Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.mft
File:                     54z133frZmwE77frs8o0BK3sNPs.mft (raw, json)
Hash identifier:          plGPho68IrsWZJYlfRnF5MXU9oqPwXt8SC1oyZjv6m0=
Subject key identifier:   0C:50:E6:70:E1:B4:70:63:3D:C1:52:33:DA:FF:05:DC:E7:39:0F:75
Authority key identifier: E7:8C:F5:DF:77:EB:66:6C:04:EF:B7:EB:B3:CA:34:04:AD:EC:34:FB
Certificate issuer:       /CN=e78cf5df77eb666c04efb7ebb3ca3404adec34fb
Certificate serial:       019762831D38EA5840BD9D653BFD0375F863
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/54z133frZmwE77frs8o0BK3sNPs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.mft
Manifest number:          0C69
Signing time:             Thu 12 Jun 2025 05:00:48 +0000
Manifest this update:     Thu 12 Jun 2025 05:00:48 +0000
Manifest next update:     Fri 13 Jun 2025 05:00:48 +0000
Files and hashes:         1: 54z133frZmwE77frs8o0BK3sNPs.crl (hash: TYHzjFw7sOlmshnMAGiqIFg9iaG6772RdhAu76XcOog=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/54z133frZmwE77frs8o0BK3sNPs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 05:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:62:83:1d:38:ea:58:40:bd:9d:65:3b:fd:03:75:f8:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e78cf5df77eb666c04efb7ebb3ca3404adec34fb
        Validity
            Not Before: Jun 12 05:00:48 2025 GMT
            Not After : Jun 13 05:00:48 2025 GMT
        Subject: CN=0c50e670e1b470633dc15233daff05dce7390f75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:64:d3:db:12:62:12:c9:cf:94:e6:f3:4d:a1:
                    cd:f6:f3:ee:fe:e2:81:86:4b:46:d4:8b:c2:3d:9a:
                    ce:9b:40:cd:03:cd:ef:5b:ca:39:2e:c3:ca:37:49:
                    eb:dd:ea:53:e5:af:b3:c5:11:69:73:f4:53:a4:77:
                    25:cb:91:42:f1:28:df:43:9e:dd:4c:7a:76:83:5a:
                    86:9b:a5:3f:ba:e8:bc:b3:d1:c8:9b:be:ac:4c:22:
                    b4:b4:c9:86:de:b2:77:53:5c:40:ac:6f:dd:3d:af:
                    10:75:f9:56:fd:85:16:6b:78:28:8f:5e:a9:e4:af:
                    10:a6:b7:c1:ff:0d:0a:21:47:00:db:c9:78:99:fd:
                    f9:b7:2b:fd:3d:4a:4f:40:da:2e:b9:73:1a:c1:3e:
                    14:95:91:19:7e:0e:29:5c:0f:fe:49:c3:26:6b:a7:
                    16:93:88:b0:64:24:a1:02:d1:a2:5b:85:d7:33:8f:
                    93:f2:24:bb:f6:02:61:22:d3:5e:61:2e:a3:28:28:
                    fb:2a:1e:ab:38:e0:6c:75:4c:0a:d8:26:8a:85:23:
                    65:ad:a1:df:21:d4:5f:25:60:19:84:33:97:1b:bb:
                    27:f7:14:2a:ba:c9:9b:04:47:5f:6a:45:6c:a7:56:
                    e3:3f:d6:80:99:b3:37:dd:7e:b6:00:ee:3a:19:5b:
                    9a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:50:E6:70:E1:B4:70:63:3D:C1:52:33:DA:FF:05:DC:E7:39:0F:75
            X509v3 Authority Key Identifier:
                keyid:E7:8C:F5:DF:77:EB:66:6C:04:EF:B7:EB:B3:CA:34:04:AD:EC:34:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/54z133frZmwE77frs8o0BK3sNPs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:6d:c5:0b:c7:84:68:20:0f:bd:0b:e0:97:7a:5c:9f:53:45:
         1d:6b:6d:17:a0:51:79:2a:6c:88:01:b0:e3:cd:54:5f:a1:29:
         95:02:76:e6:d7:b3:92:01:b1:6b:73:fa:ad:ef:d3:16:b6:69:
         99:67:4c:e2:20:d1:fd:3a:d3:00:9b:ce:ca:69:60:f9:ee:89:
         75:05:17:98:ba:a8:e0:3c:18:2d:7d:fe:f9:4e:e1:8d:a2:e4:
         53:ab:18:3c:be:96:b9:53:76:f8:d5:63:93:c9:f3:30:cd:99:
         b9:5e:c2:2e:a3:00:fa:34:55:67:88:6e:33:8b:0f:01:8a:61:
         2e:35:f1:b0:1e:c3:0f:40:b8:62:5f:8e:c3:27:63:06:cb:cc:
         15:87:bc:9f:b9:d3:4e:a2:b0:9c:23:f0:dd:2b:ed:88:d7:f3:
         ff:f3:11:c5:b9:b5:53:2b:f4:0a:a2:32:1a:8c:e1:21:6c:a7:
         28:8a:74:48:f1:17:9e:0f:28:81:ca:eb:f2:09:e3:6b:f6:de:
         42:e0:03:3a:92:2f:84:b2:c3:ab:d9:83:b5:28:3d:d6:af:3d:
         24:8d:56:5f:01:22:ef:0f:f3:2e:7f:67:46:c8:d9:7e:9a:3b:
         99:a0:62:60:33:b1:eb:37:7c:8e:49:b9:f5:ad:c1:c6:f9:f1:
         68:70:42:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 13:57:37 2025 by rpki-client