Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/eb68d6-f6c3-4318-9e83-b3b6c8fecc64/1/mpXxUsyiQR1AsfUgWRvjs6EbzfA.mft
File:                     mpXxUsyiQR1AsfUgWRvjs6EbzfA.mft (raw, json)
Hash identifier:          ZoaCqnC9emrY6+y+P+w2B+NpD1uuGHm6k8+07hmafNA=
Subject key identifier:   A1:5B:3C:09:FB:8C:25:E1:EE:F9:F4:C2:7F:86:C9:BA:02:9D:35:64
Authority key identifier: 9A:95:F1:52:CC:A2:41:1D:40:B1:F5:20:59:1B:E3:B3:A1:1B:CD:F0
Certificate issuer:       /CN=9a95f152cca2411d40b1f520591be3b3a11bcdf0
Certificate serial:       0197469E74B862817DA0C2AB60F19D4DEBD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mpXxUsyiQR1AsfUgWRvjs6EbzfA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/eb68d6-f6c3-4318-9e83-b3b6c8fecc64/1/mpXxUsyiQR1AsfUgWRvjs6EbzfA.mft
Manifest number:          046D
Signing time:             Fri 06 Jun 2025 19:01:18 +0000
Manifest this update:     Fri 06 Jun 2025 19:01:18 +0000
Manifest next update:     Sat 07 Jun 2025 19:01:18 +0000
Files and hashes:         1: mpXxUsyiQR1AsfUgWRvjs6EbzfA.crl (hash: /gTJoGgsoYlCOGq1u0eufZWMipeZ48XukkFYdSbIrpo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/eb68d6-f6c3-4318-9e83-b3b6c8fecc64/1/mpXxUsyiQR1AsfUgWRvjs6EbzfA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/eb68d6-f6c3-4318-9e83-b3b6c8fecc64/1/mpXxUsyiQR1AsfUgWRvjs6EbzfA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mpXxUsyiQR1AsfUgWRvjs6EbzfA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:9e:74:b8:62:81:7d:a0:c2:ab:60:f1:9d:4d:eb:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a95f152cca2411d40b1f520591be3b3a11bcdf0
        Validity
            Not Before: Jun  6 19:01:18 2025 GMT
            Not After : Jun  7 19:01:18 2025 GMT
        Subject: CN=a15b3c09fb8c25e1eef9f4c27f86c9ba029d3564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:2c:03:8d:50:0b:80:ff:2c:2d:92:8c:2a:bb:
                    2a:fe:2d:48:9b:d6:19:76:41:30:12:29:0a:db:65:
                    cb:bf:71:08:83:fc:ed:f1:6d:d1:04:1c:e8:a3:8f:
                    fa:be:be:6e:06:77:04:ae:07:59:51:bf:f2:ea:05:
                    18:ed:5e:92:02:8e:28:ad:2f:6c:2a:88:54:48:e0:
                    75:28:9f:df:6d:89:b1:e8:80:ad:20:1b:8c:e1:bb:
                    1f:c8:e9:67:24:e1:57:e1:f6:cb:92:1c:15:6a:d2:
                    56:21:c3:cd:1c:dc:e9:e4:70:65:24:29:f0:9c:5b:
                    2a:55:b1:4f:bd:02:48:2e:4e:94:c8:02:89:96:da:
                    2c:ee:28:42:b1:aa:45:d3:d4:77:22:3d:15:95:f9:
                    66:93:fd:00:9b:09:f9:be:3b:8d:30:0a:23:72:e5:
                    f3:4a:61:f0:96:dd:86:18:60:b9:85:52:67:06:f5:
                    2e:6d:5e:ca:6e:5f:01:d8:7f:10:3b:a4:55:e5:ca:
                    7e:e6:da:fb:4b:32:bf:3a:33:bc:f7:56:52:9a:cf:
                    4c:35:a6:e2:44:fe:6c:6b:32:f6:1e:ef:31:2e:bb:
                    55:00:8d:fa:f2:fd:e0:ac:16:82:78:fc:a8:8e:6a:
                    88:1c:0e:13:df:5c:18:02:36:7e:0e:04:d9:4c:77:
                    56:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:5B:3C:09:FB:8C:25:E1:EE:F9:F4:C2:7F:86:C9:BA:02:9D:35:64
            X509v3 Authority Key Identifier:
                keyid:9A:95:F1:52:CC:A2:41:1D:40:B1:F5:20:59:1B:E3:B3:A1:1B:CD:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpXxUsyiQR1AsfUgWRvjs6EbzfA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/eb68d6-f6c3-4318-9e83-b3b6c8fecc64/1/mpXxUsyiQR1AsfUgWRvjs6EbzfA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/eb68d6-f6c3-4318-9e83-b3b6c8fecc64/1/mpXxUsyiQR1AsfUgWRvjs6EbzfA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:3c:46:8e:ae:91:5f:db:54:59:24:33:f1:08:df:7a:7d:ec:
         56:ba:d2:a0:21:94:91:22:d3:af:6d:87:a9:ad:08:ec:ee:74:
         75:05:11:a3:29:72:b1:17:c3:7d:95:77:a8:ed:94:0b:ec:31:
         03:48:d7:85:ef:84:fa:64:7b:ff:a3:2d:a0:94:05:89:ba:c8:
         47:0a:4e:9d:e8:70:51:8e:4b:5c:64:71:21:db:f3:81:93:a1:
         c9:aa:0d:6c:3b:0c:59:24:89:31:04:ff:4f:2f:d4:74:04:f9:
         2f:c0:a6:f1:ca:eb:74:26:9a:d3:d0:3d:a6:c8:cd:ff:c1:4d:
         67:e0:bf:4c:ad:12:be:d3:b7:0d:ab:c9:cb:60:bb:54:cf:60:
         54:85:2c:a7:fd:70:78:28:cd:7f:7f:e8:c2:4f:2f:51:e8:d7:
         3d:6e:f3:dd:fd:b6:ad:d0:39:17:42:67:36:79:76:e5:0c:d5:
         e7:99:6a:0a:9f:fc:34:42:e2:e3:a4:a2:29:8e:64:cc:80:95:
         e3:47:fd:7d:3a:d5:8e:7d:5a:94:47:01:c8:e7:8b:a4:8b:fe:
         79:61:59:ec:f3:48:61:09:14:1b:f1:cd:dd:b1:26:c6:3a:60:
         2c:2a:26:d2:15:37:1a:d5:3d:8f:25:fa:1a:02:f0:db:f9:9a:
         3b:fc:22:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:23:48 2025 by rpki-client