Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/e78ded-e890-40d2-98e0-31a35db201f9/1/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.mft
File:                     _P4m-aeyP78Rgt5iw61SJ2DDFvQ.mft (raw, json)
Hash identifier:          SApqdpA3/eI9j71tTqYFp73oe1acckUtKuQN5r6H1EU=
Subject key identifier:   10:4C:14:B5:96:DE:32:2E:02:B1:59:D7:18:42:9E:92:1A:F5:D9:A9
Authority key identifier: FC:FE:26:F9:A7:B2:3F:BF:11:82:DE:62:C3:AD:52:27:60:C3:16:F4
Certificate issuer:       /CN=fcfe26f9a7b23fbf1182de62c3ad522760c316f4
Certificate serial:       01974DB2FA1A989730EB453226FD8A3D5779
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/e78ded-e890-40d2-98e0-31a35db201f9/1/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.mft
Manifest number:          0C87
Signing time:             Sun 08 Jun 2025 04:01:04 +0000
Manifest this update:     Sun 08 Jun 2025 04:01:04 +0000
Manifest next update:     Mon 09 Jun 2025 04:01:04 +0000
Files and hashes:         1: _P4m-aeyP78Rgt5iw61SJ2DDFvQ.crl (hash: jZ/R+JHpiM5z4uSSj56JIbSGsIs5Lg6aV1CC5gN2wtE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/e78ded-e890-40d2-98e0-31a35db201f9/1/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/e78ded-e890-40d2-98e0-31a35db201f9/1/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:b2:fa:1a:98:97:30:eb:45:32:26:fd:8a:3d:57:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcfe26f9a7b23fbf1182de62c3ad522760c316f4
        Validity
            Not Before: Jun  8 04:01:04 2025 GMT
            Not After : Jun  9 04:01:04 2025 GMT
        Subject: CN=104c14b596de322e02b159d718429e921af5d9a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:24:cc:18:57:47:cc:80:35:98:aa:46:f9:f4:
                    ad:c0:2d:03:22:a8:75:77:00:7e:b4:46:54:51:bf:
                    d9:9e:a2:2f:45:ee:c9:f0:5d:b6:d0:9a:89:4e:f6:
                    f0:22:b9:ed:ac:08:87:3e:16:c1:d8:71:a3:9e:a6:
                    85:ad:af:9e:65:1d:c0:cb:61:1e:91:5f:42:cb:32:
                    c1:14:7f:1c:83:a7:7b:6b:c9:4b:9c:01:33:08:12:
                    41:66:0c:cb:0b:7c:4a:13:fc:20:38:a0:6e:51:35:
                    b2:75:d3:be:c4:25:5b:97:06:cb:0f:12:f0:4d:1e:
                    42:ef:27:31:ed:14:70:03:b7:36:67:cc:34:e6:27:
                    38:5c:a5:2e:79:ab:0d:b0:da:05:9c:fe:43:16:8c:
                    46:60:76:d8:a0:05:8e:6e:6c:76:20:89:66:e1:e9:
                    51:e7:9b:ef:20:f8:36:56:89:95:79:b1:5a:e6:57:
                    b7:f4:e8:b9:22:48:a1:f7:f8:e4:03:69:5f:2b:81:
                    92:f6:01:e3:f1:43:04:68:0f:d9:bb:1c:be:d7:28:
                    3a:06:77:31:37:e0:e9:75:05:15:ce:55:86:39:36:
                    79:12:45:d0:bd:74:2d:50:ce:e6:7b:6a:ec:90:83:
                    1f:74:27:aa:c0:bc:1c:f2:bf:68:b3:49:02:ae:4d:
                    2e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:4C:14:B5:96:DE:32:2E:02:B1:59:D7:18:42:9E:92:1A:F5:D9:A9
            X509v3 Authority Key Identifier:
                keyid:FC:FE:26:F9:A7:B2:3F:BF:11:82:DE:62:C3:AD:52:27:60:C3:16:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/e78ded-e890-40d2-98e0-31a35db201f9/1/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/e78ded-e890-40d2-98e0-31a35db201f9/1/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dc:cf:db:87:c5:9c:71:ce:87:82:65:9b:db:c7:f3:64:bd:ab:
         aa:54:50:d1:fc:32:24:a0:92:b9:4b:9e:bb:b5:43:e6:76:63:
         1a:cf:00:d6:e5:25:38:32:0a:ce:9f:0a:8b:0e:5e:27:dc:73:
         c9:6b:27:cb:b2:ac:36:04:bb:36:f6:73:93:cc:ea:d4:97:63:
         c8:fa:92:61:68:f3:9a:ff:53:af:fd:5d:0c:db:32:93:9b:b0:
         74:a6:9a:ac:88:bf:bb:70:2c:cf:dc:6b:4c:19:01:24:79:60:
         4d:6d:8e:cf:dd:cc:41:77:65:f0:85:5a:fe:9e:27:c7:57:e8:
         06:57:9a:a5:e7:08:4e:66:6c:db:5d:66:b7:97:79:52:93:6e:
         82:02:07:28:41:25:48:2e:70:18:1c:c1:3d:68:a4:72:d8:2b:
         80:24:95:de:1e:ca:55:5b:e3:33:83:52:23:01:c3:f6:21:8c:
         d4:bb:a0:22:22:4c:2e:26:43:1f:3b:0c:99:9e:68:64:cc:54:
         2c:df:29:1f:bb:23:52:c1:24:06:6d:9d:97:85:95:1e:f3:af:
         b3:27:0e:d2:c7:55:f7:74:6e:b8:1e:cc:40:5f:57:31:a4:97:
         b7:b2:7e:08:8b:c5:8f:6b:2f:6e:81:3c:e5:09:2b:02:76:1c:
         34:4e:0d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:58:27 2025 by rpki-client