Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/4e64e5-ee41-476b-a02a-67795f7b6d10/1/sWUjiWNgP2LB2SiRbtwbOacuOm4.mft
File:                     sWUjiWNgP2LB2SiRbtwbOacuOm4.mft (raw, json)
Hash identifier:          /CPhAdQtP58O14cZ0GDwzF5hZadHgRC1MvF3wA+06QQ=
Subject key identifier:   38:91:90:76:96:F2:78:5A:1F:0A:2D:C7:98:17:30:AE:4E:0F:5D:72
Authority key identifier: B1:65:23:89:63:60:3F:62:C1:D9:28:91:6E:DC:1B:39:A7:2E:3A:6E
Certificate issuer:       /CN=b165238963603f62c1d928916edc1b39a72e3a6e
Certificate serial:       01974BC4A53A984E283D779D03BB10F4C7CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sWUjiWNgP2LB2SiRbtwbOacuOm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/4e64e5-ee41-476b-a02a-67795f7b6d10/1/sWUjiWNgP2LB2SiRbtwbOacuOm4.mft
Manifest number:          01D7
Signing time:             Sat 07 Jun 2025 19:01:07 +0000
Manifest this update:     Sat 07 Jun 2025 19:01:07 +0000
Manifest next update:     Sun 08 Jun 2025 19:01:07 +0000
Files and hashes:         1: sWUjiWNgP2LB2SiRbtwbOacuOm4.crl (hash: h2Jlud41RPTqIJgq/OAk+SGY4HYnrsLfSh23TlWZMNw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/4e64e5-ee41-476b-a02a-67795f7b6d10/1/sWUjiWNgP2LB2SiRbtwbOacuOm4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/4e64e5-ee41-476b-a02a-67795f7b6d10/1/sWUjiWNgP2LB2SiRbtwbOacuOm4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sWUjiWNgP2LB2SiRbtwbOacuOm4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:c4:a5:3a:98:4e:28:3d:77:9d:03:bb:10:f4:c7:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b165238963603f62c1d928916edc1b39a72e3a6e
        Validity
            Not Before: Jun  7 19:01:07 2025 GMT
            Not After : Jun  8 19:01:07 2025 GMT
        Subject: CN=3891907696f2785a1f0a2dc7981730ae4e0f5d72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f6:8c:c7:9d:db:53:cf:58:a1:7d:97:9f:cf:
                    38:d2:bb:65:49:fe:6d:22:c5:69:3c:36:e7:ef:eb:
                    61:ed:87:f6:95:68:93:b4:7e:8a:6b:41:a4:cd:44:
                    d4:5b:a1:52:e1:9c:d6:4f:bf:08:2d:61:a6:e4:bc:
                    33:70:17:22:74:7b:8e:e1:1c:d2:53:88:d9:c7:38:
                    1f:40:36:04:86:a1:98:b5:c3:28:a1:2f:43:b4:68:
                    b1:d6:2f:1c:58:33:5a:8d:3d:1f:ab:a7:18:39:27:
                    73:a1:21:fd:de:3e:a0:37:e4:99:b7:99:25:59:fa:
                    6f:84:e2:7a:fb:ed:66:68:18:7b:e3:c2:a1:17:76:
                    be:21:91:cc:ec:7e:a6:cd:68:cd:2a:c0:c1:8e:e2:
                    a1:9d:cc:7e:d4:8f:a6:a1:e4:86:2d:bc:bb:90:41:
                    a1:a9:c7:2f:b5:1f:cf:cb:a5:7f:be:3b:6e:1a:24:
                    a6:43:81:1d:0a:35:d1:fb:5e:03:9f:e0:ad:4e:56:
                    59:75:20:00:26:0a:9f:65:9c:5b:8a:75:b2:c1:a2:
                    5e:2d:bb:f2:f1:42:09:2c:ad:70:54:42:90:03:34:
                    44:3a:6c:bd:92:5c:91:c6:f5:68:71:d5:05:1f:b1:
                    83:dd:ed:9a:2b:46:42:16:8e:20:23:b6:c2:f7:49:
                    07:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:91:90:76:96:F2:78:5A:1F:0A:2D:C7:98:17:30:AE:4E:0F:5D:72
            X509v3 Authority Key Identifier:
                keyid:B1:65:23:89:63:60:3F:62:C1:D9:28:91:6E:DC:1B:39:A7:2E:3A:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWUjiWNgP2LB2SiRbtwbOacuOm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4e64e5-ee41-476b-a02a-67795f7b6d10/1/sWUjiWNgP2LB2SiRbtwbOacuOm4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4e64e5-ee41-476b-a02a-67795f7b6d10/1/sWUjiWNgP2LB2SiRbtwbOacuOm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:32:82:42:0a:1c:3f:7c:d2:a1:0a:0c:d8:da:20:46:06:9f:
         32:67:f3:3e:3e:c7:ac:c0:e4:47:48:7a:e6:62:76:4b:0f:2f:
         ad:51:14:72:b6:c0:dd:be:97:f5:52:26:d5:ee:4a:52:3a:67:
         5b:db:bf:5a:25:fa:ce:77:9c:9c:c7:a2:3d:59:3b:d5:a0:81:
         c7:26:c7:1c:06:91:aa:d1:7f:39:ef:57:54:13:91:e7:6c:4a:
         83:14:ff:e5:e9:1e:09:33:65:b6:ee:69:51:4f:0a:ba:fb:11:
         1d:ec:9f:bc:b1:f3:1d:74:c9:df:71:bf:80:1d:d6:26:7c:6e:
         db:31:27:2e:75:ef:c2:d1:85:30:c7:30:8f:00:66:08:12:80:
         2e:16:2d:af:c4:19:1e:24:3f:33:51:83:35:fe:a1:78:19:11:
         3f:a3:2e:72:bd:34:19:ed:e3:5a:98:b1:6d:e8:a9:b8:65:95:
         51:b4:ca:ed:57:c7:69:96:2a:b8:a8:fd:71:21:16:4c:92:e9:
         2b:cc:53:7c:29:32:6e:b2:f8:bb:c5:f7:2d:10:a4:c8:97:a6:
         7a:1d:bb:a2:1a:36:f5:31:c2:cf:1a:fd:64:31:41:61:78:ce:
         e0:6e:27:38:2d:c6:0d:23:d3:3b:70:73:a2:0d:ea:b0:e1:84:
         a6:15:47:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:09:13 2025 by rpki-client