Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/698fe8-5f69-4d37-bd58-65eb1ba6e337/1/fJ1n8CerKw_yajV1FHOa_ogDesk.mft
File:                     fJ1n8CerKw_yajV1FHOa_ogDesk.mft (raw, json)
Hash identifier:          /Vp09BnpfB6rC/mohOoO14usuromvgOFfb8KeuRrKwY=
Subject key identifier:   75:56:E1:26:FE:54:A5:06:65:C5:86:9D:D0:C5:E2:BB:0D:3C:DB:57
Authority key identifier: 7C:9D:67:F0:27:AB:2B:0F:F2:6A:35:75:14:73:9A:FE:88:03:7A:C9
Certificate issuer:       /CN=7c9d67f027ab2b0ff26a357514739afe88037ac9
Certificate serial:       01974968111B524F87157B9D13033EBABE80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fJ1n8CerKw_yajV1FHOa_ogDesk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/698fe8-5f69-4d37-bd58-65eb1ba6e337/1/fJ1n8CerKw_yajV1FHOa_ogDesk.mft
Manifest number:          1493
Signing time:             Sat 07 Jun 2025 08:00:46 +0000
Manifest this update:     Sat 07 Jun 2025 08:00:46 +0000
Manifest next update:     Sun 08 Jun 2025 08:00:46 +0000
Files and hashes:         1: fJ1n8CerKw_yajV1FHOa_ogDesk.crl (hash: Hw5l7cpRb7mVHP44vHucuVyDVvRGiG2gAn/jC+dJUWo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/698fe8-5f69-4d37-bd58-65eb1ba6e337/1/fJ1n8CerKw_yajV1FHOa_ogDesk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/698fe8-5f69-4d37-bd58-65eb1ba6e337/1/fJ1n8CerKw_yajV1FHOa_ogDesk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fJ1n8CerKw_yajV1FHOa_ogDesk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:68:11:1b:52:4f:87:15:7b:9d:13:03:3e:ba:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c9d67f027ab2b0ff26a357514739afe88037ac9
        Validity
            Not Before: Jun  7 08:00:46 2025 GMT
            Not After : Jun  8 08:00:46 2025 GMT
        Subject: CN=7556e126fe54a50665c5869dd0c5e2bb0d3cdb57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:42:65:9d:03:a6:b9:f3:59:18:08:e2:7a:c1:
                    c4:f1:f0:ee:40:fe:85:c1:ad:bd:cc:0f:83:2e:39:
                    27:5f:0c:f1:2d:17:96:cc:3a:75:79:95:2a:7e:c5:
                    2d:ec:4c:25:92:1c:97:26:14:1b:46:cd:b5:7f:15:
                    60:61:5c:4e:78:17:d8:2d:9c:21:69:4f:ae:99:5a:
                    7d:70:be:0f:67:67:5b:c0:e0:78:c7:31:7e:1c:e8:
                    3b:4e:83:90:e4:1f:ef:81:1f:f7:b5:1e:f8:61:47:
                    80:29:5c:8c:77:c9:24:7a:34:d2:41:6f:b0:f3:0a:
                    f2:d7:4d:fc:d8:55:b2:26:75:1d:f5:a5:04:75:4a:
                    6d:d0:e9:f7:03:80:97:ad:10:4c:d7:ce:1a:0a:b1:
                    9d:13:25:dc:18:76:95:22:e3:6a:a8:ba:f7:0a:b7:
                    d7:0e:bc:69:b0:cd:42:67:3d:75:68:7f:67:54:7f:
                    44:c8:69:9d:18:4b:00:df:0c:1f:0b:1e:6b:d0:60:
                    02:d6:23:46:7b:a2:73:08:53:2f:3a:2b:a0:3a:ee:
                    5e:2a:fe:8b:e0:78:9a:c6:f7:13:5b:09:9d:fd:01:
                    55:22:b4:b4:51:4d:75:aa:e2:ba:29:8f:3f:72:9f:
                    4f:31:57:d1:82:2f:cb:dc:e5:0a:50:19:58:4e:30:
                    53:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:56:E1:26:FE:54:A5:06:65:C5:86:9D:D0:C5:E2:BB:0D:3C:DB:57
            X509v3 Authority Key Identifier:
                keyid:7C:9D:67:F0:27:AB:2B:0F:F2:6A:35:75:14:73:9A:FE:88:03:7A:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fJ1n8CerKw_yajV1FHOa_ogDesk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/698fe8-5f69-4d37-bd58-65eb1ba6e337/1/fJ1n8CerKw_yajV1FHOa_ogDesk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/698fe8-5f69-4d37-bd58-65eb1ba6e337/1/fJ1n8CerKw_yajV1FHOa_ogDesk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:8f:47:88:ab:a2:00:2f:0e:c8:73:3f:7c:22:5c:de:56:51:
         5a:80:8f:82:78:e3:f1:4b:b9:81:68:40:ee:ba:85:a7:81:76:
         fd:ab:40:6c:2d:89:20:2c:ec:0f:4a:e7:dc:35:21:ad:1c:9b:
         aa:05:db:fe:f8:88:28:c6:6e:49:14:7b:db:f5:82:75:4b:c2:
         bf:0f:75:41:45:69:31:e6:22:33:74:53:fc:d8:2b:66:c8:ce:
         16:3c:38:50:0a:a3:0e:86:5e:35:5b:6b:3b:9b:91:e6:3d:58:
         15:af:c9:96:03:ca:f5:fb:9e:6b:39:50:0c:a9:08:b8:2d:e7:
         4b:df:31:61:62:f0:f7:0f:7d:87:4f:68:34:c5:90:f9:b1:2c:
         9e:f1:12:19:e9:79:09:82:b6:c4:7a:2f:ed:08:20:5c:1a:ef:
         b0:7c:a4:1d:34:0e:f3:e1:e1:32:b5:9f:ff:74:9c:23:30:52:
         f0:b9:aa:c5:87:7e:59:05:f4:c1:40:2e:31:eb:15:2f:74:50:
         5c:d7:9a:61:0d:3e:6a:a1:a5:31:c5:99:55:94:03:94:cb:ae:
         c4:4b:4b:7c:bf:32:ec:8c:fe:b1:e7:a0:b1:a0:fb:ad:92:50:
         87:0e:8e:14:92:9a:cf:04:cb:93:bc:e2:6f:e8:58:42:20:35:
         00:38:1e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:30:38 2025 by rpki-client