Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f907aa-2acd-4dc7-9f0d-d7b08948f7c7/1/r-iiApeGib2NX15X_MG_64Z8Mio.mft
File:                     r-iiApeGib2NX15X_MG_64Z8Mio.mft (raw, json)
Hash identifier:          MwEvZZOpHG98SrSLvfHRoPN477U6DOMxNgtK3y5oqUs=
Subject key identifier:   77:CE:96:30:68:66:B2:85:60:23:E8:08:8D:0B:1A:97:0A:DF:EA:DA
Authority key identifier: AF:E8:A2:02:97:86:89:BD:8D:5F:5E:57:FC:C1:BF:EB:86:7C:32:2A
Certificate issuer:       /CN=afe8a202978689bd8d5f5e57fcc1bfeb867c322a
Certificate serial:       0197488CC9C9D7C5D46902EC0DF551575C62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r-iiApeGib2NX15X_MG_64Z8Mio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/f907aa-2acd-4dc7-9f0d-d7b08948f7c7/1/r-iiApeGib2NX15X_MG_64Z8Mio.mft
Manifest number:          1578
Signing time:             Sat 07 Jun 2025 04:01:15 +0000
Manifest this update:     Sat 07 Jun 2025 04:01:15 +0000
Manifest next update:     Sun 08 Jun 2025 04:01:15 +0000
Files and hashes:         1: r-iiApeGib2NX15X_MG_64Z8Mio.crl (hash: qL8Y6bMHeDZFqCmMktL26gn3KYnoOOE5v3X65M++q/w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/f907aa-2acd-4dc7-9f0d-d7b08948f7c7/1/r-iiApeGib2NX15X_MG_64Z8Mio.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/f907aa-2acd-4dc7-9f0d-d7b08948f7c7/1/r-iiApeGib2NX15X_MG_64Z8Mio.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r-iiApeGib2NX15X_MG_64Z8Mio.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:8c:c9:c9:d7:c5:d4:69:02:ec:0d:f5:51:57:5c:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afe8a202978689bd8d5f5e57fcc1bfeb867c322a
        Validity
            Not Before: Jun  7 04:01:15 2025 GMT
            Not After : Jun  8 04:01:15 2025 GMT
        Subject: CN=77ce96306866b2856023e8088d0b1a970adfeada
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d1:ce:05:65:71:47:52:c3:64:b5:51:03:cf:
                    78:98:cc:ed:f2:21:5f:5e:57:75:55:ec:c5:3a:c4:
                    a9:1d:c8:13:dd:33:82:07:96:e5:59:82:cc:4c:22:
                    8b:d3:33:35:b0:8a:74:4d:e8:b2:f5:49:ea:6f:00:
                    29:92:18:1e:f0:03:08:f5:63:3e:65:8a:f7:cd:93:
                    fd:d2:1b:9f:85:ea:83:27:aa:15:19:7f:63:17:74:
                    ca:ac:ed:97:cb:16:5c:b4:2c:c7:d5:83:11:14:38:
                    fe:75:53:85:98:7c:a5:42:fe:86:1b:08:1d:37:60:
                    b1:b9:74:21:29:a2:53:65:3a:78:84:55:c0:14:64:
                    42:37:ec:89:00:a6:52:a6:3a:41:1c:93:04:96:e4:
                    ae:ff:35:92:42:3d:e7:a5:59:3b:99:a2:fc:57:22:
                    6b:d1:f2:5b:7d:a9:5b:11:52:2f:f7:63:34:5d:2e:
                    05:ef:07:e4:92:14:cc:ea:a8:62:16:71:2d:03:33:
                    3e:07:26:31:82:3e:22:53:65:3d:b1:86:93:86:8f:
                    86:10:a5:d3:77:f0:8f:56:fa:d5:d2:51:18:b4:d0:
                    d7:a1:5b:5c:91:fc:4f:a0:df:23:fe:cb:c2:ff:c5:
                    4d:89:d5:e8:21:35:5e:02:dc:5e:94:d6:3b:2a:44:
                    64:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:CE:96:30:68:66:B2:85:60:23:E8:08:8D:0B:1A:97:0A:DF:EA:DA
            X509v3 Authority Key Identifier:
                keyid:AF:E8:A2:02:97:86:89:BD:8D:5F:5E:57:FC:C1:BF:EB:86:7C:32:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-iiApeGib2NX15X_MG_64Z8Mio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f907aa-2acd-4dc7-9f0d-d7b08948f7c7/1/r-iiApeGib2NX15X_MG_64Z8Mio.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f907aa-2acd-4dc7-9f0d-d7b08948f7c7/1/r-iiApeGib2NX15X_MG_64Z8Mio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:83:08:d7:c6:9a:ff:dc:c6:d8:b2:6b:0e:c3:86:b9:cf:3e:
         fd:1a:57:63:29:26:0f:a0:64:e3:e3:7b:9e:51:1a:9e:61:3a:
         5e:60:ab:09:90:ec:4a:46:fe:fd:80:52:50:11:39:9a:d4:13:
         72:44:23:ee:9c:c2:eb:42:d7:e9:0e:65:03:10:62:38:05:ae:
         62:6d:91:80:52:89:25:f7:1b:32:9f:dd:5e:2f:29:1c:08:83:
         2c:12:5e:a0:d9:e9:68:60:69:55:ba:0f:78:d5:79:73:3b:16:
         d2:ea:16:87:20:fc:e9:a1:00:df:4b:61:57:fa:fd:26:40:e5:
         43:87:18:fc:bf:01:22:00:aa:5e:69:d1:c9:e4:48:23:72:df:
         b9:aa:20:d0:2b:61:04:55:0d:3a:ff:17:f1:a9:b0:0b:76:12:
         ea:24:2d:6f:9b:c2:0d:e2:aa:e6:bc:aa:0b:e1:ca:91:24:7e:
         a6:80:9d:cb:0d:ab:16:f5:54:4c:17:0a:27:dc:4e:97:40:4a:
         10:80:8b:1f:6c:14:12:b2:1f:ad:73:d6:28:41:62:d7:7f:cc:
         59:c7:c2:99:20:70:40:78:1e:35:7a:13:0c:b0:3e:46:c0:16:
         fc:22:d0:eb:c1:ec:43:c4:1d:64:b6:44:55:4e:3a:06:96:f3:
         70:6c:6d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:05:57 2025 by rpki-client