Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/e428da-0c18-4489-8ed2-93c44ac8414e/1/XsqkR_Cbyw3fivwQxz6OkbvwjlU.mft
File:                     XsqkR_Cbyw3fivwQxz6OkbvwjlU.mft (raw, json)
Hash identifier:          PMyomFJlUdwOtm6tw7dLf3s6EkLMdFLhJDPleSdrs/w=
Subject key identifier:   D0:BF:24:93:5A:6B:18:7B:41:ED:C4:94:51:77:BA:67:1D:C7:3E:C7
Authority key identifier: 5E:CA:A4:47:F0:9B:CB:0D:DF:8A:FC:10:C7:3E:8E:91:BB:F0:8E:55
Certificate issuer:       /CN=5ecaa447f09bcb0ddf8afc10c73e8e91bbf08e55
Certificate serial:       019756115DB0D5F18914216A6B9F5A61E2E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XsqkR_Cbyw3fivwQxz6OkbvwjlU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/e428da-0c18-4489-8ed2-93c44ac8414e/1/XsqkR_Cbyw3fivwQxz6OkbvwjlU.mft
Manifest number:          098F
Signing time:             Mon 09 Jun 2025 19:01:08 +0000
Manifest this update:     Mon 09 Jun 2025 19:01:08 +0000
Manifest next update:     Tue 10 Jun 2025 19:01:08 +0000
Files and hashes:         1: XsqkR_Cbyw3fivwQxz6OkbvwjlU.crl (hash: MdPRoWnsdn199CwnAN6NskGdGL/DPc2BYLKxYLx8DTY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/e428da-0c18-4489-8ed2-93c44ac8414e/1/XsqkR_Cbyw3fivwQxz6OkbvwjlU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/e428da-0c18-4489-8ed2-93c44ac8414e/1/XsqkR_Cbyw3fivwQxz6OkbvwjlU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XsqkR_Cbyw3fivwQxz6OkbvwjlU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 19:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:56:11:5d:b0:d5:f1:89:14:21:6a:6b:9f:5a:61:e2:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ecaa447f09bcb0ddf8afc10c73e8e91bbf08e55
        Validity
            Not Before: Jun  9 19:01:08 2025 GMT
            Not After : Jun 10 19:01:08 2025 GMT
        Subject: CN=d0bf24935a6b187b41edc4945177ba671dc73ec7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:00:c2:70:3c:5d:1f:53:46:78:81:80:51:01:
                    48:8b:57:43:a2:9b:ae:79:d7:fd:c4:4a:1f:a8:32:
                    06:8a:d5:0e:95:04:0b:d5:39:74:75:59:ef:43:17:
                    6c:0e:d7:3f:c2:82:94:b1:16:44:2c:ed:ed:41:92:
                    99:6b:ba:8d:75:ea:ca:f2:9c:3f:78:32:88:5d:22:
                    07:45:1b:3a:56:df:a3:75:30:33:cf:5a:51:ae:02:
                    fa:49:0d:a5:91:6e:de:e9:c3:20:eb:0e:e6:bd:8e:
                    0e:36:e9:87:33:b2:96:86:72:92:37:8b:b2:65:a0:
                    53:0f:77:cd:5c:85:7c:2d:51:35:5b:5a:67:76:7e:
                    92:a7:20:9b:c0:6b:a4:9e:e6:df:2f:df:9a:70:15:
                    3f:1d:d9:e0:b8:24:47:ea:26:18:b5:0b:4e:9c:5d:
                    5f:6f:1c:5d:15:4c:80:bc:77:eb:9a:d3:7d:71:89:
                    8b:8d:1e:e1:ef:f1:7b:1f:9a:f5:63:12:08:df:96:
                    3c:b5:f6:dc:2a:c3:78:48:17:7e:ac:97:e5:e2:81:
                    54:04:60:78:c1:53:2b:d2:57:26:78:77:a0:27:55:
                    22:1a:c7:82:a1:8f:dc:68:4e:fa:cb:f6:36:58:f3:
                    25:8f:e7:28:1b:ff:61:ec:27:44:a0:19:2e:a1:f9:
                    59:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:BF:24:93:5A:6B:18:7B:41:ED:C4:94:51:77:BA:67:1D:C7:3E:C7
            X509v3 Authority Key Identifier:
                keyid:5E:CA:A4:47:F0:9B:CB:0D:DF:8A:FC:10:C7:3E:8E:91:BB:F0:8E:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XsqkR_Cbyw3fivwQxz6OkbvwjlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e428da-0c18-4489-8ed2-93c44ac8414e/1/XsqkR_Cbyw3fivwQxz6OkbvwjlU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e428da-0c18-4489-8ed2-93c44ac8414e/1/XsqkR_Cbyw3fivwQxz6OkbvwjlU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e9:f7:1f:be:e2:c9:73:86:17:42:42:04:8f:09:f7:a9:47:4e:
         ad:80:1c:23:e8:69:51:18:86:70:1f:e6:2b:8f:33:20:0b:01:
         04:4f:12:73:7e:2d:07:ac:92:47:bb:f8:bb:3b:43:b5:8d:54:
         ef:59:ce:78:a8:ee:51:0f:92:a9:ce:3c:eb:15:e6:67:91:d9:
         8f:5e:d8:89:9c:63:d0:8f:6d:c3:f3:a5:2c:bf:d1:1f:5b:c4:
         0c:49:26:5b:a0:12:f0:ac:c7:f7:0f:08:c5:00:2e:76:42:37:
         70:b3:dd:d3:d1:e9:ed:f6:8b:b3:17:75:21:57:18:7b:aa:cd:
         4d:6e:a3:4d:03:7e:49:11:6b:e0:81:1c:ae:0d:18:c4:98:f9:
         7b:38:98:90:67:d3:5c:6a:a2:28:6f:6e:16:c6:f3:24:a6:4b:
         81:00:9a:0a:aa:ed:d5:14:b9:15:3e:f4:07:24:c6:87:3f:35:
         65:6e:3f:29:ee:29:71:fb:1f:24:c5:a6:82:c0:de:d4:82:61:
         69:44:f4:b6:f7:df:ab:f5:8b:9b:77:27:08:ac:bc:1b:72:36:
         8d:50:79:2d:11:13:6b:b4:d7:20:31:b5:64:af:01:d7:48:5c:
         94:25:5f:72:c1:0c:7c:1f:67:dc:ae:b0:6f:da:38:2c:2b:12:
         0e:8a:aa:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 01:54:35 2025 by rpki-client