Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f05f20-635f-4e25-8b6a-75b549e8bb4d/1/cmvfbfpkmeLEqt7uEGZD2gHA_4s.mft
File:                     cmvfbfpkmeLEqt7uEGZD2gHA_4s.mft (raw, json)
Hash identifier:          Jqqvw6/ZRV+AouUtc7aooJoj0jNwQZwB98i+Ej3biyQ=
Subject key identifier:   92:B4:97:F8:0A:40:F7:2D:1E:D5:41:4D:84:2E:21:F5:15:69:BC:85
Authority key identifier: 72:6B:DF:6D:FA:64:99:E2:C4:AA:DE:EE:10:66:43:DA:01:C0:FF:8B
Certificate issuer:       /CN=726bdf6dfa6499e2c4aadeee106643da01c0ff8b
Certificate serial:       019748C2FDF3939974DE0099C814E8DFD5E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cmvfbfpkmeLEqt7uEGZD2gHA_4s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/f05f20-635f-4e25-8b6a-75b549e8bb4d/1/cmvfbfpkmeLEqt7uEGZD2gHA_4s.mft
Manifest number:          0FDB
Signing time:             Sat 07 Jun 2025 05:00:27 +0000
Manifest this update:     Sat 07 Jun 2025 05:00:27 +0000
Manifest next update:     Sun 08 Jun 2025 05:00:27 +0000
Files and hashes:         1: cmvfbfpkmeLEqt7uEGZD2gHA_4s.crl (hash: Az5/hn59L062GEpg+Uj7HcM+Rmblu0gWKqxLLluInPU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/f05f20-635f-4e25-8b6a-75b549e8bb4d/1/cmvfbfpkmeLEqt7uEGZD2gHA_4s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/f05f20-635f-4e25-8b6a-75b549e8bb4d/1/cmvfbfpkmeLEqt7uEGZD2gHA_4s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cmvfbfpkmeLEqt7uEGZD2gHA_4s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 05:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:c2:fd:f3:93:99:74:de:00:99:c8:14:e8:df:d5:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=726bdf6dfa6499e2c4aadeee106643da01c0ff8b
        Validity
            Not Before: Jun  7 05:00:27 2025 GMT
            Not After : Jun  8 05:00:27 2025 GMT
        Subject: CN=92b497f80a40f72d1ed5414d842e21f51569bc85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:20:9a:c0:37:4a:22:4f:ba:05:50:64:e5:b6:
                    11:d3:0c:f5:70:2e:be:6d:b6:08:1f:f2:54:7b:91:
                    e4:97:93:93:f6:5d:16:1a:bf:c2:25:da:f1:98:74:
                    4d:7e:fc:fb:c2:5d:89:35:7c:a6:35:59:d0:8d:82:
                    6a:74:d5:36:35:e6:cc:db:6a:e1:6e:0f:76:f7:13:
                    71:05:2d:ec:68:b1:d6:97:aa:ca:96:5c:d8:cd:83:
                    34:24:a9:3f:bb:de:3b:92:d0:24:8a:f5:72:fd:73:
                    d6:6b:35:0f:7e:41:bd:78:10:41:24:11:05:ad:e0:
                    4f:7e:f4:35:6d:21:55:92:29:e5:df:c3:0c:76:20:
                    e8:c0:09:dd:45:56:f3:41:1b:c2:3b:df:4f:cb:b3:
                    9e:b6:fc:15:97:b3:94:c4:60:f5:2e:aa:fd:2c:c9:
                    f4:3a:e9:7d:81:04:69:a9:44:01:17:03:51:e0:2f:
                    c4:ed:1a:a2:52:ac:f7:61:0f:87:96:19:be:51:cc:
                    9f:60:d7:0c:60:7b:83:31:75:17:7c:51:45:66:d0:
                    9a:ee:49:3d:b2:17:15:fa:88:39:cd:1c:c2:60:3f:
                    76:91:6d:c3:a7:18:db:18:f8:2d:03:70:07:05:b6:
                    ce:a0:03:65:1c:86:a7:65:a7:4f:f9:ad:0e:62:28:
                    5d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:B4:97:F8:0A:40:F7:2D:1E:D5:41:4D:84:2E:21:F5:15:69:BC:85
            X509v3 Authority Key Identifier:
                keyid:72:6B:DF:6D:FA:64:99:E2:C4:AA:DE:EE:10:66:43:DA:01:C0:FF:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cmvfbfpkmeLEqt7uEGZD2gHA_4s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f05f20-635f-4e25-8b6a-75b549e8bb4d/1/cmvfbfpkmeLEqt7uEGZD2gHA_4s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f05f20-635f-4e25-8b6a-75b549e8bb4d/1/cmvfbfpkmeLEqt7uEGZD2gHA_4s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:72:60:63:ec:d7:85:d6:d0:4c:0f:92:4a:e6:19:23:b4:90:
         18:24:46:4a:d7:4d:3e:6e:01:48:0b:2a:5d:d8:bb:38:77:f2:
         10:40:96:75:da:d0:e1:9e:4e:02:32:4a:c1:16:d4:a7:cb:11:
         39:59:e5:60:25:cc:fb:1b:c1:10:d4:dd:f0:b8:aa:01:6e:f2:
         81:5a:99:cc:83:fd:a1:ae:51:ca:43:69:db:a6:ac:7c:05:41:
         a2:be:3c:f4:99:48:42:55:e6:91:58:e0:0e:b6:d4:9c:99:23:
         45:8f:9e:56:94:be:4d:b7:75:f2:c4:8a:6f:f3:01:fd:86:a2:
         5a:e1:8c:b4:ac:12:12:c5:f0:64:e7:3d:ab:98:27:87:c6:06:
         19:34:1a:c9:34:24:a8:c1:c0:43:ef:13:ee:dc:cf:26:eb:de:
         92:4b:e7:4e:7c:fc:84:4d:ea:76:69:09:e3:32:75:20:e0:9d:
         ee:c6:21:69:64:b2:8a:33:f1:d9:b4:9b:d9:33:53:15:19:1c:
         b2:5a:3c:e8:18:e3:bd:ee:04:0d:60:e7:6f:fe:71:f8:9b:d6:
         d2:87:b1:7a:4e:7e:72:ca:ae:b6:68:80:81:7b:6d:b7:19:d9:
         ae:da:99:1d:77:f5:8c:bc:99:2f:23:b7:61:5c:62:5d:31:18:
         6f:d9:ea:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:29:35 2025 by rpki-client