Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft
File:                     rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft (raw, json)
Hash identifier:          RIK5TtXcYTYHvD3PhA0j07xGuru947sJ/4xDkIHf3PA=
Subject key identifier:   84:BF:D5:18:CC:F0:39:DF:68:B6:23:AD:95:7C:4E:4C:59:02:18:5C
Authority key identifier: AE:4D:7F:F4:56:F5:FD:C7:DE:61:FA:42:0E:E0:86:A7:7A:1E:61:E5
Certificate issuer:       /CN=ae4d7ff456f5fdc7de61fa420ee086a77a1e61e5
Certificate serial:       0197481E6F48B4CF84936EB62EDAC9F010ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft
Manifest number:          0443
Signing time:             Sat 07 Jun 2025 02:00:43 +0000
Manifest this update:     Sat 07 Jun 2025 02:00:43 +0000
Manifest next update:     Sun 08 Jun 2025 02:00:43 +0000
Files and hashes:         1: rk1_9Fb1_cfeYfpCDuCGp3oeYeU.crl (hash: hOO12b+Z12ai1wklTItP73HaM0Lz7KLgAT+oBJweHFY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:1e:6f:48:b4:cf:84:93:6e:b6:2e:da:c9:f0:10:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae4d7ff456f5fdc7de61fa420ee086a77a1e61e5
        Validity
            Not Before: Jun  7 02:00:43 2025 GMT
            Not After : Jun  8 02:00:43 2025 GMT
        Subject: CN=84bfd518ccf039df68b623ad957c4e4c5902185c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:31:f7:e8:fa:55:7f:2d:52:fb:8c:5f:f1:8a:
                    49:5f:e9:32:6c:77:c8:eb:ca:f2:0d:b8:35:a2:a2:
                    02:3e:61:69:51:c5:b7:56:22:26:29:c6:f3:2d:3b:
                    be:03:74:e2:13:37:93:61:95:87:21:2b:23:e7:a1:
                    c0:1c:9f:f6:00:ac:a6:d0:46:fd:fc:b6:9e:1d:e2:
                    73:82:b3:29:15:9a:9f:41:5f:23:91:d5:12:6c:3a:
                    73:64:ca:81:10:d4:a8:ca:3c:32:d3:3a:f6:60:ef:
                    74:f3:bc:31:f4:36:3e:81:19:0c:46:6d:ee:0d:fd:
                    5e:08:22:1a:28:b0:3e:85:0b:a5:28:4e:21:84:36:
                    b8:e3:81:f1:1e:44:2b:0f:7a:c6:c9:d2:8b:f9:55:
                    60:0a:04:b8:81:c8:49:3f:0b:41:00:fa:5f:37:18:
                    d5:b7:68:7d:0d:72:53:80:d4:68:f5:b5:e9:d0:b8:
                    fd:3a:b3:70:15:5e:7a:0f:9d:a5:eb:0c:2a:e6:19:
                    23:d6:7a:6e:9f:be:e1:eb:8f:72:7a:90:af:fe:06:
                    1f:1e:f1:b7:42:8c:47:f9:dd:80:c8:6e:f2:ed:4c:
                    18:3a:4a:27:b0:e3:7c:35:26:74:b0:ec:5a:02:2f:
                    64:5f:2c:39:79:3b:12:aa:5f:2e:5a:a3:02:2c:60:
                    08:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:BF:D5:18:CC:F0:39:DF:68:B6:23:AD:95:7C:4E:4C:59:02:18:5C
            X509v3 Authority Key Identifier:
                keyid:AE:4D:7F:F4:56:F5:FD:C7:DE:61:FA:42:0E:E0:86:A7:7A:1E:61:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:7d:29:90:fd:4c:b7:65:a0:ac:a4:0d:8e:66:48:52:9d:a4:
         74:75:b9:e5:2f:08:0b:dc:71:02:37:c7:fc:f3:67:1d:16:1e:
         70:3e:6c:ed:02:d5:aa:06:a4:e6:43:2e:9e:5c:ab:de:42:6d:
         07:9b:8a:4a:b0:72:52:ef:e1:0b:4a:6c:99:e4:00:0b:ca:3f:
         d2:63:ee:c7:8c:2c:f3:d8:43:39:cb:ee:1e:17:41:9e:c7:f6:
         9c:9e:ad:48:3a:c1:26:49:be:fe:f3:3f:41:44:6b:35:62:66:
         df:8d:43:5c:1b:cd:ef:a1:4a:5e:e1:33:9d:09:75:6f:44:ad:
         9e:61:39:39:db:5c:b1:ce:02:78:f4:c7:3d:17:d8:fc:c8:9b:
         13:05:13:1c:1d:b5:96:8a:0b:55:12:12:98:14:99:6d:f5:bd:
         1d:65:2b:58:eb:10:36:09:0e:be:49:80:e7:c8:36:44:69:de:
         51:37:3d:89:0a:c6:94:bd:c4:cc:3b:c5:bc:b5:f6:0b:74:6b:
         b7:58:aa:3a:ec:f9:27:b4:cb:75:9f:81:43:eb:39:17:dd:9d:
         12:1a:d4:80:37:ab:f1:9a:61:86:2a:14:aa:87:a8:9e:7b:f0:
         bc:3e:80:eb:78:99:d5:77:f5:5a:a5:50:1f:c8:10:09:40:53:
         78:46:31:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:56:52 2025 by rpki-client