Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3fabae-b80e-43c6-bd1f-f7973b18090b/1/45WAim89Q2FJAcmQyc5jLhXt-gc.mft
File:                     45WAim89Q2FJAcmQyc5jLhXt-gc.mft (raw, json)
Hash identifier:          a2G43cA/XZm9hSF5Zd8w75i07b9Rg/YzTU2gwW138Fs=
Subject key identifier:   10:DD:52:65:D3:89:DE:C3:35:AB:75:35:4D:87:9E:03:03:29:1A:A4
Authority key identifier: E3:95:80:8A:6F:3D:43:61:49:01:C9:90:C9:CE:63:2E:15:ED:FA:07
Certificate issuer:       /CN=e395808a6f3d43614901c990c9ce632e15edfa07
Certificate serial:       019748C30A71325B356CE4A1707FFE6F061D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/45WAim89Q2FJAcmQyc5jLhXt-gc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/3fabae-b80e-43c6-bd1f-f7973b18090b/1/45WAim89Q2FJAcmQyc5jLhXt-gc.mft
Manifest number:          03D4
Signing time:             Sat 07 Jun 2025 05:00:31 +0000
Manifest this update:     Sat 07 Jun 2025 05:00:31 +0000
Manifest next update:     Sun 08 Jun 2025 05:00:31 +0000
Files and hashes:         1: 45WAim89Q2FJAcmQyc5jLhXt-gc.crl (hash: M5ok/NNgyy71ppZUv/1KZSeZLbUTf5AGCKSHx9bGmqw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/3fabae-b80e-43c6-bd1f-f7973b18090b/1/45WAim89Q2FJAcmQyc5jLhXt-gc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/3fabae-b80e-43c6-bd1f-f7973b18090b/1/45WAim89Q2FJAcmQyc5jLhXt-gc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/45WAim89Q2FJAcmQyc5jLhXt-gc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 05:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:c3:0a:71:32:5b:35:6c:e4:a1:70:7f:fe:6f:06:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e395808a6f3d43614901c990c9ce632e15edfa07
        Validity
            Not Before: Jun  7 05:00:31 2025 GMT
            Not After : Jun  8 05:00:31 2025 GMT
        Subject: CN=10dd5265d389dec335ab75354d879e0303291aa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f9:d3:6b:a9:eb:16:b8:80:29:01:44:82:d5:
                    ef:df:3c:8e:a6:bf:7d:f4:a9:02:07:2d:8a:7d:5d:
                    47:e6:06:a4:76:a7:69:c0:84:71:eb:f0:32:97:71:
                    45:82:70:90:53:f0:61:a0:f3:79:12:8b:c6:af:17:
                    6b:00:eb:04:49:8a:dd:9e:b7:e9:c0:6a:55:38:08:
                    8a:98:68:42:1d:2d:c4:02:f1:40:d3:fb:0d:a5:33:
                    9e:9f:cb:f6:8e:3b:4e:ff:0e:66:5c:af:ed:f4:2e:
                    30:15:d1:11:79:35:db:cd:79:c9:9a:34:1a:c7:6e:
                    41:7d:30:88:42:21:17:c5:16:0e:70:c1:3d:06:09:
                    a0:b7:2e:32:c8:9a:cc:ec:b7:43:61:c7:3e:a8:6b:
                    74:f2:6d:3c:6f:d9:4e:7d:c9:cd:81:f2:f4:a8:86:
                    60:4b:a4:41:44:30:56:8c:9a:d1:bd:6d:01:19:7c:
                    e0:85:e3:62:f5:1f:53:ec:da:37:03:38:33:19:9d:
                    af:54:3d:a4:33:af:71:36:f3:2e:0b:b3:37:6c:3c:
                    2e:19:3d:eb:f9:75:ae:08:e9:67:70:1f:14:20:58:
                    36:c3:95:02:aa:a5:23:bb:30:5a:a4:a2:4c:ff:9c:
                    0c:22:fb:48:5b:4d:f5:16:81:e6:d4:a1:52:62:f4:
                    f5:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:DD:52:65:D3:89:DE:C3:35:AB:75:35:4D:87:9E:03:03:29:1A:A4
            X509v3 Authority Key Identifier:
                keyid:E3:95:80:8A:6F:3D:43:61:49:01:C9:90:C9:CE:63:2E:15:ED:FA:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/45WAim89Q2FJAcmQyc5jLhXt-gc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3fabae-b80e-43c6-bd1f-f7973b18090b/1/45WAim89Q2FJAcmQyc5jLhXt-gc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3fabae-b80e-43c6-bd1f-f7973b18090b/1/45WAim89Q2FJAcmQyc5jLhXt-gc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:8b:c7:13:cc:88:58:a6:c2:4d:a9:e6:16:e9:a7:3f:67:54:
         c3:7c:0e:f0:40:db:37:8c:ff:39:84:4e:8e:bc:67:f1:fe:cd:
         50:16:ee:b7:8c:69:bc:7e:df:de:50:e5:f9:db:e9:28:8a:f7:
         fd:32:ab:eb:f8:e1:e2:1b:45:c3:0e:d1:a8:d1:c5:0e:6c:80:
         d6:47:e7:51:f2:45:29:a5:db:4a:7e:63:f2:51:24:3d:ee:26:
         c8:de:ae:ae:5d:d8:05:2d:49:f5:57:91:05:06:6c:a4:0a:76:
         c0:d6:89:c0:b7:60:c1:63:87:e1:a5:79:58:3b:b4:a0:ce:2c:
         c8:37:b7:5e:88:52:2c:fd:37:19:5b:ba:45:a7:53:e9:8f:65:
         83:83:55:4d:54:22:bf:24:75:3b:c9:c8:ad:5a:09:f5:24:a4:
         db:f0:53:78:c5:13:8e:c1:bc:90:d1:69:a5:cc:b3:14:45:18:
         dc:64:09:b0:25:b9:6a:3b:61:18:9e:f1:46:f3:a5:6e:2d:fe:
         9d:45:5f:d5:bf:65:4a:87:35:6e:90:39:c6:88:4c:f3:45:7e:
         4f:6e:66:fd:2e:4f:71:ba:b9:af:5d:7a:f4:f2:f9:fa:be:2f:
         ea:36:00:6c:5b:eb:96:ad:21:03:d8:00:f7:52:a3:8b:35:86:
         bb:05:95:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:51:18 2025 by rpki-client