Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.mft
File:                     MLepUygLb5mPwRxHy-kbgmM2TrA.mft (raw, json)
Hash identifier:          hq87O8P4oxmBrx9EXSnsuPOXiRouUAqXil2WuJsjQlQ=
Subject key identifier:   64:BA:B6:E1:A2:1F:F9:74:DD:47:07:79:62:5F:50:80:88:99:11:F4
Authority key identifier: 30:B7:A9:53:28:0B:6F:99:8F:C1:1C:47:CB:E9:1B:82:63:36:4E:B0
Certificate issuer:       /CN=30b7a953280b6f998fc11c47cbe91b8263364eb0
Certificate serial:       01974B1FB263AAFEFC831B836DC12227F30A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MLepUygLb5mPwRxHy-kbgmM2TrA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.mft
Manifest number:          045A
Signing time:             Sat 07 Jun 2025 16:00:57 +0000
Manifest this update:     Sat 07 Jun 2025 16:00:57 +0000
Manifest next update:     Sun 08 Jun 2025 16:00:57 +0000
Files and hashes:         1: MLepUygLb5mPwRxHy-kbgmM2TrA.crl (hash: 5/ZvTz80MQ1Rt6lG0XQEQ4S3yDmGPNGMgvtphKkjap4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MLepUygLb5mPwRxHy-kbgmM2TrA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 11:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:1f:b2:63:aa:fe:fc:83:1b:83:6d:c1:22:27:f3:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30b7a953280b6f998fc11c47cbe91b8263364eb0
        Validity
            Not Before: Jun  7 16:00:57 2025 GMT
            Not After : Jun  8 16:00:57 2025 GMT
        Subject: CN=64bab6e1a21ff974dd470779625f5080889911f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:7e:5e:9a:38:2c:c2:91:fc:4b:e1:ab:03:f5:
                    09:a9:4a:ee:08:c7:55:0e:ac:15:60:ad:d4:6e:ca:
                    a0:48:cd:0d:44:2b:de:b0:8b:df:5e:49:b8:4c:6a:
                    e2:3a:8c:b7:60:bc:4b:1d:41:76:96:3b:94:8e:38:
                    b3:ef:73:92:23:f9:9d:10:bd:d4:eb:7b:7c:77:dd:
                    73:08:bb:f2:52:b0:01:13:c1:c8:9d:88:c3:25:c4:
                    cb:fd:03:b1:32:5d:cb:e3:24:a6:e3:27:a4:ea:7f:
                    85:e3:0e:92:b8:a0:b0:b2:7d:1d:5b:8d:8d:e1:b2:
                    56:fc:e0:9d:bb:bd:70:67:e7:83:c7:e9:b6:94:bc:
                    32:ed:97:92:ce:a8:3a:80:a5:9f:42:c1:84:de:01:
                    41:61:eb:c6:44:b6:53:5d:41:3b:20:b6:90:16:10:
                    51:c3:46:2a:ea:2d:a5:08:cf:30:b4:9b:35:50:8e:
                    d7:3d:84:6d:c8:9e:45:a7:ec:c7:a3:1d:73:cc:e4:
                    c3:89:cb:25:4d:26:93:83:cb:37:b5:e6:62:fc:c5:
                    b9:00:34:2b:95:cf:97:4d:30:49:f8:0f:f9:e2:4a:
                    eb:14:99:a2:b0:44:b3:0d:26:a1:22:bb:d1:65:c2:
                    c3:df:cf:3c:05:a5:55:02:cf:f7:65:36:3b:7a:48:
                    5f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:BA:B6:E1:A2:1F:F9:74:DD:47:07:79:62:5F:50:80:88:99:11:F4
            X509v3 Authority Key Identifier:
                keyid:30:B7:A9:53:28:0B:6F:99:8F:C1:1C:47:CB:E9:1B:82:63:36:4E:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MLepUygLb5mPwRxHy-kbgmM2TrA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:7e:c5:08:1d:17:57:fb:0b:3a:11:a7:2a:29:9a:25:cf:50:
         4b:92:bc:42:1e:b2:c4:5e:03:55:fd:bd:30:d1:05:00:e4:83:
         48:7a:4f:ed:4f:c7:6b:3b:3a:c7:88:f1:66:5c:dc:07:18:52:
         90:c7:03:b2:e2:35:b0:82:d4:af:69:32:1e:6c:b7:98:af:12:
         13:e1:86:e2:10:b0:69:7a:c8:88:fb:78:cd:3c:5d:0d:ef:0d:
         52:c6:05:12:f6:bc:60:bc:24:e4:24:c9:3d:2a:fb:0a:f8:13:
         74:31:c7:35:48:0c:2c:a9:b9:27:28:f4:e9:ca:d5:89:ef:9a:
         39:50:08:bd:21:67:e9:ca:7d:bc:03:ca:49:4a:62:ab:30:0f:
         8f:4b:6f:cd:55:4e:4b:f1:04:dc:da:79:3e:e5:7d:61:85:bb:
         26:65:92:51:36:de:c5:db:16:87:bd:c1:eb:1c:88:36:56:56:
         91:78:12:3d:47:bb:75:c9:2c:5f:ff:47:48:14:35:b8:97:f0:
         bc:32:03:60:44:da:a4:fd:51:28:be:7c:aa:0f:8c:31:b4:74:
         7f:b2:0f:2a:4d:5e:31:55:67:54:16:81:1d:ff:a7:fc:cc:ee:
         4d:15:b4:dc:66:75:4a:86:79:e7:59:3f:7b:67:d9:e7:a1:bf:
         19:da:e4:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:04:25 2025 by rpki-client