Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/qBzzRkfX4PvZCFEKgiPJI8eSj-k.mft
File:                     qBzzRkfX4PvZCFEKgiPJI8eSj-k.mft (raw, json)
Hash identifier:          /ZiAi1sWOL2SYMCWn4whdOp5goK8akjd56LhoOCmlmc=
Subject key identifier:   5D:0F:98:A4:BB:DC:06:62:A7:5B:5C:94:68:50:AB:EC:97:74:18:7E
Authority key identifier: A8:1C:F3:46:47:D7:E0:FB:D9:08:51:0A:82:23:C9:23:C7:92:8F:E9
Certificate issuer:       /CN=a81cf34647d7e0fbd908510a8223c923c7928fe9
Certificate serial:       01974D44A9239F638665C2A3549E09783701
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qBzzRkfX4PvZCFEKgiPJI8eSj-k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/qBzzRkfX4PvZCFEKgiPJI8eSj-k.mft
Manifest number:          1294
Signing time:             Sun 08 Jun 2025 02:00:34 +0000
Manifest this update:     Sun 08 Jun 2025 02:00:34 +0000
Manifest next update:     Mon 09 Jun 2025 02:00:34 +0000
Files and hashes:         1: qBzzRkfX4PvZCFEKgiPJI8eSj-k.crl (hash: FxlHNOZDlnr475a8nMdPcRxyLLeHwsQatXxcjM+AliM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/qBzzRkfX4PvZCFEKgiPJI8eSj-k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/qBzzRkfX4PvZCFEKgiPJI8eSj-k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qBzzRkfX4PvZCFEKgiPJI8eSj-k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 02:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:44:a9:23:9f:63:86:65:c2:a3:54:9e:09:78:37:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a81cf34647d7e0fbd908510a8223c923c7928fe9
        Validity
            Not Before: Jun  8 02:00:34 2025 GMT
            Not After : Jun  9 02:00:34 2025 GMT
        Subject: CN=5d0f98a4bbdc0662a75b5c946850abec9774187e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d3:7b:98:fc:2b:f8:9a:c2:9f:84:a9:f8:85:
                    52:73:70:4e:05:40:f5:f2:89:3d:12:f0:de:e0:22:
                    01:5e:fc:0d:06:d6:92:79:2f:c5:1c:d2:4f:85:da:
                    e3:32:f0:f0:74:b0:51:35:14:f4:39:02:fe:8d:16:
                    ab:e4:75:95:c1:92:a1:f8:b9:2c:01:8a:8d:ae:e6:
                    3d:20:4c:d9:5f:eb:97:20:5d:cb:70:c6:f2:cd:1f:
                    b4:32:cc:ac:97:c0:5c:f2:aa:62:0f:04:5c:f8:b9:
                    8a:e5:bd:44:c4:49:1d:ba:37:67:20:ce:ce:4a:d4:
                    3e:22:9a:83:11:8c:ba:17:50:57:16:d6:6c:d0:7d:
                    43:e3:af:37:c4:c4:50:aa:9a:ec:13:3b:96:d6:39:
                    67:11:d0:b1:81:d9:64:36:f6:b1:6f:f5:0b:cf:44:
                    53:2f:60:8b:71:7b:83:a0:11:a0:f0:d1:67:e2:a2:
                    00:0a:75:63:72:d8:9b:c3:f7:bc:9d:7b:fc:12:f0:
                    a7:68:0b:14:1e:07:ba:c7:00:29:0d:de:ae:7d:fa:
                    5d:f1:9a:7f:57:ee:e3:24:72:76:b3:7e:c6:2a:64:
                    bf:d8:37:1e:ba:df:08:11:71:1b:d4:e1:4f:5e:de:
                    be:38:9b:d5:2b:49:92:31:1a:bd:55:d3:21:e9:58:
                    c1:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:0F:98:A4:BB:DC:06:62:A7:5B:5C:94:68:50:AB:EC:97:74:18:7E
            X509v3 Authority Key Identifier:
                keyid:A8:1C:F3:46:47:D7:E0:FB:D9:08:51:0A:82:23:C9:23:C7:92:8F:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBzzRkfX4PvZCFEKgiPJI8eSj-k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/qBzzRkfX4PvZCFEKgiPJI8eSj-k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/qBzzRkfX4PvZCFEKgiPJI8eSj-k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:2b:a3:07:36:fd:1c:42:01:d7:b9:88:c9:79:2b:e6:e7:ad:
         07:eb:63:7d:1f:c0:ec:f5:2a:1c:16:59:78:a1:c8:a0:01:54:
         a8:c0:7f:64:f7:45:88:95:67:fb:01:10:67:04:0d:12:33:14:
         75:39:89:ec:4c:c2:6b:82:f1:6f:47:74:4b:6c:b2:74:ef:99:
         f1:30:32:b6:6a:dc:b6:22:ed:75:05:e9:0e:9f:6b:25:a9:00:
         59:b8:3e:d0:cd:49:0a:78:8d:16:d5:10:0e:df:df:bd:7e:a9:
         2d:0c:92:e3:8f:83:2d:fa:16:e8:73:e2:c3:2c:5a:13:fb:0a:
         d3:d9:e4:82:6c:94:07:26:82:74:58:c4:4b:cf:b0:6c:89:b0:
         c2:f3:fc:28:a1:57:95:26:0c:9c:d0:bd:00:31:1a:3c:1d:da:
         5e:bf:9f:5a:2e:a1:6f:b6:ad:ce:68:4c:c8:55:29:d7:56:67:
         05:07:25:87:e8:58:1f:96:ed:ae:b0:af:0b:9c:49:2e:f2:7f:
         f0:9b:35:78:ab:c5:f2:66:6f:ff:73:f2:19:ec:2d:d5:9a:56:
         59:36:26:02:e1:58:98:80:45:c8:c0:32:95:3f:d4:16:80:9e:
         dd:e9:6b:c0:10:10:cf:25:e1:e8:f4:01:b6:85:e0:3d:5c:aa:
         78:b0:51:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:41:31 2025 by rpki-client