Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9a359f-4b70-48c3-a38f-23b7ce34ebac/1/nE-xCAvPALb912uv2dUTPF4cPTI.mft
File:                     nE-xCAvPALb912uv2dUTPF4cPTI.mft (raw, json)
Hash identifier:          ySW0hxgVVz4B6wlBZcNgUZB+xsQqqLoJcKYtemnuOeg=
Subject key identifier:   75:62:AB:40:D6:8E:35:57:4F:4F:F4:BA:B0:DF:CC:62:C7:71:DD:96
Authority key identifier: 9C:4F:B1:08:0B:CF:00:B6:FD:D7:6B:AF:D9:D5:13:3C:5E:1C:3D:32
Certificate issuer:       /CN=9c4fb1080bcf00b6fdd76bafd9d5133c5e1c3d32
Certificate serial:       01974BC47C88E13E4DC88635EDB3E513ABDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nE-xCAvPALb912uv2dUTPF4cPTI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/9a359f-4b70-48c3-a38f-23b7ce34ebac/1/nE-xCAvPALb912uv2dUTPF4cPTI.mft
Manifest number:          0564
Signing time:             Sat 07 Jun 2025 19:00:57 +0000
Manifest this update:     Sat 07 Jun 2025 19:00:57 +0000
Manifest next update:     Sun 08 Jun 2025 19:00:57 +0000
Files and hashes:         1: nE-xCAvPALb912uv2dUTPF4cPTI.crl (hash: L2J/dJ5FwKpdUHfATzbS07kvdKzMcGzbDL+4XOdlJ7U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/9a359f-4b70-48c3-a38f-23b7ce34ebac/1/nE-xCAvPALb912uv2dUTPF4cPTI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/9a359f-4b70-48c3-a38f-23b7ce34ebac/1/nE-xCAvPALb912uv2dUTPF4cPTI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nE-xCAvPALb912uv2dUTPF4cPTI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 11:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:c4:7c:88:e1:3e:4d:c8:86:35:ed:b3:e5:13:ab:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c4fb1080bcf00b6fdd76bafd9d5133c5e1c3d32
        Validity
            Not Before: Jun  7 19:00:57 2025 GMT
            Not After : Jun  8 19:00:57 2025 GMT
        Subject: CN=7562ab40d68e35574f4ff4bab0dfcc62c771dd96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:35:e9:30:17:8c:86:28:09:ed:7c:de:0d:73:
                    dc:61:94:8e:cf:68:8d:01:0c:96:2c:a2:3d:d0:8d:
                    8a:cb:22:47:91:e5:63:a1:6c:03:1d:9d:ee:7a:13:
                    d2:b5:95:77:35:8c:ec:8a:63:14:ad:d8:04:ae:01:
                    9b:68:94:c9:a1:c8:27:29:ef:14:27:a8:01:21:cd:
                    3e:57:da:aa:4b:96:55:2a:3e:59:b1:4f:b4:45:3f:
                    96:f9:79:7c:8b:87:09:cd:67:90:a2:6b:83:a9:f4:
                    e8:e9:5a:65:fc:15:b9:2d:35:fd:a6:54:a5:6e:ff:
                    73:45:c7:17:1c:bf:20:6f:d4:ce:c7:0d:bb:fc:f5:
                    b6:40:29:e0:91:25:14:7e:db:57:1e:41:9a:c6:81:
                    b9:3f:20:42:48:6f:41:ad:29:95:96:a9:26:3f:1a:
                    fc:f0:4d:f2:5a:be:c4:1a:b7:68:be:51:3b:61:73:
                    9c:08:45:5f:d8:6b:23:75:79:2b:4c:0c:08:11:b1:
                    b5:2d:57:f6:c6:1f:10:e5:8d:1f:64:a7:04:99:7f:
                    28:4d:d9:e1:92:94:8e:2d:cb:a9:7f:99:2d:ce:6d:
                    15:5c:3c:8d:0c:7c:ad:26:5e:82:df:54:ba:bb:29:
                    da:84:8c:7c:32:eb:e7:e7:1f:55:56:09:60:4c:98:
                    ad:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:62:AB:40:D6:8E:35:57:4F:4F:F4:BA:B0:DF:CC:62:C7:71:DD:96
            X509v3 Authority Key Identifier:
                keyid:9C:4F:B1:08:0B:CF:00:B6:FD:D7:6B:AF:D9:D5:13:3C:5E:1C:3D:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nE-xCAvPALb912uv2dUTPF4cPTI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9a359f-4b70-48c3-a38f-23b7ce34ebac/1/nE-xCAvPALb912uv2dUTPF4cPTI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9a359f-4b70-48c3-a38f-23b7ce34ebac/1/nE-xCAvPALb912uv2dUTPF4cPTI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:49:f6:01:2b:cb:9c:00:64:73:07:b1:e6:60:dc:04:e8:59:
         cf:76:b6:c1:ea:6e:b1:99:18:7e:7c:9f:85:04:a2:45:b4:93:
         09:04:9f:3c:dc:e3:db:15:96:1b:01:43:8b:e7:aa:6b:76:dd:
         75:c3:22:db:b0:7f:80:35:f6:09:42:75:80:68:ce:a5:88:45:
         5c:9d:fb:fc:62:b2:9a:89:11:89:ee:41:04:e0:4b:7b:0d:02:
         41:1f:3e:02:c9:ec:00:f9:15:01:5d:dd:14:37:62:47:d4:a3:
         e0:f2:36:af:79:d8:a8:2f:bd:4a:36:52:33:e3:0c:42:2f:ce:
         1f:b8:64:0c:b7:e1:76:69:59:76:a4:13:a2:fc:0f:94:6b:3d:
         96:f6:51:c2:67:5f:af:6b:91:0c:36:17:5b:ca:d0:f1:67:11:
         28:3f:06:bc:e9:cb:26:51:0b:3c:ad:0b:57:61:64:62:d3:ec:
         0f:53:51:09:11:f2:13:a9:be:71:4f:b7:3d:d8:d3:32:6f:cc:
         09:53:57:af:0f:22:1e:3f:7d:17:ee:cf:9f:f4:be:31:1b:7a:
         30:7b:03:03:d3:82:e7:f8:e0:cf:39:2d:03:d0:9d:6f:ef:f6:
         de:84:c3:26:a4:33:e7:ff:ac:93:a3:a6:59:76:0c:15:1f:d3:
         4e:16:50:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:14:43 2025 by rpki-client