Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.mft
File:                     dlIO_x7h4o493PuJ58tvfYmnfJw.mft (raw, json)
Hash identifier:          0qOQ2ansEK6D+kZNDnqyLeUIf+YVIfduhn+dOi5zEBw=
Subject key identifier:   8E:8F:E0:22:1F:77:43:89:72:BD:E6:B4:66:0C:59:C2:5F:C4:5F:F9
Authority key identifier: 76:52:0E:FF:1E:E1:E2:8E:3D:DC:FB:89:E7:CB:6F:7D:89:A7:7C:9C
Certificate issuer:       /CN=76520eff1ee1e28e3ddcfb89e7cb6f7d89a77c9c
Certificate serial:       01974E8E63DDBF96E4D3629C1B9E5E63D3A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dlIO_x7h4o493PuJ58tvfYmnfJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.mft
Manifest number:          010B
Signing time:             Sun 08 Jun 2025 08:00:43 +0000
Manifest this update:     Sun 08 Jun 2025 08:00:43 +0000
Manifest next update:     Mon 09 Jun 2025 08:00:43 +0000
Files and hashes:         1: dlIO_x7h4o493PuJ58tvfYmnfJw.crl (hash: m9XbfMpmsr3ZU4fN9XXXfKaG5WS1ad2IIrkm/sM+zls=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dlIO_x7h4o493PuJ58tvfYmnfJw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:8e:63:dd:bf:96:e4:d3:62:9c:1b:9e:5e:63:d3:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76520eff1ee1e28e3ddcfb89e7cb6f7d89a77c9c
        Validity
            Not Before: Jun  8 08:00:43 2025 GMT
            Not After : Jun  9 08:00:43 2025 GMT
        Subject: CN=8e8fe0221f77438972bde6b4660c59c25fc45ff9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:24:82:97:df:d3:5c:fa:6d:5b:47:4a:d7:ef:
                    5b:9d:86:77:55:a3:72:ec:11:4b:0a:ed:e8:4e:7d:
                    77:9a:a8:4d:e0:ad:99:e6:19:cc:25:04:13:02:d8:
                    b1:92:55:c4:07:e1:62:84:59:5a:65:7d:8f:4b:dc:
                    ad:54:89:ea:e5:31:f0:bd:45:67:da:b2:bb:b3:f9:
                    60:4c:2e:b9:c0:b1:72:be:34:93:e0:e1:0d:55:e6:
                    57:22:11:48:10:59:b6:2b:1a:d6:39:7e:bb:a6:9c:
                    29:25:9e:25:13:72:d0:f3:a6:f9:c5:5f:d2:55:14:
                    f1:d0:c8:25:34:b8:f3:e6:e7:91:fd:fa:1e:3c:90:
                    be:59:9e:38:1b:eb:c3:21:ad:89:45:d0:1a:4d:08:
                    64:3d:4b:ef:c7:fb:91:53:c4:0a:dd:82:a7:04:c3:
                    d7:8d:15:fe:38:db:c6:5e:be:49:84:ec:52:fb:8f:
                    5a:3a:49:a6:8f:a2:df:3a:01:49:7f:c9:03:4c:32:
                    d2:2a:e6:a7:2b:be:22:0c:06:82:07:a2:0f:50:c6:
                    ba:87:e9:72:fb:61:fc:68:20:85:e5:3e:d0:d0:ea:
                    df:ba:fe:f0:88:2c:22:54:92:01:fd:e3:09:fc:5e:
                    24:2c:ee:b2:fb:a6:13:d8:3e:b5:55:f4:a1:0d:36:
                    e3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:8F:E0:22:1F:77:43:89:72:BD:E6:B4:66:0C:59:C2:5F:C4:5F:F9
            X509v3 Authority Key Identifier:
                keyid:76:52:0E:FF:1E:E1:E2:8E:3D:DC:FB:89:E7:CB:6F:7D:89:A7:7C:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlIO_x7h4o493PuJ58tvfYmnfJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:81:22:37:44:18:17:14:36:a7:23:60:95:42:1a:ef:be:bb:
         93:8f:2f:61:95:b3:94:18:89:8e:8d:db:af:46:21:8a:61:04:
         eb:36:64:4b:81:62:7c:96:73:af:af:b4:b0:6c:39:7f:f7:46:
         b0:e5:cb:6b:9e:98:a5:b0:9f:b4:bd:8d:df:91:b8:f3:92:9b:
         21:a1:a2:c9:b1:8d:41:f6:0e:56:6f:2e:bf:10:92:80:00:a0:
         1e:5f:b4:89:73:8a:99:a1:13:86:72:ac:3f:8f:24:42:d8:12:
         13:7c:33:35:a6:38:e7:b4:dc:60:23:5e:fc:f3:2b:96:45:77:
         49:f2:f7:f9:91:cf:24:6f:9f:a0:72:bb:09:33:fd:3c:46:08:
         0c:85:85:dc:53:89:56:f8:c3:6e:3d:32:98:02:53:21:d8:10:
         76:7f:05:ad:26:54:12:64:f5:fd:51:35:5f:24:ff:70:21:6d:
         df:58:3f:03:a1:df:1e:bd:0f:7e:db:59:b2:a1:75:79:03:79:
         a2:a0:12:bb:27:c1:16:c2:2d:0f:4f:75:aa:f4:26:ce:30:6a:
         4b:a5:9a:60:17:91:fb:44:c4:70:3f:89:7f:00:40:45:07:92:
         39:04:9e:ff:1d:f9:e6:c6:41:3d:8f:dd:77:7a:c0:df:87:a4:
         0f:2f:c1:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:28:06 2025 by rpki-client