Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/9e5de4-f650-44d7-bd30-7ec213cb115f/1/coe8FdmVjihdWllYuOZJfl_OkfU.mft
File:                     coe8FdmVjihdWllYuOZJfl_OkfU.mft (raw, json)
Hash identifier:          MnQYUe6IotmGnq6tAUWAAlwQJw7sI7JHp+NsVeKEGkc=
Subject key identifier:   C7:FE:E4:22:11:33:9D:F5:12:5A:0D:13:2D:E2:7E:E2:4A:CA:C4:3A
Authority key identifier: 72:87:BC:15:D9:95:8E:28:5D:5A:59:58:B8:E6:49:7E:5F:CE:91:F5
Certificate issuer:       /CN=7287bc15d9958e285d5a5958b8e6497e5fce91f5
Certificate serial:       019748F9F88251A3B0CE45F884170AB30A85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/coe8FdmVjihdWllYuOZJfl_OkfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/9e5de4-f650-44d7-bd30-7ec213cb115f/1/coe8FdmVjihdWllYuOZJfl_OkfU.mft
Manifest number:          0A5C
Signing time:             Sat 07 Jun 2025 06:00:30 +0000
Manifest this update:     Sat 07 Jun 2025 06:00:30 +0000
Manifest next update:     Sun 08 Jun 2025 06:00:30 +0000
Files and hashes:         1: coe8FdmVjihdWllYuOZJfl_OkfU.crl (hash: VP083lOs6okt1nT49+HvR3zRiswHLp1MKQA8rqWu/H8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/9e5de4-f650-44d7-bd30-7ec213cb115f/1/coe8FdmVjihdWllYuOZJfl_OkfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/9e5de4-f650-44d7-bd30-7ec213cb115f/1/coe8FdmVjihdWllYuOZJfl_OkfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/coe8FdmVjihdWllYuOZJfl_OkfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 06:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:f9:f8:82:51:a3:b0:ce:45:f8:84:17:0a:b3:0a:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7287bc15d9958e285d5a5958b8e6497e5fce91f5
        Validity
            Not Before: Jun  7 06:00:30 2025 GMT
            Not After : Jun  8 06:00:30 2025 GMT
        Subject: CN=c7fee42211339df5125a0d132de27ee24acac43a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2c:59:58:5a:e7:bc:e5:48:64:44:9d:1a:1c:
                    bf:54:40:e9:43:84:b1:7d:c4:f5:e2:5c:25:27:81:
                    71:42:7b:f8:bc:50:f6:c4:e3:26:bc:cb:a0:66:c7:
                    17:24:a9:03:22:c0:f0:41:91:51:b8:b5:04:44:2a:
                    c8:62:80:c2:2c:9a:9b:12:d0:4f:ec:ba:d6:e9:c9:
                    fb:18:6e:3c:67:ae:91:65:61:e0:56:68:bb:87:1c:
                    e4:0e:0f:75:ac:47:d2:6b:4a:ab:5d:51:92:e3:8b:
                    20:eb:93:98:4b:b8:1d:92:e8:07:8b:c0:16:e8:f7:
                    70:e8:e8:e9:a9:68:d2:b9:33:37:19:99:15:26:c1:
                    24:e0:38:bf:57:c5:12:76:85:61:8c:f7:07:cb:f9:
                    3d:92:4f:be:d3:2a:f8:ff:42:e1:8a:65:21:e6:4b:
                    22:2a:fe:29:39:a4:2e:05:0a:12:8f:e0:3d:dd:fd:
                    8a:0e:35:4b:66:83:b1:af:61:f5:1f:e2:2d:ed:3f:
                    ab:33:9d:ff:cd:7c:7a:d6:32:3f:c8:26:fa:ce:02:
                    00:29:73:bf:ba:37:9b:f1:5a:00:a4:0a:08:f0:b9:
                    14:de:97:2b:e8:45:38:d3:57:df:15:79:bb:90:96:
                    48:98:7d:08:82:2b:3d:19:83:b7:35:79:23:eb:65:
                    c1:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:FE:E4:22:11:33:9D:F5:12:5A:0D:13:2D:E2:7E:E2:4A:CA:C4:3A
            X509v3 Authority Key Identifier:
                keyid:72:87:BC:15:D9:95:8E:28:5D:5A:59:58:B8:E6:49:7E:5F:CE:91:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/coe8FdmVjihdWllYuOZJfl_OkfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9e5de4-f650-44d7-bd30-7ec213cb115f/1/coe8FdmVjihdWllYuOZJfl_OkfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9e5de4-f650-44d7-bd30-7ec213cb115f/1/coe8FdmVjihdWllYuOZJfl_OkfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:6b:b3:da:ca:c2:d4:78:d5:ff:5a:1d:0c:b2:bb:18:19:68:
         7a:5d:bf:37:64:d3:72:eb:aa:32:1e:17:fd:6a:7a:37:3c:66:
         cd:ff:65:39:ee:c3:df:40:c3:56:16:bc:1a:68:cc:fa:ac:b3:
         54:9a:1e:25:a0:2b:0b:fa:32:af:75:e1:86:f1:26:74:49:f7:
         70:c4:73:d6:1f:c7:64:e3:3e:4c:b6:8b:f2:e7:15:7f:4d:a4:
         de:48:f3:54:5b:0b:b6:f3:f7:7c:cc:f2:db:f5:22:4f:36:9d:
         d9:12:4b:92:bb:4c:4a:df:01:f4:1f:f5:d1:c1:41:41:05:c5:
         f1:f3:76:da:56:58:e7:32:46:c7:18:84:9b:9f:c1:3b:9e:28:
         76:2c:07:05:43:0c:c7:20:4d:49:18:db:98:17:c6:2f:ea:2b:
         c3:74:c2:78:0b:fc:2a:bf:9b:85:b6:f3:6e:f0:14:56:62:f3:
         38:1f:d1:ca:f7:82:d9:16:1e:04:72:45:58:47:fb:df:4a:37:
         af:8a:b4:7b:4b:38:11:19:59:02:0f:79:b2:e4:f3:46:d4:86:
         1f:db:e6:37:b2:2e:73:6e:1a:1f:30:2a:32:dc:1e:27:b0:c4:
         c4:40:bb:ba:06:8f:4a:c8:0d:df:a8:04:27:07:7a:05:80:5a:
         55:53:68:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:01:22 2025 by rpki-client