Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
File:                     ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft (raw, json)
Hash identifier:          7Cy6t9nlntjK2slBJsYZkpoW+73b/dKxHouo5pzA6x8=
Subject key identifier:   DF:DB:EB:51:EC:1A:CD:C4:F2:EF:70:E9:AF:14:FB:93:B0:FB:87:CC
Authority key identifier: 45:E6:98:5C:8D:AC:8C:C6:77:2B:7F:D3:9C:3A:75:64:4C:25:A2:5A
Certificate issuer:       /CN=45e6985c8dac8cc6772b7fd39c3a75644c25a25a
Certificate serial:       01974931380870413E51BC70B95274EA9699
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
Manifest number:          056F
Signing time:             Sat 07 Jun 2025 07:00:51 +0000
Manifest this update:     Sat 07 Jun 2025 07:00:51 +0000
Manifest next update:     Sun 08 Jun 2025 07:00:51 +0000
Files and hashes:         1: ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl (hash: kLM8oLKtKQrNzbE20k4foqQzE4ty93NPYbWejgQM+yk=)
                          2: iM-HUbcoELfWgS-lPVnMpAjn2tU.roa (hash: FOA+HRQLHHEYU2ci+E8byaoG9+so0NlIhMx5zOmbRnU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 07:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:31:38:08:70:41:3e:51:bc:70:b9:52:74:ea:96:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45e6985c8dac8cc6772b7fd39c3a75644c25a25a
        Validity
            Not Before: Jun  7 07:00:51 2025 GMT
            Not After : Jun  8 07:00:51 2025 GMT
        Subject: CN=dfdbeb51ec1acdc4f2ef70e9af14fb93b0fb87cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b4:aa:8d:3e:b9:9e:87:08:96:12:44:35:07:
                    d2:af:ea:c3:46:a7:00:19:c6:85:cd:a9:f0:2c:49:
                    6c:15:41:04:67:1a:4b:85:69:ce:d2:94:25:a7:ed:
                    7a:2c:cc:10:c4:16:7f:65:a6:a8:82:ba:c1:4b:01:
                    2f:13:3a:24:65:7a:12:76:1b:9b:b4:2d:1b:a1:a7:
                    95:e1:ce:34:14:0e:24:ff:4f:26:36:d9:bf:71:d9:
                    8a:b5:a5:d9:c1:ec:a7:d8:bd:7c:ad:d1:ca:74:fa:
                    a0:b6:ed:05:20:75:ea:d0:02:0e:e1:eb:3b:f0:7b:
                    6d:82:28:5f:ba:7c:73:a8:71:b6:8a:be:00:44:15:
                    3a:4c:e6:fd:ef:44:e7:7b:a2:aa:f0:22:6a:c5:82:
                    5a:96:82:84:68:c5:5f:5b:a1:3f:79:e2:54:a5:d7:
                    29:e1:ce:a9:91:f2:a5:92:be:09:8d:f0:88:e5:bb:
                    45:7f:cb:15:87:2a:25:2f:c5:7b:04:0a:89:30:f3:
                    b3:d3:a5:8a:97:27:5e:13:fd:7c:53:50:1b:36:47:
                    83:d4:04:c2:42:66:e5:c9:78:6f:e7:36:04:7f:9b:
                    b6:6f:ad:7f:aa:e8:ff:7e:93:a8:05:36:27:df:2f:
                    0d:42:6c:59:28:c6:f2:4c:8d:50:f8:50:5d:a0:b6:
                    0b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:DB:EB:51:EC:1A:CD:C4:F2:EF:70:E9:AF:14:FB:93:B0:FB:87:CC
            X509v3 Authority Key Identifier:
                keyid:45:E6:98:5C:8D:AC:8C:C6:77:2B:7F:D3:9C:3A:75:64:4C:25:A2:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:02:56:1a:fc:26:8a:77:47:b5:56:62:2b:b4:c3:38:00:69:
         6e:aa:e4:2c:00:a8:f3:5a:c1:fb:06:4d:a3:3a:3b:34:8b:f4:
         c8:85:2a:88:01:3c:78:2f:74:0b:23:cb:bb:df:d4:51:4a:04:
         8e:e7:4a:2d:4f:d6:eb:4b:6f:da:c9:b3:d1:29:e1:eb:f4:2c:
         c9:11:b7:5b:ba:f9:5a:fb:84:2d:dc:82:72:11:be:e4:64:ed:
         cc:01:90:6a:ca:92:c0:5a:4b:db:3c:72:61:b7:2e:83:33:63:
         e3:44:b3:74:2d:19:54:6b:cd:84:c1:9a:95:f9:45:49:08:aa:
         fd:30:b4:f0:a0:9c:48:af:77:1b:c4:32:3d:e0:9f:c0:73:32:
         5f:c8:c3:f6:60:0a:bd:02:ec:52:54:22:94:27:f8:dc:49:83:
         22:46:30:6f:17:cd:3b:7d:40:29:19:0d:7f:6b:cc:5a:b6:99:
         24:1d:21:a0:5a:a4:18:b4:db:84:6d:87:78:07:80:06:7a:90:
         00:b9:22:91:b0:7f:44:19:97:de:11:5a:df:e2:f1:a2:aa:f0:
         b5:77:c3:08:06:22:36:c7:f4:ff:10:35:65:a9:26:a3:9a:92:
         55:a4:36:a7:7e:8a:b3:a8:3c:b6:ad:69:3b:43:38:1c:32:54:
         37:35:c5:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:36:39 2025 by rpki-client