Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/13df3e-bc22-402f-afbc-fc9ead8256ac/1/fuKac7j6u65GDnkk_nZoR13LmmM.mft
File:                     fuKac7j6u65GDnkk_nZoR13LmmM.mft (raw, json)
Hash identifier:          EDU/6R+6ylvj+VEQLa2in84W/MWjDHkIjjQlC7AYZvA=
Subject key identifier:   49:3B:0E:EC:12:C9:41:D6:20:39:97:F0:9C:E1:B8:8C:23:1A:8D:60
Authority key identifier: 7E:E2:9A:73:B8:FA:BB:AE:46:0E:79:24:FE:76:68:47:5D:CB:9A:63
Certificate issuer:       /CN=7ee29a73b8fabbae460e7924fe7668475dcb9a63
Certificate serial:       01975046BEF06826DB5697BF40193E253DB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fuKac7j6u65GDnkk_nZoR13LmmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/13df3e-bc22-402f-afbc-fc9ead8256ac/1/fuKac7j6u65GDnkk_nZoR13LmmM.mft
Manifest number:          04FA
Signing time:             Sun 08 Jun 2025 16:01:43 +0000
Manifest this update:     Sun 08 Jun 2025 16:01:43 +0000
Manifest next update:     Mon 09 Jun 2025 16:01:43 +0000
Files and hashes:         1: fuKac7j6u65GDnkk_nZoR13LmmM.crl (hash: 64Hqs95YrQR7GgNLRdPMXnrurbI50G3iXiuYAcR2bPo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/13df3e-bc22-402f-afbc-fc9ead8256ac/1/fuKac7j6u65GDnkk_nZoR13LmmM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/13df3e-bc22-402f-afbc-fc9ead8256ac/1/fuKac7j6u65GDnkk_nZoR13LmmM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fuKac7j6u65GDnkk_nZoR13LmmM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 16:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:50:46:be:f0:68:26:db:56:97:bf:40:19:3e:25:3d:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ee29a73b8fabbae460e7924fe7668475dcb9a63
        Validity
            Not Before: Jun  8 16:01:43 2025 GMT
            Not After : Jun  9 16:01:43 2025 GMT
        Subject: CN=493b0eec12c941d6203997f09ce1b88c231a8d60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:17:c1:7e:9d:b7:7d:14:6e:c0:26:a0:84:18:
                    4f:d7:8c:38:26:18:9d:2f:a4:d1:1f:fd:a1:3d:8d:
                    e5:11:74:3b:8a:40:57:ca:0d:89:7f:99:f4:e9:4d:
                    12:61:29:5b:eb:1d:59:e8:a9:74:01:95:41:a6:5f:
                    30:fd:f6:94:d1:2b:13:f4:4c:ad:1f:f8:89:46:21:
                    7f:84:24:58:9b:1f:6c:d9:21:b9:29:fb:83:10:1f:
                    5c:4c:50:ec:63:7d:51:58:d7:3c:ff:0b:2f:cb:3f:
                    31:d4:13:79:57:a3:cb:41:c8:a5:13:1d:3a:5b:fa:
                    60:80:4e:f3:97:07:ae:19:67:d3:df:00:33:93:54:
                    7d:b7:07:3d:05:b9:20:78:83:c0:4f:bc:51:7d:b0:
                    4e:59:c3:99:76:76:b1:2b:ce:06:87:73:a5:e1:ca:
                    a3:67:c2:5f:f8:82:57:02:d5:8d:92:5a:44:02:31:
                    a8:14:95:2e:54:af:c6:55:40:bd:2c:ff:4e:4b:7a:
                    de:5b:8f:6e:e2:da:72:b4:d2:0d:66:84:00:a0:3c:
                    80:2c:4b:2d:1c:e0:a3:8b:01:13:51:9c:e4:41:f5:
                    eb:45:9b:2a:0b:6e:b4:d3:9f:4f:ef:1f:a1:dd:8e:
                    31:d6:9e:d0:b8:e9:e2:aa:9c:bb:b8:9b:d6:bc:00:
                    52:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:3B:0E:EC:12:C9:41:D6:20:39:97:F0:9C:E1:B8:8C:23:1A:8D:60
            X509v3 Authority Key Identifier:
                keyid:7E:E2:9A:73:B8:FA:BB:AE:46:0E:79:24:FE:76:68:47:5D:CB:9A:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuKac7j6u65GDnkk_nZoR13LmmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/13df3e-bc22-402f-afbc-fc9ead8256ac/1/fuKac7j6u65GDnkk_nZoR13LmmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/13df3e-bc22-402f-afbc-fc9ead8256ac/1/fuKac7j6u65GDnkk_nZoR13LmmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:51:6d:b5:09:d8:cb:9c:41:70:b6:14:08:35:6a:80:ef:eb:
         30:9c:11:9e:61:99:a1:f6:db:f7:0b:e1:a7:10:8e:45:ba:dc:
         e1:6e:c8:e7:5e:b2:5d:89:f6:0f:74:13:db:c0:0e:23:ec:a0:
         58:07:cb:df:bd:da:fd:d2:38:05:9d:fb:f3:9d:fc:bb:9c:b6:
         6d:d8:1b:13:64:0b:b5:de:04:94:35:e2:3f:4c:f4:4a:54:33:
         43:63:7a:d3:2f:71:ec:4e:e8:2b:63:83:91:bb:61:49:db:58:
         19:f1:17:79:d9:56:d5:66:fc:89:e6:c8:e5:74:e5:46:c8:a0:
         2f:6b:da:d1:88:d9:69:36:1d:40:95:8c:24:2b:0b:27:cf:d2:
         7f:f0:f1:f0:b8:91:e8:e1:15:fd:19:e5:e1:16:a3:73:de:90:
         16:80:2d:75:ef:3d:75:31:be:1e:84:c3:e2:8e:d7:7c:4d:bc:
         49:3c:02:6e:ed:a9:d8:05:f1:a4:65:b8:81:89:e0:76:95:a2:
         19:dd:58:29:d3:df:14:25:8b:99:78:00:03:d2:03:cf:e6:9a:
         2f:c9:d0:ae:d1:05:1a:fb:ab:d5:91:3b:a3:71:09:4e:28:18:
         80:09:9b:38:82:e8:7a:2c:35:3e:7b:60:2b:61:65:2f:df:a0:
         7e:34:36:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:13:30 2025 by rpki-client