Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.mft
File:                     f_F65Ue58mQeYFd_5VPdtvdJoIc.mft (raw, json)
Hash identifier:          DB9ma1c/Noo01jwDUqOeprvnIhsn5Q60Hfo3Ejv9O2w=
Subject key identifier:   D3:1F:21:3F:2C:B9:6B:3F:89:DE:3F:2E:F3:A4:D0:A1:0D:8F:2D:E7
Authority key identifier: 7F:F1:7A:E5:47:B9:F2:64:1E:60:57:7F:E5:53:DD:B6:F7:49:A0:87
Certificate issuer:       /CN=7ff17ae547b9f2641e60577fe553ddb6f749a087
Certificate serial:       01974A43D8C03C91C2AF0C99D85ED8669140
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f_F65Ue58mQeYFd_5VPdtvdJoIc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.mft
Manifest number:          02BB
Signing time:             Sat 07 Jun 2025 12:00:49 +0000
Manifest this update:     Sat 07 Jun 2025 12:00:49 +0000
Manifest next update:     Sun 08 Jun 2025 12:00:49 +0000
Files and hashes:         1: f_F65Ue58mQeYFd_5VPdtvdJoIc.crl (hash: VbaoSUAJhlv7rTRE/FsPb2JCeUPgni+/yD4CK8eIhxU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f_F65Ue58mQeYFd_5VPdtvdJoIc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:43:d8:c0:3c:91:c2:af:0c:99:d8:5e:d8:66:91:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ff17ae547b9f2641e60577fe553ddb6f749a087
        Validity
            Not Before: Jun  7 12:00:49 2025 GMT
            Not After : Jun  8 12:00:49 2025 GMT
        Subject: CN=d31f213f2cb96b3f89de3f2ef3a4d0a10d8f2de7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ec:16:3c:27:36:a7:fd:33:ab:5e:d0:98:7c:
                    57:e3:86:37:31:af:2f:0c:1c:62:2d:47:1b:32:d7:
                    17:15:b5:59:7e:8d:9c:3f:46:91:b6:d0:de:0b:09:
                    38:7a:5d:c5:47:ea:3b:49:55:7e:67:6b:a5:e8:74:
                    1b:d9:05:d7:40:a8:8b:29:89:56:67:c3:e7:20:e5:
                    33:9b:d1:c2:ef:3a:bd:d0:2b:30:e0:0e:e4:a8:cc:
                    d5:0f:fd:78:94:f1:69:2b:3a:a4:ac:10:98:cd:0c:
                    1d:b5:14:0e:21:ba:7e:ed:91:0f:c9:dd:fd:8c:f9:
                    05:17:72:5d:ad:d6:31:13:7a:4b:a4:a2:03:c0:ef:
                    23:c0:fb:f6:b9:50:7b:1b:b7:ff:52:a3:26:8d:d6:
                    f7:2c:f4:93:60:d7:ff:50:c6:b8:f1:2a:7e:9a:73:
                    24:73:ab:99:67:91:81:ea:23:1c:e8:c6:c1:d6:05:
                    20:0a:36:95:cb:3d:d6:b6:49:7f:74:06:8b:cf:30:
                    2f:ff:06:f9:75:7b:93:97:f4:e3:fa:c3:29:7e:f6:
                    23:fa:7b:21:f2:41:60:eb:00:e6:40:65:80:c2:4d:
                    e5:3e:1a:b6:bc:cf:2b:7b:39:ec:51:6c:9b:ee:50:
                    2f:08:ed:f0:8f:ae:6a:6f:1c:54:8f:42:c8:9c:8d:
                    29:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:1F:21:3F:2C:B9:6B:3F:89:DE:3F:2E:F3:A4:D0:A1:0D:8F:2D:E7
            X509v3 Authority Key Identifier:
                keyid:7F:F1:7A:E5:47:B9:F2:64:1E:60:57:7F:E5:53:DD:B6:F7:49:A0:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_F65Ue58mQeYFd_5VPdtvdJoIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:f4:f7:69:da:4e:e6:fb:79:c7:4d:67:48:01:ba:7e:e4:2b:
         7a:9d:f5:99:f9:59:ba:13:ff:45:25:ff:b6:46:1d:41:4f:da:
         c3:8d:a3:0c:2a:85:63:42:15:40:73:20:42:0a:16:7e:a4:41:
         04:7f:b5:ba:b2:88:73:25:ba:ae:ae:c1:01:49:cb:8b:57:02:
         61:ae:9a:74:e9:3c:f0:5c:70:38:88:18:3b:89:9b:0d:e6:42:
         e8:21:d1:c4:9c:08:56:45:12:1a:6c:3b:e9:ad:95:5d:ed:fb:
         a7:3a:c1:63:fd:f3:c9:eb:6b:12:6a:31:df:20:32:63:c9:4f:
         75:f0:df:82:ac:24:a1:57:76:a3:41:1a:db:e5:bf:03:d7:ec:
         bd:79:2e:4a:ee:39:98:82:04:32:bf:1f:c1:c2:8b:57:6c:66:
         c7:7d:5a:54:39:89:7b:ee:dc:81:26:15:27:be:d5:56:3a:f0:
         6b:40:ae:7f:13:c5:59:de:ff:ed:b0:84:7f:44:30:65:7d:77:
         e1:1b:5b:c1:95:82:b5:e7:4c:46:f7:e3:a4:90:0d:fe:83:cc:
         bf:92:11:6b:ce:2c:2b:a3:68:00:ff:10:ff:80:7d:0b:a9:87:
         e0:f5:dc:d3:8b:ab:a7:72:cb:71:14:5f:75:20:c0:e2:91:29:
         ed:8e:d5:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:37:25 2025 by rpki-client