Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.mft
File:                     i4-7JMKLohFyEvDTJzo8KkwnzBI.mft (raw, json)
Hash identifier:          ok9MlMPjinBQzCE5kWbOPnhkZjOSUcFUa5S0zaOn2oU=
Subject key identifier:   53:50:40:7A:CC:C4:D7:94:9F:1C:23:E8:64:1B:A9:4D:A2:5F:7A:A5
Authority key identifier: 8B:8F:BB:24:C2:8B:A2:11:72:12:F0:D3:27:3A:3C:2A:4C:27:CC:12
Certificate issuer:       /CN=8b8fbb24c28ba2117212f0d3273a3c2a4c27cc12
Certificate serial:       019754FEB2A3475E728B23DDEA2A15CE755D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i4-7JMKLohFyEvDTJzo8KkwnzBI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.mft
Manifest number:          0AFF
Signing time:             Mon 09 Jun 2025 14:01:07 +0000
Manifest this update:     Mon 09 Jun 2025 14:01:07 +0000
Manifest next update:     Tue 10 Jun 2025 14:01:07 +0000
Files and hashes:         1: i4-7JMKLohFyEvDTJzo8KkwnzBI.crl (hash: RT6cKe4TQcmSqmEy9gFKsKh+PQYYQMYZNMYqtomRV3w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i4-7JMKLohFyEvDTJzo8KkwnzBI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 14:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:54:fe:b2:a3:47:5e:72:8b:23:dd:ea:2a:15:ce:75:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b8fbb24c28ba2117212f0d3273a3c2a4c27cc12
        Validity
            Not Before: Jun  9 14:01:07 2025 GMT
            Not After : Jun 10 14:01:07 2025 GMT
        Subject: CN=5350407accc4d7949f1c23e8641ba94da25f7aa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:86:ae:f9:8e:aa:0b:6a:a9:18:48:92:56:b9:
                    47:c8:0f:24:8a:20:c2:97:1a:a7:cd:26:44:6c:f3:
                    c9:3f:d4:f7:6e:dd:db:61:40:08:69:aa:38:0c:61:
                    da:56:65:90:93:e7:0d:b6:38:dd:fa:4c:5b:83:f5:
                    d1:2e:9b:6c:6b:eb:a8:2e:2f:90:33:94:f6:25:3f:
                    ca:61:f3:46:f2:3a:38:ea:f7:0c:0e:37:25:87:1a:
                    ea:f3:77:69:f5:d8:d9:7a:7a:63:25:e5:9a:63:88:
                    b1:64:9b:18:14:8e:9d:4c:aa:46:e1:03:91:42:0f:
                    11:6d:07:cf:ee:e1:b2:af:5e:a6:8e:af:b1:0a:d1:
                    5c:86:35:10:6f:f5:9f:38:28:8b:37:bb:29:62:ce:
                    11:b1:26:40:4e:78:f8:ef:cc:ec:a4:d6:08:3c:84:
                    ef:8c:25:e5:e7:2a:6a:0b:f3:5c:cf:52:b7:8f:15:
                    1e:f4:2a:65:7a:20:7e:5d:3b:f2:2b:c2:89:9d:71:
                    b1:e7:0a:e6:12:62:53:c0:e1:6e:03:c3:28:ed:3d:
                    1d:7f:77:7e:28:60:6c:e2:2d:df:f9:87:ba:fe:ce:
                    64:28:df:c8:b4:e4:b0:aa:3c:55:5f:3f:8a:5d:40:
                    3a:3f:7e:a8:c4:7f:79:de:e5:2d:0d:d0:95:0b:a9:
                    eb:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:50:40:7A:CC:C4:D7:94:9F:1C:23:E8:64:1B:A9:4D:A2:5F:7A:A5
            X509v3 Authority Key Identifier:
                keyid:8B:8F:BB:24:C2:8B:A2:11:72:12:F0:D3:27:3A:3C:2A:4C:27:CC:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4-7JMKLohFyEvDTJzo8KkwnzBI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:43:9f:94:b5:81:be:b5:f6:31:7a:cf:0b:39:de:97:c2:22:
         4c:2b:f5:8b:12:6f:b0:5e:2f:f0:0b:2b:83:22:50:12:50:2e:
         d8:e6:5f:e3:84:0d:10:cf:4e:89:0a:e7:cd:6d:ea:8f:3a:9e:
         5f:c1:ff:2d:7f:d8:a1:fc:15:e7:5a:a8:e2:3c:9b:b0:61:b8:
         8f:fa:25:2e:db:5c:b9:a6:2f:e5:7c:b8:e8:53:86:d2:65:04:
         25:59:44:90:0a:89:05:a9:bc:b2:6c:22:43:2f:4b:0a:74:a8:
         ce:f3:32:0e:46:2c:c9:8d:66:fb:2a:31:f6:25:af:15:b9:e5:
         02:60:43:a2:f5:b3:0d:07:60:e0:fa:41:53:be:54:b5:6c:f8:
         3a:bc:21:c7:2e:90:68:3d:4a:d0:63:b7:ce:a6:1f:58:97:21:
         30:cd:d2:bb:8d:f5:48:88:e5:a4:8a:a2:d6:2d:91:c1:b5:88:
         20:57:c5:c9:21:6f:30:db:d0:57:87:e4:84:49:a6:67:2e:d9:
         6a:20:5a:03:f3:41:4d:c5:a8:e5:c0:05:e4:72:ac:d7:8d:30:
         bf:20:67:5d:85:2b:65:0b:0f:c0:f9:ce:3d:75:81:ba:d3:05:
         6a:ad:84:7e:e9:bc:22:59:fc:1d:f3:83:97:a5:dc:fb:c1:60:
         bf:b3:06:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 01:39:34 2025 by rpki-client