Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ad2273-fa5c-47d9-8c3e-8c92b380ae58/1/tme4cki-Ko4zew55BX2JQHmMd5o.mft
File:                     tme4cki-Ko4zew55BX2JQHmMd5o.mft (raw, json)
Hash identifier:          sZjkzraQB/8LfrODgNVv7C1WZtQtTfZ1h3D/eKZxP1I=
Subject key identifier:   61:C1:17:9A:05:75:2D:88:E8:A7:93:6C:1E:50:E5:31:A2:44:19:07
Authority key identifier: B6:67:B8:72:48:BE:2A:8E:33:7B:0E:79:05:7D:89:40:79:8C:77:9A
Certificate issuer:       /CN=b667b87248be2a8e337b0e79057d8940798c779a
Certificate serial:       01974742CFEAD3CA7C370F1D3D811075907B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tme4cki-Ko4zew55BX2JQHmMd5o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/ad2273-fa5c-47d9-8c3e-8c92b380ae58/1/tme4cki-Ko4zew55BX2JQHmMd5o.mft
Manifest number:          02AA
Signing time:             Fri 06 Jun 2025 22:00:50 +0000
Manifest this update:     Fri 06 Jun 2025 22:00:50 +0000
Manifest next update:     Sat 07 Jun 2025 22:00:50 +0000
Files and hashes:         1: tme4cki-Ko4zew55BX2JQHmMd5o.crl (hash: cPQG+TqjbelJKEbRP57UpnB2/s5q5Ed9JBR/Mg3nBkQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/ad2273-fa5c-47d9-8c3e-8c92b380ae58/1/tme4cki-Ko4zew55BX2JQHmMd5o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/ad2273-fa5c-47d9-8c3e-8c92b380ae58/1/tme4cki-Ko4zew55BX2JQHmMd5o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tme4cki-Ko4zew55BX2JQHmMd5o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:42:cf:ea:d3:ca:7c:37:0f:1d:3d:81:10:75:90:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b667b87248be2a8e337b0e79057d8940798c779a
        Validity
            Not Before: Jun  6 22:00:50 2025 GMT
            Not After : Jun  7 22:00:50 2025 GMT
        Subject: CN=61c1179a05752d88e8a7936c1e50e531a2441907
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:15:c6:cf:09:cc:95:58:42:38:d1:6b:42:01:
                    cc:c6:81:7f:d4:9e:93:54:56:be:41:79:81:8c:12:
                    dd:17:5a:c2:54:b5:d7:b1:44:f2:3b:e9:dc:39:b1:
                    09:1d:b3:56:22:b6:46:64:f9:0b:a7:ef:48:9e:29:
                    1a:93:21:e8:9a:f2:d4:00:a4:bd:55:ec:88:b2:a1:
                    b0:04:9b:4a:b6:ce:b8:e8:3d:11:ff:af:22:60:77:
                    d1:ad:73:3f:87:b0:98:ed:b1:06:1f:e8:67:80:0f:
                    73:37:25:5c:2b:11:e7:e5:28:b0:d1:c6:72:7a:61:
                    c5:fa:b6:bd:f4:93:91:50:72:05:45:6f:02:af:a2:
                    40:a4:02:0b:03:2b:98:a1:19:c7:a4:c6:22:8e:7d:
                    0c:52:a3:74:7d:b5:05:22:c7:49:b0:37:21:e6:65:
                    77:3c:ce:e1:80:8b:80:89:ff:6b:be:8c:94:b0:a2:
                    bf:f0:9f:fe:0f:38:9b:44:35:86:d9:22:34:8e:13:
                    6d:f0:b5:95:0c:01:26:36:6a:42:77:cd:79:5e:e5:
                    cc:33:d0:b1:3a:b0:90:62:5a:9a:21:30:57:42:98:
                    37:4e:b2:3e:eb:00:b9:d6:5d:35:a4:e4:17:b1:a9:
                    72:ab:17:af:e9:79:ad:25:24:08:e9:9a:2c:97:00:
                    32:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:C1:17:9A:05:75:2D:88:E8:A7:93:6C:1E:50:E5:31:A2:44:19:07
            X509v3 Authority Key Identifier:
                keyid:B6:67:B8:72:48:BE:2A:8E:33:7B:0E:79:05:7D:89:40:79:8C:77:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tme4cki-Ko4zew55BX2JQHmMd5o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ad2273-fa5c-47d9-8c3e-8c92b380ae58/1/tme4cki-Ko4zew55BX2JQHmMd5o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ad2273-fa5c-47d9-8c3e-8c92b380ae58/1/tme4cki-Ko4zew55BX2JQHmMd5o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:dd:0f:91:ab:43:0f:60:c5:e3:8e:59:bc:25:9a:b6:74:ab:
         2c:ca:42:43:10:e8:14:34:e2:f8:fe:8f:c8:bd:05:21:ef:a7:
         5c:ec:4a:1c:aa:b1:8b:fb:91:00:c7:6e:ad:a5:30:2c:6b:68:
         62:c6:0e:28:b8:6e:13:ac:62:90:ed:dc:74:52:31:7a:f1:03:
         28:14:f4:6e:ad:38:e8:3f:89:1a:2f:70:57:a4:de:ad:7d:35:
         65:44:3d:1b:95:e9:f0:dc:7f:99:29:03:28:f2:28:06:3f:02:
         b0:bc:c4:46:84:38:77:52:14:b1:a1:f1:47:f4:38:5b:0d:95:
         6e:a9:40:61:1b:7a:a6:fd:a8:f7:f2:24:ec:23:97:1f:e2:25:
         bb:5a:a6:69:ab:0b:32:d6:c4:61:b3:e5:dc:30:d4:cf:b2:d3:
         fa:b7:14:9c:08:cb:4a:a8:3f:41:01:09:49:9d:7c:4c:58:08:
         44:c4:bf:05:7e:1f:e9:99:19:55:26:2f:2f:82:98:6c:7b:4f:
         c6:02:ab:ef:57:f4:05:c1:f8:90:e7:84:4d:53:f7:87:4e:ec:
         11:22:d3:06:c0:92:5b:96:58:98:46:ba:97:56:60:83:b4:c1:
         30:e0:3f:cc:ec:8b:54:75:56:b2:b2:e0:72:b9:d2:75:87:06:
         93:f5:da:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:54:26 2025 by rpki-client