Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.mft
File:                     54z133frZmwE77frs8o0BK3sNPs.mft (raw, json)
Hash identifier:          las6UekoDpwfhHN2f8W3ack3l02hxNZg73GZMtpxU7w=
Subject key identifier:   FA:18:91:B3:3F:8F:8F:70:E1:3D:AD:04:2F:46:C0:DF:FF:E0:27:80
Authority key identifier: E7:8C:F5:DF:77:EB:66:6C:04:EF:B7:EB:B3:CA:34:04:AD:EC:34:FB
Certificate issuer:       /CN=e78cf5df77eb666c04efb7ebb3ca3404adec34fb
Certificate serial:       019758DB3DA9FD4CD8A5D297429F3C2F4A1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/54z133frZmwE77frs8o0BK3sNPs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.mft
Manifest number:          0C64
Signing time:             Tue 10 Jun 2025 08:00:52 +0000
Manifest this update:     Tue 10 Jun 2025 08:00:52 +0000
Manifest next update:     Wed 11 Jun 2025 08:00:52 +0000
Files and hashes:         1: 54z133frZmwE77frs8o0BK3sNPs.crl (hash: RSbbasuPcTktyoqKhjpgM3uEnlRqD14ImKAP6WOYvCE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/54z133frZmwE77frs8o0BK3sNPs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 08:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:58:db:3d:a9:fd:4c:d8:a5:d2:97:42:9f:3c:2f:4a:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e78cf5df77eb666c04efb7ebb3ca3404adec34fb
        Validity
            Not Before: Jun 10 08:00:52 2025 GMT
            Not After : Jun 11 08:00:52 2025 GMT
        Subject: CN=fa1891b33f8f8f70e13dad042f46c0dfffe02780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bb:ed:97:28:d3:fa:ae:62:7f:30:a3:aa:96:
                    ba:f7:f5:a6:d8:6c:35:a8:5c:54:32:c8:c7:b1:78:
                    3e:f4:12:8d:76:82:8f:81:70:6a:bd:a5:e8:ce:71:
                    17:8b:5d:0e:0e:0c:1b:d9:3d:2d:6b:a4:e1:8b:18:
                    b2:58:67:1e:a0:ff:68:db:c0:4e:82:cf:85:bc:40:
                    4d:9f:6f:a4:3e:de:60:15:4d:c6:5c:83:3a:4a:e4:
                    20:7a:78:19:3e:e0:92:dc:05:41:3d:78:bd:c2:78:
                    95:09:42:f9:f8:9d:c8:22:22:ad:3f:ea:5a:a2:b5:
                    68:fc:0e:87:8d:33:c7:bd:9f:d0:5d:21:4b:86:a1:
                    aa:92:23:f2:1e:a6:3a:70:a5:2f:15:88:33:69:83:
                    e7:cc:7c:2c:db:f7:6f:1f:96:a4:8b:19:44:e1:ef:
                    d0:ff:b4:55:1c:84:f2:18:8d:94:ff:47:b4:0c:49:
                    19:f4:57:4d:83:0e:63:9a:41:a4:88:b1:4e:2f:05:
                    4b:3d:3c:bd:5a:9e:9b:e5:fd:26:91:14:76:09:b0:
                    d9:e1:3a:9a:2e:94:5d:1d:85:85:14:1b:53:f1:2a:
                    2a:cc:b9:f4:5c:cd:e8:7d:0b:04:68:6b:ce:61:21:
                    52:8d:eb:ea:87:a2:98:65:20:ea:b2:7e:51:c2:44:
                    99:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:18:91:B3:3F:8F:8F:70:E1:3D:AD:04:2F:46:C0:DF:FF:E0:27:80
            X509v3 Authority Key Identifier:
                keyid:E7:8C:F5:DF:77:EB:66:6C:04:EF:B7:EB:B3:CA:34:04:AD:EC:34:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/54z133frZmwE77frs8o0BK3sNPs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:5b:3d:1b:8d:ad:72:a0:14:cd:79:fc:91:ca:73:c6:1e:26:
         90:f9:99:2c:6c:4e:a2:74:53:a9:9f:b7:32:dd:b0:b3:35:66:
         2d:fd:97:a4:f5:8f:3d:f7:0b:b6:55:3d:15:bf:6b:21:d7:df:
         b2:5c:84:29:8b:db:ab:0c:e3:c1:1b:0b:94:a1:29:96:fd:31:
         44:90:50:d5:0f:4a:27:fd:7f:08:e1:5c:e9:8e:ab:f3:7e:f4:
         ea:2e:fa:de:7a:bb:f8:8c:1a:2f:4e:c8:e0:2f:a7:22:eb:4b:
         41:80:9d:4d:96:f5:cd:11:01:da:53:72:9e:e3:f1:00:13:a7:
         92:5a:35:01:bf:c2:43:3c:00:e3:09:5a:b9:9b:10:e8:11:02:
         05:a9:25:53:67:6a:75:e8:6e:08:ff:a6:78:5c:11:00:a1:0d:
         4c:ef:65:b2:08:89:bf:6b:4f:0c:7c:fc:77:5e:a4:84:dc:17:
         b3:db:19:e0:80:7d:71:e8:a3:13:8c:fd:5e:c8:e9:55:03:de:
         36:94:7d:53:60:39:09:aa:e0:17:81:7b:40:b3:af:cd:4f:40:
         47:b4:7c:1b:d1:90:f1:48:d5:53:3c:cf:b7:41:b9:05:bd:c9:
         d1:fa:10:56:07:f0:1a:03:6f:25:8d:a2:a4:39:fe:2d:2e:4c:
         cd:8d:10:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 15:02:21 2025 by rpki-client