Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/094b20-09cb-46eb-8974-4df20842e460/1/1e-BdSPHDnJw0q7lorbXJWojQiM.mft
File:                     1e-BdSPHDnJw0q7lorbXJWojQiM.mft (raw, json)
Hash identifier:          Qp4s5KgxOSxDqN/iyBZD2XGCiUXi3GqV/bxF7vDt9P0=
Subject key identifier:   92:A0:B5:43:34:F7:DD:13:EF:C5:D5:01:AB:91:23:01:09:E4:96:6D
Authority key identifier: D5:EF:81:75:23:C7:0E:72:70:D2:AE:E5:A2:B6:D7:25:6A:23:42:23
Certificate issuer:       /CN=d5ef817523c70e7270d2aee5a2b6d7256a234223
Certificate serial:       01974A43F0CC64FAAEFCAB2FBC5457BB8043
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1e-BdSPHDnJw0q7lorbXJWojQiM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/094b20-09cb-46eb-8974-4df20842e460/1/1e-BdSPHDnJw0q7lorbXJWojQiM.mft
Manifest number:          01EE
Signing time:             Sat 07 Jun 2025 12:00:55 +0000
Manifest this update:     Sat 07 Jun 2025 12:00:55 +0000
Manifest next update:     Sun 08 Jun 2025 12:00:55 +0000
Files and hashes:         1: 1e-BdSPHDnJw0q7lorbXJWojQiM.crl (hash: fI7XSbGf3anPAqwtsXv7x+XqdHcO79sWafoVZV2LcOk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/094b20-09cb-46eb-8974-4df20842e460/1/1e-BdSPHDnJw0q7lorbXJWojQiM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/094b20-09cb-46eb-8974-4df20842e460/1/1e-BdSPHDnJw0q7lorbXJWojQiM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1e-BdSPHDnJw0q7lorbXJWojQiM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:43:f0:cc:64:fa:ae:fc:ab:2f:bc:54:57:bb:80:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5ef817523c70e7270d2aee5a2b6d7256a234223
        Validity
            Not Before: Jun  7 12:00:55 2025 GMT
            Not After : Jun  8 12:00:55 2025 GMT
        Subject: CN=92a0b54334f7dd13efc5d501ab91230109e4966d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c3:ac:29:83:c2:eb:39:d7:37:48:27:63:8e:
                    20:7e:f5:6b:e1:20:80:5c:52:36:6c:58:08:57:0f:
                    59:d4:38:a7:d9:b2:30:cc:30:fc:3c:45:2e:44:4f:
                    9f:d9:cb:86:79:d5:d1:ed:ce:c0:b2:33:1a:8b:6d:
                    75:0b:6b:de:51:f7:53:08:50:a6:6d:00:36:c4:42:
                    24:53:68:47:52:dd:8e:78:10:f9:3a:64:a6:b9:8f:
                    01:78:89:c5:b7:6f:92:20:25:4a:51:28:9b:38:86:
                    84:bb:50:d7:3e:f6:05:de:2a:96:cd:a6:39:e2:f2:
                    7f:4b:4e:db:b5:65:75:cf:24:1c:6f:57:ab:de:54:
                    ea:54:b5:2c:e3:40:36:49:56:a1:6c:27:28:ba:70:
                    36:65:ef:04:bc:ad:61:68:ac:22:32:51:93:25:da:
                    4e:63:6c:4b:43:9a:72:18:69:09:e2:78:69:7e:ec:
                    08:3e:e3:19:5b:c7:d0:95:27:92:4d:ca:c1:a2:71:
                    c8:31:62:20:70:a0:f0:da:4a:41:3d:6e:1f:49:b9:
                    64:6e:cc:aa:4f:ee:3c:63:47:66:48:3f:79:f3:db:
                    5a:e7:ba:8d:58:ef:25:e9:3b:8f:bc:f8:eb:7d:32:
                    a9:a4:27:4b:80:0e:af:17:4a:56:3a:90:20:59:dc:
                    ee:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:A0:B5:43:34:F7:DD:13:EF:C5:D5:01:AB:91:23:01:09:E4:96:6D
            X509v3 Authority Key Identifier:
                keyid:D5:EF:81:75:23:C7:0E:72:70:D2:AE:E5:A2:B6:D7:25:6A:23:42:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e-BdSPHDnJw0q7lorbXJWojQiM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/094b20-09cb-46eb-8974-4df20842e460/1/1e-BdSPHDnJw0q7lorbXJWojQiM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/094b20-09cb-46eb-8974-4df20842e460/1/1e-BdSPHDnJw0q7lorbXJWojQiM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:14:2e:e7:b5:1c:e6:ef:74:3a:0a:4e:92:77:5d:6d:d2:2f:
         ba:14:8a:ee:d1:20:b0:d9:cc:f8:36:cd:ac:b9:67:a2:6c:09:
         9a:45:af:df:ee:6d:e8:2a:53:8d:8e:e9:ec:38:28:35:43:8c:
         f7:64:87:18:6b:14:e3:13:d6:78:c4:1a:dd:fa:cc:12:72:8d:
         db:31:e6:9f:17:8a:2f:3b:85:4e:29:3f:d6:48:b3:a2:cf:0e:
         fb:b3:ee:a5:88:58:d9:7e:b0:a0:8b:89:87:68:ca:5a:5b:49:
         52:33:35:f9:1c:eb:cb:26:f0:0b:99:cd:b6:15:ab:69:98:67:
         e9:b9:aa:85:86:7b:46:20:47:9b:dc:2c:c9:a3:9a:4a:6a:39:
         88:a2:5a:c4:83:59:e3:1a:9a:4c:16:34:1c:7c:b1:a6:d1:40:
         d3:ed:93:81:bf:6a:28:21:de:12:bb:49:45:0a:c0:6f:d4:97:
         d9:0f:ff:cb:c7:5a:16:30:06:c9:28:39:de:0f:8e:20:1e:95:
         82:fa:31:27:b2:a3:13:27:d2:f9:a9:cc:ff:05:cd:d3:b1:e3:
         c0:f3:be:c8:aa:f4:17:24:64:72:6c:d4:9f:b3:1e:50:a3:a2:
         03:4b:09:dd:46:f9:c6:26:02:cf:30:d8:d3:e0:ff:bd:f4:04:
         ae:14:ba:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:54:44 2025 by rpki-client