Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.mft
File:                     54z133frZmwE77frs8o0BK3sNPs.mft (raw, json)
Hash identifier:          PNZjWNf1v6KAjC26Ewg0/iidkFqfoYiB9ivlSVIm4Qg=
Subject key identifier:   95:C3:28:B0:91:A5:37:A8:BC:29:47:36:F8:A1:8A:B8:0D:A2:99:2F
Authority key identifier: E7:8C:F5:DF:77:EB:66:6C:04:EF:B7:EB:B3:CA:34:04:AD:EC:34:FB
Certificate issuer:       /CN=e78cf5df77eb666c04efb7ebb3ca3404adec34fb
Certificate serial:       0197647179A8F56C3044C8F2181A4992598B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/54z133frZmwE77frs8o0BK3sNPs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.mft
Manifest number:          0C6A
Signing time:             Thu 12 Jun 2025 14:00:47 +0000
Manifest this update:     Thu 12 Jun 2025 14:00:47 +0000
Manifest next update:     Fri 13 Jun 2025 14:00:47 +0000
Files and hashes:         1: 54z133frZmwE77frs8o0BK3sNPs.crl (hash: SmN6iaJ1ZIyCAknUolMZqNgVduwsq8HDJMy5frBaoCo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/54z133frZmwE77frs8o0BK3sNPs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 14:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:64:71:79:a8:f5:6c:30:44:c8:f2:18:1a:49:92:59:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e78cf5df77eb666c04efb7ebb3ca3404adec34fb
        Validity
            Not Before: Jun 12 14:00:47 2025 GMT
            Not After : Jun 13 14:00:47 2025 GMT
        Subject: CN=95c328b091a537a8bc294736f8a18ab80da2992f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:88:01:b4:de:82:86:f4:31:70:ae:2e:99:b0:
                    d7:2c:96:31:36:60:d5:17:5c:c3:63:92:55:9c:3c:
                    f1:e2:9d:0e:3f:d5:11:33:fa:fa:b5:3b:09:01:04:
                    e9:f4:5d:21:d5:63:ad:a0:b0:ee:52:13:b1:14:b3:
                    9b:e7:ba:8d:30:37:bf:81:21:51:9e:5d:5f:3c:a3:
                    21:32:b2:86:f0:15:5a:14:46:95:9d:86:13:54:b5:
                    74:52:2c:2f:2b:91:1f:4f:99:a6:50:03:31:7c:53:
                    ca:1c:37:6e:8c:53:e7:d6:32:e9:94:e3:99:89:eb:
                    b4:1c:a3:ce:a0:55:c0:b4:63:52:4d:31:fd:ce:35:
                    45:ef:c7:40:6a:22:91:d2:40:dd:e4:22:9a:f4:c7:
                    88:cc:1f:f1:70:5c:42:0c:c8:16:55:b3:64:c5:38:
                    58:e1:cb:c7:5c:c7:7f:46:9c:0c:68:a5:d3:49:2d:
                    60:63:85:3f:53:7c:f1:b7:1d:f4:bf:4b:9d:83:39:
                    53:a8:57:6c:b8:81:f9:69:a8:bd:07:f3:6d:a3:0f:
                    92:ef:fd:2f:0c:0d:d4:6e:27:84:d8:44:89:59:61:
                    42:f6:ea:66:d5:ca:a7:ed:57:fe:f7:ab:41:aa:f8:
                    1a:5a:74:4f:86:01:ff:f6:f8:1e:0f:7f:b2:7c:5a:
                    d3:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:C3:28:B0:91:A5:37:A8:BC:29:47:36:F8:A1:8A:B8:0D:A2:99:2F
            X509v3 Authority Key Identifier:
                keyid:E7:8C:F5:DF:77:EB:66:6C:04:EF:B7:EB:B3:CA:34:04:AD:EC:34:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/54z133frZmwE77frs8o0BK3sNPs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:ea:e3:f8:3c:f7:f1:26:a0:76:07:ec:28:09:8d:84:fc:fb:
         f1:10:35:12:65:61:af:23:68:b8:37:0f:66:9b:54:fa:f6:86:
         59:c5:01:c3:35:56:73:88:ac:da:6f:7c:81:9d:73:0e:97:e8:
         21:25:68:4c:e7:05:55:b2:21:4a:62:00:56:4e:be:6d:e0:9c:
         3f:27:dd:8a:62:59:35:38:c1:e6:de:20:fb:a1:1c:77:a4:d5:
         67:ea:c1:84:fa:39:77:71:ff:b5:87:c7:2d:39:99:99:9c:a5:
         ac:98:23:46:7f:11:98:5d:71:42:27:5f:57:74:f9:72:47:45:
         ed:a7:ce:e1:95:b5:94:ee:23:21:32:7b:b1:c1:42:9d:88:e1:
         ee:d3:84:48:96:d5:53:65:76:94:20:e4:8e:ca:ca:f1:8d:28:
         bd:0d:3f:6a:fc:39:25:7f:f0:65:81:25:bf:b2:22:7f:a4:5a:
         9b:17:42:3b:9a:e1:7c:5b:39:56:9e:c5:f7:16:62:ab:27:1f:
         a7:c8:62:90:ec:ab:66:c2:9d:79:ca:5e:75:29:9c:90:10:e0:
         c8:34:23:eb:ac:3d:67:44:e0:6e:38:24:84:23:d3:ee:e8:71:
         dd:98:31:01:e0:6d:d8:b1:7e:61:ed:5b:73:35:0b:74:69:5a:
         e5:d0:ab:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 00:28:53 2025 by rpki-client