Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b5fc04-ff86-4ced-91c2-0e386a3dbe6a/1/pR4tu_AZ2NN0flcwOSVU3xH27ZM.mft
File:                     pR4tu_AZ2NN0flcwOSVU3xH27ZM.mft (raw, json)
Hash identifier:          A3ofkv+NuYX28M1ivtAwrui6CYCVY8/pbFgF0+QSD2E=
Subject key identifier:   42:53:5A:C5:51:01:66:E1:32:39:0D:1E:7C:C4:AA:49:D2:77:99:CA
Authority key identifier: A5:1E:2D:BB:F0:19:D8:D3:74:7E:57:30:39:25:54:DF:11:F6:ED:93
Certificate issuer:       /CN=a51e2dbbf019d8d3747e5730392554df11f6ed93
Certificate serial:       01974A7B0AFD57A81FE8A3955B2015751600
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pR4tu_AZ2NN0flcwOSVU3xH27ZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/b5fc04-ff86-4ced-91c2-0e386a3dbe6a/1/pR4tu_AZ2NN0flcwOSVU3xH27ZM.mft
Manifest number:          157B
Signing time:             Sat 07 Jun 2025 13:01:06 +0000
Manifest this update:     Sat 07 Jun 2025 13:01:06 +0000
Manifest next update:     Sun 08 Jun 2025 13:01:06 +0000
Files and hashes:         1: pR4tu_AZ2NN0flcwOSVU3xH27ZM.crl (hash: SCWkw5TudqL7F5vGjQHMdBT7PA8JsiiDAmUES0tZ7UM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/b5fc04-ff86-4ced-91c2-0e386a3dbe6a/1/pR4tu_AZ2NN0flcwOSVU3xH27ZM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/b5fc04-ff86-4ced-91c2-0e386a3dbe6a/1/pR4tu_AZ2NN0flcwOSVU3xH27ZM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pR4tu_AZ2NN0flcwOSVU3xH27ZM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:7b:0a:fd:57:a8:1f:e8:a3:95:5b:20:15:75:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a51e2dbbf019d8d3747e5730392554df11f6ed93
        Validity
            Not Before: Jun  7 13:01:06 2025 GMT
            Not After : Jun  8 13:01:06 2025 GMT
        Subject: CN=42535ac5510166e132390d1e7cc4aa49d27799ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:92:82:48:27:74:8d:6d:a8:c0:f0:3b:4e:c0:
                    a9:a3:7d:eb:f1:10:95:3e:78:40:3f:4d:d3:84:7d:
                    2f:c6:41:c6:a0:80:e6:8a:b7:a3:b5:e6:54:4e:4a:
                    fc:69:9a:c9:c1:6c:02:a7:04:22:11:d4:63:8e:47:
                    d2:11:7f:39:a8:6c:77:90:24:d0:0a:b4:15:46:27:
                    1e:c5:1a:fc:67:5f:b9:5e:47:29:d1:b0:22:b5:4b:
                    a2:e4:e6:df:f2:a7:dc:05:3a:db:e2:dc:c9:3a:c9:
                    d3:b2:88:99:09:78:06:1b:76:9e:a3:91:24:ef:70:
                    f9:16:f8:bf:f5:bf:1b:9c:69:48:4d:a0:a7:6b:6e:
                    2e:c1:a3:3e:18:28:63:4f:0a:cc:c8:55:a0:f8:b8:
                    1d:0e:20:db:b9:ad:c3:04:99:97:95:10:5a:8c:4c:
                    de:52:a1:d6:ae:c4:b3:10:3b:dd:6e:b9:19:57:64:
                    5d:cf:d1:c8:47:eb:96:8c:7e:41:c6:60:e5:f9:54:
                    55:fe:fa:fd:ca:cb:28:18:87:a0:bd:5d:f0:8e:64:
                    fd:72:ed:ed:e6:d8:f8:e7:7a:99:ec:40:c2:f9:5d:
                    58:6d:08:32:93:9c:0a:b8:22:73:6c:c5:1f:f8:b5:
                    3b:9b:f6:9d:3b:09:53:88:ce:03:bf:9c:8e:be:2e:
                    89:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:53:5A:C5:51:01:66:E1:32:39:0D:1E:7C:C4:AA:49:D2:77:99:CA
            X509v3 Authority Key Identifier:
                keyid:A5:1E:2D:BB:F0:19:D8:D3:74:7E:57:30:39:25:54:DF:11:F6:ED:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pR4tu_AZ2NN0flcwOSVU3xH27ZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b5fc04-ff86-4ced-91c2-0e386a3dbe6a/1/pR4tu_AZ2NN0flcwOSVU3xH27ZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b5fc04-ff86-4ced-91c2-0e386a3dbe6a/1/pR4tu_AZ2NN0flcwOSVU3xH27ZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:35:88:30:f5:3d:9e:e0:38:3b:a2:19:6e:1a:44:ff:59:74:
         48:3c:bc:a2:88:78:76:f0:7d:eb:2a:23:5f:f9:72:1b:95:1b:
         18:8b:08:3c:03:d5:45:d2:05:a3:39:a2:cc:86:33:88:6a:3e:
         54:7b:ec:ca:a6:c2:2d:79:14:af:4e:22:df:5b:01:56:a1:2f:
         9e:ce:3c:f3:e3:f0:f7:e1:5a:bc:38:d6:df:39:b3:cb:9c:5b:
         f0:cd:2d:bf:64:06:06:42:db:24:a1:2f:43:8d:33:c4:7e:56:
         40:c0:99:62:d8:44:13:5a:54:eb:51:2e:5e:da:48:aa:f9:3f:
         a4:ab:a8:34:f4:6e:46:14:7a:a7:04:07:e2:06:3c:a9:6a:66:
         a3:9c:b8:78:4d:6e:33:7a:96:52:27:68:56:64:36:1c:76:66:
         b2:47:9e:13:ae:37:31:3b:f5:94:69:3a:cf:f1:65:aa:94:a2:
         2f:d9:22:40:09:ac:5c:50:29:4f:7c:2f:4e:e1:cd:86:11:bc:
         d4:0f:c8:03:b9:95:10:b3:ac:34:a5:a1:31:8c:e3:18:e4:a0:
         80:4c:51:6a:85:24:0c:40:33:1d:3d:14:ef:25:0f:e9:98:5a:
         01:43:41:de:5d:9c:b0:8b:01:11:c1:61:c9:f9:34:60:d8:72:
         17:94:55:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:46:57 2025 by rpki-client