Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/920301-5cae-4da1-a3c2-af00d71d3407/1/KEo1xF93T6_4QkXOEkvcZVx0Uos.mft
File:                     KEo1xF93T6_4QkXOEkvcZVx0Uos.mft (raw, json)
Hash identifier:          1F5abwqBNnBF1uICoKbr79iDS+x5YC/OGsiWsM2tVwU=
Subject key identifier:   37:41:43:33:92:3E:3F:0C:EB:BE:FD:D7:96:52:A1:71:05:66:5A:46
Authority key identifier: 28:4A:35:C4:5F:77:4F:AF:F8:42:45:CE:12:4B:DC:65:5C:74:52:8B
Certificate issuer:       /CN=284a35c45f774faff84245ce124bdc655c74528b
Certificate serial:       01974CD74B01E2383400068F4A25A5CA1160
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KEo1xF93T6_4QkXOEkvcZVx0Uos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/920301-5cae-4da1-a3c2-af00d71d3407/1/KEo1xF93T6_4QkXOEkvcZVx0Uos.mft
Manifest number:          064F
Signing time:             Sun 08 Jun 2025 00:01:07 +0000
Manifest this update:     Sun 08 Jun 2025 00:01:07 +0000
Manifest next update:     Mon 09 Jun 2025 00:01:07 +0000
Files and hashes:         1: KEo1xF93T6_4QkXOEkvcZVx0Uos.crl (hash: aje+bzoOHvyRdF8tqOXMfoOGRTgOWuj98aMURCXxBL8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/920301-5cae-4da1-a3c2-af00d71d3407/1/KEo1xF93T6_4QkXOEkvcZVx0Uos.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/920301-5cae-4da1-a3c2-af00d71d3407/1/KEo1xF93T6_4QkXOEkvcZVx0Uos.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KEo1xF93T6_4QkXOEkvcZVx0Uos.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:d7:4b:01:e2:38:34:00:06:8f:4a:25:a5:ca:11:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=284a35c45f774faff84245ce124bdc655c74528b
        Validity
            Not Before: Jun  8 00:01:07 2025 GMT
            Not After : Jun  9 00:01:07 2025 GMT
        Subject: CN=37414333923e3f0cebbefdd79652a17105665a46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1d:ab:83:76:e0:95:62:9a:19:f4:06:00:12:
                    42:ba:fa:cd:a5:e4:71:96:b1:af:f5:eb:28:72:ba:
                    c7:f7:d0:a5:4c:d5:1a:54:74:8a:05:29:74:d6:7d:
                    6a:e7:b6:4f:c4:b7:19:10:31:c0:2b:fc:73:a1:e4:
                    6a:2d:26:ad:b2:2f:7e:15:bc:ee:b2:1b:e7:47:9f:
                    ef:a5:d9:16:e8:5c:75:11:8b:9d:7c:6b:0e:8c:6e:
                    89:6b:5e:d1:fa:8a:a4:a8:a6:60:94:87:01:6e:30:
                    87:99:b8:e7:ae:8b:5f:58:bb:ef:d9:6e:45:c8:9a:
                    fc:c3:18:9e:bd:3f:d1:c3:45:2e:f3:a5:cc:f6:3d:
                    18:d0:de:38:e8:c6:89:e4:ca:b2:96:b1:c1:1f:a5:
                    24:b0:0d:31:cb:1a:0a:47:23:6f:e8:a5:c8:41:dd:
                    d6:5d:65:52:79:a9:9d:4b:fe:18:34:13:72:2e:3c:
                    ac:76:0c:a1:2a:f5:06:e2:4d:b7:55:c3:90:8b:3a:
                    f0:64:01:51:9b:a9:d9:f5:39:74:0a:92:c9:0d:55:
                    0b:17:c8:0c:56:49:51:95:ad:83:8b:4c:40:6c:d3:
                    37:8b:ac:a0:be:56:1d:42:91:92:14:46:86:ac:33:
                    ae:a1:36:a9:7f:2f:68:de:05:30:ed:1d:55:47:15:
                    da:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:41:43:33:92:3E:3F:0C:EB:BE:FD:D7:96:52:A1:71:05:66:5A:46
            X509v3 Authority Key Identifier:
                keyid:28:4A:35:C4:5F:77:4F:AF:F8:42:45:CE:12:4B:DC:65:5C:74:52:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KEo1xF93T6_4QkXOEkvcZVx0Uos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/920301-5cae-4da1-a3c2-af00d71d3407/1/KEo1xF93T6_4QkXOEkvcZVx0Uos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/920301-5cae-4da1-a3c2-af00d71d3407/1/KEo1xF93T6_4QkXOEkvcZVx0Uos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:d2:69:ec:9d:ed:60:ee:f6:9e:28:30:fc:91:cd:ac:e5:45:
         f7:a0:52:9f:33:4b:6a:d5:36:8e:bd:ad:6f:29:bb:36:8f:7d:
         ef:e5:10:08:ca:77:b3:96:4b:88:bb:4f:cb:96:49:0c:81:bf:
         02:28:74:0e:7c:63:50:f1:fd:66:70:c0:d7:15:64:71:27:d0:
         08:d0:4a:d6:65:95:e7:45:7b:97:62:86:b6:b3:22:86:91:9d:
         26:5e:b7:3d:d0:6e:cd:29:af:5e:5a:34:be:d6:04:6a:0b:5e:
         da:b5:22:7d:9c:b8:8f:d2:37:e7:19:2f:a1:e0:ff:da:c0:96:
         d5:85:73:90:34:8b:81:a6:05:39:68:82:25:18:a9:91:c5:d7:
         33:b0:d2:32:10:b9:95:ee:c0:1d:52:27:05:fa:f5:aa:51:22:
         36:d7:2a:33:5e:35:74:75:83:b8:19:ff:1d:e9:d6:32:b2:44:
         ac:8f:ad:dd:ed:b5:ef:10:6b:3a:db:e8:d9:8a:fd:ef:b5:d3:
         e8:35:42:a3:0d:c9:25:79:f0:5d:62:a2:51:d6:96:2e:fa:cb:
         be:ae:68:76:92:09:97:1c:bb:f9:f1:d4:99:23:0a:9c:01:d3:
         39:98:3d:6d:f6:67:e0:b4:8d:ea:6f:65:45:0e:61:11:cf:9e:
         65:b2:12:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:22:02 2025 by rpki-client