39:07 2025 by rpki-client