Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/236973-26e0-494f-8a12-1a5be92aba3e/1/ogLWsVJ_EFk6tWdWkK_uiME8Ly4.mft
File:                     ogLWsVJ_EFk6tWdWkK_uiME8Ly4.mft (raw, json)
Hash identifier:          hAJ9PALsEFO3PShY0kFQOYScLsuMtOH9B+4Z0Hcwwxg=
Subject key identifier:   6F:23:F2:FC:FE:A9:94:94:CC:9E:74:28:5C:B4:98:61:E0:51:8B:A3
Authority key identifier: A2:02:D6:B1:52:7F:10:59:3A:B5:67:56:90:AF:EE:88:C1:3C:2F:2E
Certificate issuer:       /CN=a202d6b1527f10593ab5675690afee88c13c2f2e
Certificate serial:       01974DB29FDB407A043CC829C9A912E4F922
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ogLWsVJ_EFk6tWdWkK_uiME8Ly4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/236973-26e0-494f-8a12-1a5be92aba3e/1/ogLWsVJ_EFk6tWdWkK_uiME8Ly4.mft
Manifest number:          1210
Signing time:             Sun 08 Jun 2025 04:00:41 +0000
Manifest this update:     Sun 08 Jun 2025 04:00:41 +0000
Manifest next update:     Mon 09 Jun 2025 04:00:41 +0000
Files and hashes:         1: ogLWsVJ_EFk6tWdWkK_uiME8Ly4.crl (hash: Xt1R/F2xPBK+Ye7nMFkePsAqpnw331X9QfC77R4mQpA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/236973-26e0-494f-8a12-1a5be92aba3e/1/ogLWsVJ_EFk6tWdWkK_uiME8Ly4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/236973-26e0-494f-8a12-1a5be92aba3e/1/ogLWsVJ_EFk6tWdWkK_uiME8Ly4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ogLWsVJ_EFk6tWdWkK_uiME8Ly4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:b2:9f:db:40:7a:04:3c:c8:29:c9:a9:12:e4:f9:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a202d6b1527f10593ab5675690afee88c13c2f2e
        Validity
            Not Before: Jun  8 04:00:41 2025 GMT
            Not After : Jun  9 04:00:41 2025 GMT
        Subject: CN=6f23f2fcfea99494cc9e74285cb49861e0518ba3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1d:05:e2:4f:4a:cd:2a:42:41:c2:35:c0:4d:
                    6b:06:80:42:0f:e7:b2:89:40:0c:a4:e9:7b:80:43:
                    95:f4:47:33:2a:7c:1d:15:67:77:04:4e:3c:ef:aa:
                    13:d0:4b:17:46:87:94:dd:e4:99:64:ae:56:ae:83:
                    a7:39:7e:f0:4f:ec:39:2e:7d:3a:9e:d8:e3:f1:34:
                    a8:65:50:4a:10:21:ae:ed:64:ba:99:e0:42:7a:db:
                    f6:a5:d5:57:5b:27:97:c7:22:31:ad:9e:da:9c:19:
                    2d:0c:e2:e9:8f:e7:7c:09:6f:64:91:02:7c:cd:4a:
                    98:48:f5:5c:4f:85:5b:1c:c5:26:e1:67:94:2d:78:
                    ac:72:2e:a8:fb:40:d5:c0:d7:95:c8:8f:8a:3a:74:
                    20:e5:86:9e:1b:93:f9:7d:4c:4d:ad:73:12:b8:78:
                    09:f5:07:76:32:18:3c:60:de:7a:a8:e7:c0:b6:f9:
                    66:52:b4:e3:3d:62:03:f2:28:4e:24:16:9b:d2:86:
                    da:17:7b:1c:98:8f:96:86:72:63:9c:e8:02:3a:1b:
                    23:49:0d:51:01:5b:99:f1:23:e5:9d:1c:fa:81:e9:
                    94:4c:f6:da:90:44:e7:f5:be:50:8c:d6:e8:71:b2:
                    bb:c0:5b:b4:52:44:7f:ea:66:b5:d8:c2:33:8b:48:
                    1b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:23:F2:FC:FE:A9:94:94:CC:9E:74:28:5C:B4:98:61:E0:51:8B:A3
            X509v3 Authority Key Identifier:
                keyid:A2:02:D6:B1:52:7F:10:59:3A:B5:67:56:90:AF:EE:88:C1:3C:2F:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogLWsVJ_EFk6tWdWkK_uiME8Ly4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/236973-26e0-494f-8a12-1a5be92aba3e/1/ogLWsVJ_EFk6tWdWkK_uiME8Ly4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/236973-26e0-494f-8a12-1a5be92aba3e/1/ogLWsVJ_EFk6tWdWkK_uiME8Ly4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:6e:76:19:1d:15:9e:ac:e1:04:78:99:27:ad:5f:76:9a:e9:
         3c:b0:56:b5:5b:67:5d:e0:b0:e2:75:89:10:28:d0:cf:df:cb:
         4d:54:47:0e:58:64:a2:b0:c3:74:47:12:20:f1:cd:dc:d3:43:
         f4:aa:e6:f8:13:56:f4:26:d9:da:da:cb:8b:e3:a4:2b:cf:e4:
         b6:a5:48:73:12:71:a0:4b:33:49:0b:2b:21:e1:b7:5f:09:4d:
         82:eb:73:24:49:eb:be:1b:b3:9f:c2:7f:43:fb:31:bc:7b:07:
         15:35:3c:b3:85:0b:53:29:3b:73:75:2b:f6:00:7e:5f:63:9c:
         39:81:8e:20:9c:1e:48:42:45:e0:35:19:01:16:87:72:5f:7f:
         9b:1f:b8:08:b2:35:59:77:22:5e:4f:2c:e5:c8:80:2e:b3:6a:
         ba:f4:96:81:12:e4:e9:2a:0e:d2:25:29:d4:d3:59:1a:ac:da:
         56:89:b2:aa:10:c5:68:04:42:7e:54:f5:ce:b5:3a:d5:ab:41:
         5c:93:c0:4e:a5:78:9c:21:e0:9c:5b:aa:3f:5d:a9:0c:55:71:
         e0:fd:bc:ca:da:46:ed:44:cc:eb:a3:c2:78:14:a0:69:03:2c:
         06:15:79:fb:fc:94:24:0f:33:6f:46:3e:d2:e5:6d:95:7e:ea:
         00:95:7f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:17:30 2025 by rpki-client