Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.mft
File:                     DR7vsZI4vpruN5lb700q_Ref8sw.mft (raw, json)
Hash identifier:          uRGJ0EJUZgVrd0JQDdYeoUqEfoi4tq+V1TceCFGzN20=
Subject key identifier:   56:9E:95:9D:5D:15:AA:72:F7:B5:29:E1:9C:AA:E9:E9:D9:3F:B5:D5
Authority key identifier: 0D:1E:EF:B1:92:38:BE:9A:EE:37:99:5B:EF:4D:2A:FD:17:9F:F2:CC
Certificate issuer:       /CN=0d1eefb19238be9aee37995bef4d2afd179ff2cc
Certificate serial:       0197488CAC1676A7A6CF07D16273699AEA25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DR7vsZI4vpruN5lb700q_Ref8sw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.mft
Manifest number:          0C20
Signing time:             Sat 07 Jun 2025 04:01:08 +0000
Manifest this update:     Sat 07 Jun 2025 04:01:08 +0000
Manifest next update:     Sun 08 Jun 2025 04:01:08 +0000
Files and hashes:         1: DR7vsZI4vpruN5lb700q_Ref8sw.crl (hash: 2WmPSXvY95R93Hw3ApOs853nYtIDAhgj4Z4pcTzdvhM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DR7vsZI4vpruN5lb700q_Ref8sw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 04:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:8c:ac:16:76:a7:a6:cf:07:d1:62:73:69:9a:ea:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d1eefb19238be9aee37995bef4d2afd179ff2cc
        Validity
            Not Before: Jun  7 04:01:08 2025 GMT
            Not After : Jun  8 04:01:08 2025 GMT
        Subject: CN=569e959d5d15aa72f7b529e19caae9e9d93fb5d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:9b:fc:7b:6f:78:75:5e:65:0a:be:2b:ad:6e:
                    e6:17:4b:09:6e:05:fa:df:9f:9d:de:5f:62:8c:eb:
                    a4:c6:63:20:5a:46:3a:68:5b:6a:09:8b:00:95:b6:
                    ea:53:7c:84:aa:a1:a6:f5:73:b5:79:d4:d7:8e:03:
                    2b:64:95:86:84:46:3e:0e:38:35:20:b1:8a:87:bd:
                    96:6d:cf:02:6b:13:34:81:a3:dd:6e:6f:a3:6c:fc:
                    e4:e6:57:ce:95:98:7a:6b:a1:18:d9:c0:86:70:0c:
                    e1:2c:43:c9:ec:a9:8e:a8:1f:52:19:43:45:f0:f4:
                    a5:e1:f4:a4:36:cd:9c:0f:4e:9a:c7:77:74:56:6b:
                    a7:1e:df:be:16:8c:a7:47:2f:40:d1:73:60:bc:70:
                    e3:83:38:7a:1c:a0:58:d3:fd:9f:db:95:21:d2:30:
                    23:f4:73:62:fe:f5:17:f7:0f:2c:d6:76:13:51:26:
                    b5:35:b4:06:61:eb:c1:4c:ff:b0:4b:a9:a6:1c:97:
                    e1:4e:6c:64:fc:b6:b1:28:6f:8f:e4:00:37:45:5b:
                    fb:c0:07:50:b2:54:d9:8b:ff:b7:20:07:ab:46:dc:
                    da:43:2f:3a:db:4f:a5:59:26:25:ad:1a:75:41:06:
                    bc:2e:c0:64:dd:4e:67:2a:bd:31:84:9f:65:5d:c5:
                    75:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:9E:95:9D:5D:15:AA:72:F7:B5:29:E1:9C:AA:E9:E9:D9:3F:B5:D5
            X509v3 Authority Key Identifier:
                keyid:0D:1E:EF:B1:92:38:BE:9A:EE:37:99:5B:EF:4D:2A:FD:17:9F:F2:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DR7vsZI4vpruN5lb700q_Ref8sw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:f3:38:48:bc:4f:36:48:28:cc:53:ba:7e:a0:58:b3:57:1d:
         31:8b:1c:8e:d5:ea:c9:81:3d:0c:e0:8d:06:b9:b8:8d:e6:13:
         7c:c4:ac:2a:84:a0:48:bc:ca:7d:7d:c5:ad:10:ce:30:b6:f4:
         57:ca:b1:3d:47:fc:3a:cd:f3:7e:da:99:ae:95:1c:fe:a4:e5:
         99:a8:e3:da:14:fb:c6:02:f3:c1:42:a8:a3:1c:22:d8:6e:d3:
         ae:c1:36:ed:07:d1:ce:16:18:3d:f7:2e:55:9f:a7:d2:0c:42:
         91:c0:11:02:5b:db:4f:80:5c:d3:71:ae:06:fb:ca:22:8c:c5:
         00:e1:16:3f:87:56:84:81:16:b4:95:ef:51:4f:5e:a4:59:34:
         6c:b6:57:08:37:08:b5:83:d8:a1:9f:6f:f9:28:e2:46:ea:72:
         ed:9c:b9:ef:7f:f5:99:0d:3f:a3:fb:cc:fe:0b:fb:41:cf:7a:
         fb:5c:32:8d:66:76:ec:b7:00:f5:4a:65:23:9b:41:2d:cf:e2:
         98:28:36:b8:16:c4:52:01:96:a4:1a:b4:4d:a6:d9:a3:d1:b8:
         51:89:cf:f9:a2:3d:78:42:f0:32:62:07:5a:e6:8c:fc:e6:15:
         51:c8:fe:3b:fe:af:1e:b6:99:4c:4e:a7:85:ba:34:27:1c:01:
         9b:d9:1e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:48:45 2025 by rpki-client