Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e794b3-8a2e-4b76-8f0d-29a33902a76f/1/F3XdxSn1elmets19uiuSstN190o.mft
File:                     F3XdxSn1elmets19uiuSstN190o.mft (raw, json)
Hash identifier:          N9krsb2gUOpX08rjLM/TE+j70xyYSiowOXtFwwG0myw=
Subject key identifier:   14:F6:14:27:A0:2C:4F:0F:2D:F8:2B:07:B6:7C:79:24:38:DF:0F:C3
Authority key identifier: 17:75:DD:C5:29:F5:7A:59:9E:B6:CD:7D:BA:2B:92:B2:D3:75:F7:4A
Certificate issuer:       /CN=1775ddc529f57a599eb6cd7dba2b92b2d375f74a
Certificate serial:       01974C6969BC07FD7E80E0376CE3D959A183
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F3XdxSn1elmets19uiuSstN190o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/e794b3-8a2e-4b76-8f0d-29a33902a76f/1/F3XdxSn1elmets19uiuSstN190o.mft
Manifest number:          07B3
Signing time:             Sat 07 Jun 2025 22:01:06 +0000
Manifest this update:     Sat 07 Jun 2025 22:01:06 +0000
Manifest next update:     Sun 08 Jun 2025 22:01:06 +0000
Files and hashes:         1: F3XdxSn1elmets19uiuSstN190o.crl (hash: TpUGmoqNklv2OLSPffw31qom3kBsPipunIbGkfT5kQs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/e794b3-8a2e-4b76-8f0d-29a33902a76f/1/F3XdxSn1elmets19uiuSstN190o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/e794b3-8a2e-4b76-8f0d-29a33902a76f/1/F3XdxSn1elmets19uiuSstN190o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F3XdxSn1elmets19uiuSstN190o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:69:69:bc:07:fd:7e:80:e0:37:6c:e3:d9:59:a1:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1775ddc529f57a599eb6cd7dba2b92b2d375f74a
        Validity
            Not Before: Jun  7 22:01:06 2025 GMT
            Not After : Jun  8 22:01:06 2025 GMT
        Subject: CN=14f61427a02c4f0f2df82b07b67c792438df0fc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:68:e9:92:66:55:d1:26:34:a5:9b:9e:a1:49:
                    62:8c:6d:08:69:23:b3:63:55:19:16:d8:c4:8a:9b:
                    67:44:22:da:09:93:d8:8a:f0:19:66:38:7e:cb:c5:
                    87:c1:12:e0:56:fa:49:d7:15:e7:31:bb:67:4c:ae:
                    86:85:23:b1:f6:51:09:6b:1c:86:fd:1c:a6:b5:01:
                    27:7d:25:d6:cc:1a:2a:6e:9b:ff:5b:91:e5:46:6b:
                    83:fa:65:90:15:7d:f9:eb:39:1d:57:80:12:86:29:
                    c3:fe:5f:17:b7:ca:ac:8b:47:40:b5:45:58:ac:4e:
                    b4:cc:c9:f8:f9:d7:58:f0:b8:47:8e:de:63:ca:35:
                    b0:8a:1a:d4:b9:c2:d8:d9:56:49:4b:f4:cf:3c:e2:
                    81:78:bb:c1:86:34:8a:4a:86:18:6d:7d:3d:65:14:
                    c9:d0:8a:f6:f9:c6:60:f2:ac:0d:b7:a8:f0:4a:e6:
                    7e:de:be:ce:e1:51:e7:35:36:e3:1c:74:56:f7:24:
                    9b:5b:dc:8c:16:e5:f1:1c:c3:fd:7d:4b:e2:3b:1f:
                    4e:e7:ef:a5:84:48:81:ec:6a:ac:51:95:2f:bf:1d:
                    eb:e9:80:33:a5:d5:25:de:ee:52:93:2a:d2:44:8e:
                    c0:fb:95:64:b1:1f:6a:ea:7c:96:67:77:62:2e:60:
                    e2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:F6:14:27:A0:2C:4F:0F:2D:F8:2B:07:B6:7C:79:24:38:DF:0F:C3
            X509v3 Authority Key Identifier:
                keyid:17:75:DD:C5:29:F5:7A:59:9E:B6:CD:7D:BA:2B:92:B2:D3:75:F7:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3XdxSn1elmets19uiuSstN190o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e794b3-8a2e-4b76-8f0d-29a33902a76f/1/F3XdxSn1elmets19uiuSstN190o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e794b3-8a2e-4b76-8f0d-29a33902a76f/1/F3XdxSn1elmets19uiuSstN190o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:23:dc:b0:4f:15:3a:08:61:02:f8:a7:6d:a2:ad:5c:41:19:
         a0:a6:de:9e:37:f6:9a:96:8b:ec:d0:a4:54:3f:a0:42:d1:b6:
         50:c0:c7:b8:25:72:09:27:01:8e:6b:e0:9c:d8:31:52:c3:b7:
         95:c4:ce:bb:a7:68:64:ba:36:ce:87:19:32:56:d2:ae:25:c6:
         d7:61:9c:26:8f:e9:3f:6c:52:d0:22:20:95:99:61:d9:9a:a2:
         43:1f:fa:24:80:f1:91:1b:60:6c:ab:39:54:b4:5f:51:a2:c1:
         4b:65:25:75:93:61:89:77:d6:dc:79:83:78:53:3f:ba:1d:64:
         25:f6:48:dc:36:10:9c:d5:b6:3c:6f:4c:e3:ad:3f:c5:04:01:
         0b:b7:ae:8f:f5:d3:ea:2d:7a:89:e8:0e:3d:c8:15:d5:44:5b:
         9d:29:29:64:b7:ba:96:fa:b3:82:5a:e0:67:90:d9:c2:da:43:
         c0:e6:a1:b7:01:41:34:f7:45:41:e0:f1:37:1c:6b:05:f2:34:
         38:62:b2:70:76:0d:32:07:f7:b0:4a:a3:33:dc:34:df:04:b4:
         2d:e3:45:f7:46:11:dc:42:cd:94:96:23:fe:90:6b:de:dc:37:
         db:a5:96:71:7c:43:97:80:fa:fe:a9:c3:11:94:ad:56:62:34:
         bd:84:a3:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:20:30 2025 by rpki-client