Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/89ba09-95e2-4fbe-98bd-722ce4030aa1/1/MFTtpIzl_KSJJbrLoUeMisotOcw.mft
File:                     MFTtpIzl_KSJJbrLoUeMisotOcw.mft (raw, json)
Hash identifier:          AUChx3dWFU6MG8EPs+TwNMNciIIs5vSLMw3+4Yc2wJU=
Subject key identifier:   04:E9:07:22:9C:85:EE:C6:06:BB:9C:03:3E:B4:02:0B:1A:61:39:9B
Authority key identifier: 30:54:ED:A4:8C:E5:FC:A4:89:25:BA:CB:A1:47:8C:8A:CA:2D:39:CC
Certificate issuer:       /CN=3054eda48ce5fca48925bacba1478c8aca2d39cc
Certificate serial:       01974EFC7D58604956D282E7129175EA3D30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MFTtpIzl_KSJJbrLoUeMisotOcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/89ba09-95e2-4fbe-98bd-722ce4030aa1/1/MFTtpIzl_KSJJbrLoUeMisotOcw.mft
Manifest number:          14A3
Signing time:             Sun 08 Jun 2025 10:00:59 +0000
Manifest this update:     Sun 08 Jun 2025 10:00:59 +0000
Manifest next update:     Mon 09 Jun 2025 10:00:59 +0000
Files and hashes:         1: MFTtpIzl_KSJJbrLoUeMisotOcw.crl (hash: RU6AcSYGPWAY5A33o4TuSwzTdnsmpdwj5BAmSlhBWyA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/89ba09-95e2-4fbe-98bd-722ce4030aa1/1/MFTtpIzl_KSJJbrLoUeMisotOcw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/89ba09-95e2-4fbe-98bd-722ce4030aa1/1/MFTtpIzl_KSJJbrLoUeMisotOcw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MFTtpIzl_KSJJbrLoUeMisotOcw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:fc:7d:58:60:49:56:d2:82:e7:12:91:75:ea:3d:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3054eda48ce5fca48925bacba1478c8aca2d39cc
        Validity
            Not Before: Jun  8 10:00:59 2025 GMT
            Not After : Jun  9 10:00:59 2025 GMT
        Subject: CN=04e907229c85eec606bb9c033eb4020b1a61399b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:9a:5c:e0:4f:56:19:fe:70:90:2c:ed:e9:32:
                    52:35:bb:e5:af:f7:75:18:11:b9:36:fe:ce:4e:60:
                    b0:04:2b:44:37:53:f0:36:74:65:34:08:e3:a8:92:
                    40:16:2c:ee:3a:ce:20:13:52:eb:af:22:34:db:c7:
                    9a:1b:36:12:92:1f:ac:0a:d6:37:ac:90:15:12:d4:
                    45:54:0c:c8:64:21:4f:59:79:3f:7e:4c:db:43:1c:
                    32:78:e7:61:1f:32:c2:e7:23:3d:35:f6:3a:ba:2f:
                    38:09:b9:c6:ec:80:16:bd:6c:34:fa:c4:3e:b5:9c:
                    6d:bc:0f:74:93:83:be:e5:04:ec:64:0b:4a:75:cf:
                    4e:e1:14:bb:e6:5d:6a:c1:46:03:69:9c:7e:2b:52:
                    f3:2e:60:07:03:31:2b:40:7e:90:fe:0d:b8:9f:1c:
                    f4:63:1c:a8:8e:0c:08:84:c2:75:96:7f:9d:e8:36:
                    32:1b:3f:b9:df:29:05:ff:2c:06:34:d7:76:f8:92:
                    db:df:a6:6c:ef:a3:58:e1:2d:28:54:c3:b6:c1:81:
                    ac:de:a6:e3:00:b1:af:07:6e:b6:e3:4c:5a:a8:b4:
                    37:30:6b:47:dc:69:97:f5:77:e4:61:c2:02:04:83:
                    2b:8f:cc:f9:c3:4e:18:ec:b9:51:1d:69:8c:2b:8a:
                    49:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:E9:07:22:9C:85:EE:C6:06:BB:9C:03:3E:B4:02:0B:1A:61:39:9B
            X509v3 Authority Key Identifier:
                keyid:30:54:ED:A4:8C:E5:FC:A4:89:25:BA:CB:A1:47:8C:8A:CA:2D:39:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MFTtpIzl_KSJJbrLoUeMisotOcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/89ba09-95e2-4fbe-98bd-722ce4030aa1/1/MFTtpIzl_KSJJbrLoUeMisotOcw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/89ba09-95e2-4fbe-98bd-722ce4030aa1/1/MFTtpIzl_KSJJbrLoUeMisotOcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:6b:36:25:82:de:f3:c4:13:43:ea:ae:84:b1:fb:37:ad:0f:
         e2:2c:8c:c2:ad:a3:1b:65:e0:f4:25:b0:5c:24:12:ae:01:af:
         5f:6d:ac:4d:e7:d9:96:d4:5c:96:9a:8c:33:2b:fc:34:f3:e6:
         70:16:d4:ed:bb:d5:20:2c:9a:0e:55:16:37:e6:57:83:c4:fe:
         c1:c6:ae:d1:4b:80:b6:64:71:38:ab:61:c1:c7:da:81:c7:fd:
         ee:f0:3a:26:ec:43:42:a2:e6:25:75:fe:3c:a6:cd:c1:6c:4b:
         d8:75:f0:f1:a0:88:f0:2c:6c:71:17:6a:e6:8a:3b:53:2f:54:
         05:1e:4e:f6:0f:f5:d9:c1:56:7e:3d:b8:57:65:d3:a8:42:08:
         d5:53:85:1e:6e:0d:ea:14:37:75:6e:dc:b0:b7:a8:5b:21:88:
         64:1d:20:b7:20:5b:d9:a0:62:a1:24:8a:45:e0:d1:1a:99:13:
         34:37:9c:a5:7a:f8:9c:35:97:0b:80:08:3b:19:e8:43:ca:4f:
         5c:78:99:66:de:0b:88:2a:dd:6e:d5:29:6c:6f:7b:00:09:fc:
         ee:78:cf:b5:dd:1d:3b:84:5e:ce:02:40:b4:77:33:06:ab:f4:
         d1:68:cf:e7:8e:e7:51:89:0b:87:5c:96:64:ef:ce:d0:4e:c8:
         3d:10:3c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:52:40 2025 by rpki-client