Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/e89e19-465f-41f2-a4c7-dd431bcce3dd/1/7cFfZVhGJAinV1N2WyxxplTxZ24.mft
File:                     7cFfZVhGJAinV1N2WyxxplTxZ24.mft (raw, json)
Hash identifier:          02F+1TMBaGitIRa5YEh6G7uVmFDP23K3AgeqG3xjgxM=
Subject key identifier:   C0:AB:F1:94:79:46:F6:11:2D:D8:D9:A7:03:36:9B:88:B6:F9:3C:F6
Authority key identifier: ED:C1:5F:65:58:46:24:08:A7:57:53:76:5B:2C:71:A6:54:F1:67:6E
Certificate issuer:       /CN=edc15f6558462408a75753765b2c71a654f1676e
Certificate serial:       019762F0B9769BE4CE93EFD31E318EC4CF2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7cFfZVhGJAinV1N2WyxxplTxZ24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/e89e19-465f-41f2-a4c7-dd431bcce3dd/1/7cFfZVhGJAinV1N2WyxxplTxZ24.mft
Manifest number:          12C8
Signing time:             Thu 12 Jun 2025 07:00:32 +0000
Manifest this update:     Thu 12 Jun 2025 07:00:32 +0000
Manifest next update:     Fri 13 Jun 2025 07:00:32 +0000
Files and hashes:         1: 7cFfZVhGJAinV1N2WyxxplTxZ24.crl (hash: R6Rk7Yo9j2dXvouipBsL+PmaraWv5273qP8FRFHt+x4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/e89e19-465f-41f2-a4c7-dd431bcce3dd/1/7cFfZVhGJAinV1N2WyxxplTxZ24.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/e89e19-465f-41f2-a4c7-dd431bcce3dd/1/7cFfZVhGJAinV1N2WyxxplTxZ24.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7cFfZVhGJAinV1N2WyxxplTxZ24.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 07:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:62:f0:b9:76:9b:e4:ce:93:ef:d3:1e:31:8e:c4:cf:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edc15f6558462408a75753765b2c71a654f1676e
        Validity
            Not Before: Jun 12 07:00:32 2025 GMT
            Not After : Jun 13 07:00:32 2025 GMT
        Subject: CN=c0abf1947946f6112dd8d9a703369b88b6f93cf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:1e:45:f6:ee:df:b4:51:82:89:b5:5e:b7:67:
                    9e:ed:9e:5e:01:05:9f:3f:64:6f:3a:be:46:36:78:
                    68:77:eb:a4:5d:02:5a:e6:45:bf:c2:c4:f9:26:bc:
                    8a:be:1c:aa:c1:96:68:3f:fe:82:ce:30:1e:e9:a3:
                    b4:94:bd:af:8e:94:53:b0:c7:0e:89:3b:2c:8b:51:
                    86:c8:59:47:63:13:6f:1e:89:89:f4:a4:68:fb:fb:
                    ad:e8:5e:aa:6f:ef:9f:c6:74:d5:53:c4:54:d3:5b:
                    e8:6b:bb:31:12:ef:4b:1f:cf:50:52:78:62:32:07:
                    ff:39:87:89:8f:d1:79:7e:7c:5b:72:29:32:3c:1b:
                    2f:53:92:dd:dc:4b:ee:53:37:9e:2e:19:20:88:43:
                    f0:42:f6:1d:48:37:5b:10:54:ff:c5:b0:8a:9d:65:
                    60:d4:87:55:e4:b5:7a:43:5a:58:af:5f:1e:26:c9:
                    7a:e9:70:c5:dc:fd:d8:01:05:88:69:7d:f8:94:f4:
                    7b:2f:e3:8f:3f:d4:6b:2f:b9:24:38:23:77:22:16:
                    ee:9b:a0:c5:eb:55:93:11:2a:1a:24:43:2d:59:54:
                    5c:c6:20:03:a9:12:ff:9c:c0:27:9f:cc:d1:6c:bd:
                    9a:14:f3:cb:2b:a0:ea:21:5b:3c:92:9a:97:9e:67:
                    f1:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:AB:F1:94:79:46:F6:11:2D:D8:D9:A7:03:36:9B:88:B6:F9:3C:F6
            X509v3 Authority Key Identifier:
                keyid:ED:C1:5F:65:58:46:24:08:A7:57:53:76:5B:2C:71:A6:54:F1:67:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cFfZVhGJAinV1N2WyxxplTxZ24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e89e19-465f-41f2-a4c7-dd431bcce3dd/1/7cFfZVhGJAinV1N2WyxxplTxZ24.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e89e19-465f-41f2-a4c7-dd431bcce3dd/1/7cFfZVhGJAinV1N2WyxxplTxZ24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:7a:3f:41:b8:74:d8:07:9c:7e:79:4a:1d:11:68:7d:a5:d2:
         56:63:a1:96:13:eb:73:fc:9f:63:2a:60:d1:f6:1b:2b:53:ed:
         a2:1c:cb:2b:96:cc:41:3f:08:07:5d:e5:84:e6:7e:ce:6d:bb:
         8a:b7:27:c6:da:de:d8:66:a5:03:4b:8d:7d:6e:dd:24:b9:b2:
         3f:47:2e:d2:40:06:f7:57:b7:59:f6:59:72:76:eb:a1:8d:5e:
         f7:68:a8:16:ff:9a:0c:29:12:59:2b:e6:14:39:10:08:e8:4d:
         26:1b:49:8c:ae:fc:21:2b:ed:7f:88:c0:6f:b5:6a:c2:74:fe:
         cb:b5:19:36:05:3e:34:09:fa:b0:c4:3c:b9:a0:e2:f6:15:d2:
         0f:41:8e:7e:71:94:24:48:0f:7c:d8:0b:4e:5e:b4:ff:7a:14:
         66:a4:92:0f:13:cd:ba:da:05:10:07:35:1a:2b:63:a5:cb:e1:
         19:dd:c0:0a:d0:e7:35:70:df:fe:1f:59:f1:32:7d:ad:08:c1:
         2c:8a:fe:b7:bc:cf:fb:06:fb:7b:26:63:1d:e9:d9:5f:c1:cd:
         39:9a:1e:ce:2c:c5:6f:ce:cd:76:72:05:02:70:c8:46:6d:e1:
         12:02:29:c0:bf:bc:29:7b:bf:0f:e6:ce:6f:32:8d:61:0b:aa:
         a9:8c:bb:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 13:35:41 2025 by rpki-client