Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.mft
File:                     x87XolsQkPDT8-uXyBSrL_fb_DY.mft (raw, json)
Hash identifier:          uV1hazcy2aT3vpmhYrYkEPRY8xd6IXkUb59GjzIdbDE=
Subject key identifier:   EC:3D:40:F6:4E:13:75:AB:63:26:5B:8B:38:9D:66:C6:75:4F:69:0F
Authority key identifier: C7:CE:D7:A2:5B:10:90:F0:D3:F3:EB:97:C8:14:AB:2F:F7:DB:FC:36
Certificate issuer:       /CN=c7ced7a25b1090f0d3f3eb97c814ab2ff7dbfc36
Certificate serial:       019750EAB572C6430D1B7E256141C45F95AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x87XolsQkPDT8-uXyBSrL_fb_DY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.mft
Manifest number:          08F1
Signing time:             Sun 08 Jun 2025 19:00:48 +0000
Manifest this update:     Sun 08 Jun 2025 19:00:48 +0000
Manifest next update:     Mon 09 Jun 2025 19:00:48 +0000
Files and hashes:         1: x87XolsQkPDT8-uXyBSrL_fb_DY.crl (hash: fCf5zaFkgRmS7pS8lnpq/i6NOluS5LIJ5mwWubLwopo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x87XolsQkPDT8-uXyBSrL_fb_DY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 19:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:50:ea:b5:72:c6:43:0d:1b:7e:25:61:41:c4:5f:95:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7ced7a25b1090f0d3f3eb97c814ab2ff7dbfc36
        Validity
            Not Before: Jun  8 19:00:48 2025 GMT
            Not After : Jun  9 19:00:48 2025 GMT
        Subject: CN=ec3d40f64e1375ab63265b8b389d66c6754f690f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d2:75:79:d7:f8:e4:eb:05:fd:d1:df:26:47:
                    83:37:6b:22:d7:b5:a9:69:ff:cc:be:e3:e9:cc:4c:
                    8f:bb:e1:07:e3:23:c1:82:65:27:3e:84:74:dd:52:
                    b2:d4:81:e2:4a:f5:a5:4b:16:98:86:6e:3b:aa:26:
                    17:45:05:59:f9:82:d2:30:e3:dd:a3:e7:0c:9b:57:
                    65:d4:40:ee:bc:c7:ed:61:c9:71:5a:52:f4:06:cb:
                    97:77:70:27:f4:fa:c5:da:fc:a6:87:20:46:00:29:
                    55:4f:1e:0c:53:02:a5:cd:4c:ad:c7:44:47:d3:b5:
                    8d:5e:25:70:85:9e:6e:7f:f1:d6:4f:5d:e8:a2:1c:
                    8e:7a:70:97:56:5f:84:cb:eb:5a:0b:82:f8:f0:5e:
                    32:ef:52:19:8a:ee:89:51:26:e1:78:6e:32:9b:fe:
                    4c:2b:95:78:83:38:7d:df:4a:f1:28:46:5d:48:d9:
                    e1:b0:5d:ac:a3:f4:01:4b:5b:3e:fb:4a:72:a2:ca:
                    b1:24:a8:e9:b7:01:0f:66:ab:15:26:10:f1:1d:3c:
                    ec:2b:ba:52:ba:6e:ff:ee:0e:84:7c:44:8a:8a:4a:
                    e7:92:db:0c:35:d0:9c:75:38:7f:d4:d2:c4:0f:7f:
                    a1:d2:1f:f3:95:d7:f4:d9:9d:e0:ca:ff:b9:c2:3c:
                    82:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:3D:40:F6:4E:13:75:AB:63:26:5B:8B:38:9D:66:C6:75:4F:69:0F
            X509v3 Authority Key Identifier:
                keyid:C7:CE:D7:A2:5B:10:90:F0:D3:F3:EB:97:C8:14:AB:2F:F7:DB:FC:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x87XolsQkPDT8-uXyBSrL_fb_DY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:9b:8c:62:45:98:f3:0f:02:ff:28:27:a0:b0:65:e7:01:39:
         72:61:94:3e:7f:fc:38:bf:2c:e7:d9:c6:02:d9:c2:5b:be:f9:
         71:7a:3f:38:c0:93:b0:e3:79:5c:82:fb:aa:b0:dc:de:fe:9c:
         6e:99:7e:9d:88:ab:21:d8:94:9e:c9:5e:ff:04:e1:cf:08:f2:
         f3:9e:24:3e:dd:c7:cc:cd:7c:c8:56:cf:bb:ff:d5:90:38:67:
         6f:fb:8a:33:a8:1e:0d:5c:e7:62:09:41:51:46:1d:f1:9e:fd:
         f4:02:82:47:eb:bc:0d:1d:ef:7a:f9:2c:f8:11:ff:f9:28:1a:
         2a:fc:33:27:50:b2:d2:e3:fc:35:12:51:99:79:40:5e:f0:df:
         39:83:7b:6b:d2:54:9d:50:7d:49:d3:e7:84:f2:ce:10:14:06:
         9e:2a:3b:9d:de:e5:e0:bf:82:6f:67:65:b3:aa:88:6a:e7:3c:
         f3:f5:44:f4:77:82:e5:7d:49:59:ab:4a:ac:3f:5c:f9:0c:ef:
         49:e3:04:4e:1e:d2:26:b7:18:d0:00:2e:00:49:e5:a9:d6:0b:
         ff:4c:57:ef:2d:1d:13:41:15:8a:bd:8b:93:74:9f:1a:0f:f0:
         22:fc:f2:c6:4b:7b:57:bc:9f:fd:a6:72:6e:30:ad:5c:ce:e3:
         3c:7a:5a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:19:53 2025 by rpki-client