Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/e2b95d-0b26-402d-96ec-68691dabbdf3/1/fIIwKK7_xZmu_6XeW5DMrTNJfbk.mft
File:                     fIIwKK7_xZmu_6XeW5DMrTNJfbk.mft (raw, json)
Hash identifier:          l0lQ5HImllauOmOgEivpqGReCoejl3XVxiCciQjXvfM=
Subject key identifier:   10:40:B9:58:43:A5:59:29:89:E8:9B:A6:55:12:EA:F8:41:68:7C:6C
Authority key identifier: 7C:82:30:28:AE:FF:C5:99:AE:FF:A5:DE:5B:90:CC:AD:33:49:7D:B9
Certificate issuer:       /CN=7c823028aeffc599aeffa5de5b90ccad33497db9
Certificate serial:       0197488BFD01D4460BA3FBE3E20AD3F3360D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fIIwKK7_xZmu_6XeW5DMrTNJfbk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/e2b95d-0b26-402d-96ec-68691dabbdf3/1/fIIwKK7_xZmu_6XeW5DMrTNJfbk.mft
Manifest number:          050B
Signing time:             Sat 07 Jun 2025 04:00:23 +0000
Manifest this update:     Sat 07 Jun 2025 04:00:23 +0000
Manifest next update:     Sun 08 Jun 2025 04:00:23 +0000
Files and hashes:         1: fIIwKK7_xZmu_6XeW5DMrTNJfbk.crl (hash: XUpD5sjOuJkh9tMYHWl+Nf+rB14VyApmWhk8sjL1kr0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/e2b95d-0b26-402d-96ec-68691dabbdf3/1/fIIwKK7_xZmu_6XeW5DMrTNJfbk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/e2b95d-0b26-402d-96ec-68691dabbdf3/1/fIIwKK7_xZmu_6XeW5DMrTNJfbk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fIIwKK7_xZmu_6XeW5DMrTNJfbk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:8b:fd:01:d4:46:0b:a3:fb:e3:e2:0a:d3:f3:36:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c823028aeffc599aeffa5de5b90ccad33497db9
        Validity
            Not Before: Jun  7 04:00:23 2025 GMT
            Not After : Jun  8 04:00:23 2025 GMT
        Subject: CN=1040b95843a5592989e89ba65512eaf841687c6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2a:45:e7:d6:f9:66:2f:3d:d0:16:19:fb:18:
                    43:d2:76:24:70:7c:a7:5a:21:32:9e:27:d0:6e:52:
                    5c:a0:0a:67:77:41:23:5a:58:55:32:c6:86:72:ee:
                    13:6e:39:e7:df:19:c8:c7:bb:26:14:be:0b:3e:83:
                    fa:83:68:6b:2e:78:86:ab:5e:52:23:f4:8d:62:25:
                    ae:4e:9e:b4:b7:ea:a3:91:41:a1:22:f4:f4:06:d0:
                    45:81:64:1c:2c:fb:a9:61:10:d8:ff:95:33:e8:de:
                    81:c2:43:0c:1f:47:6a:23:e9:16:c2:0e:89:7d:12:
                    16:79:c9:0b:3b:51:d2:a4:7d:80:aa:fa:3d:47:0e:
                    fb:70:f4:cd:42:16:46:e4:f3:80:9f:16:3f:4b:63:
                    a0:1b:f7:de:63:93:bc:5d:90:9c:bf:2c:f2:77:5f:
                    3c:5f:3e:54:47:93:68:9e:74:45:a5:72:5b:e0:60:
                    64:d6:6e:15:88:b8:70:94:f7:32:9e:4c:85:e9:bd:
                    ec:30:b2:76:91:85:03:5a:26:04:27:d6:25:de:fa:
                    f9:f0:4d:b9:df:15:0a:09:06:d9:d9:66:6f:8e:49:
                    26:1d:67:ea:b3:75:47:d6:68:60:f2:09:4d:15:e4:
                    13:f5:86:91:f0:10:1f:af:39:3f:e5:5e:99:8c:14:
                    4d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:40:B9:58:43:A5:59:29:89:E8:9B:A6:55:12:EA:F8:41:68:7C:6C
            X509v3 Authority Key Identifier:
                keyid:7C:82:30:28:AE:FF:C5:99:AE:FF:A5:DE:5B:90:CC:AD:33:49:7D:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fIIwKK7_xZmu_6XeW5DMrTNJfbk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e2b95d-0b26-402d-96ec-68691dabbdf3/1/fIIwKK7_xZmu_6XeW5DMrTNJfbk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e2b95d-0b26-402d-96ec-68691dabbdf3/1/fIIwKK7_xZmu_6XeW5DMrTNJfbk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:9e:e0:50:12:81:ba:b9:2f:45:43:c9:91:bf:fe:b6:fa:60:
         c4:4a:b8:14:7e:8c:06:2b:67:e7:89:77:8f:fb:5a:85:3e:be:
         51:58:5a:2b:66:92:a6:02:b6:f9:ce:b3:7b:29:08:3c:b3:00:
         d9:ec:c7:e6:d5:e8:a1:14:f4:2a:da:2d:d7:66:80:63:42:89:
         2e:38:b3:b8:52:cc:bd:b3:1b:d5:b3:ba:4c:95:39:69:e6:47:
         33:82:1e:e4:9a:8b:c7:1b:fc:49:ac:52:00:63:ef:15:e5:21:
         71:5b:2a:3e:6f:7e:ff:9d:6c:f4:87:6f:32:bf:67:84:3e:a1:
         0f:6c:55:0e:18:bf:20:87:96:24:cd:58:b3:ad:6e:f7:cf:bc:
         6e:dd:20:ac:45:d2:31:2b:61:80:5c:fe:76:11:bf:e3:4c:29:
         35:ee:07:57:1a:eb:fe:2e:68:34:eb:d8:5d:51:53:a2:d5:13:
         9d:c8:89:3d:8c:00:52:41:46:fe:d9:09:1e:cd:a8:7a:12:6f:
         0d:24:99:f0:8b:ec:c9:a4:ef:1a:34:92:78:2c:3e:75:69:74:
         54:21:50:b8:2a:17:50:ca:cc:cb:ee:8c:6a:36:1f:b8:7e:47:
         70:7a:c2:fd:fe:b2:4b:8d:2a:38:9e:8e:23:9b:db:f6:d3:86:
         78:dd:59:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:10:09 2025 by rpki-client