Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0ef678-7870-4e08-ab25-18f0b80f250d/1/3tvumMupuOYloRR7s7VRl9LQoFc.mft
File:                     3tvumMupuOYloRR7s7VRl9LQoFc.mft (raw, json)
Hash identifier:          H/U1umlknZtex71k5pBtexydsK8gD7DZygEE3+zT3sE=
Subject key identifier:   22:B5:35:14:D7:24:B6:BD:CB:C8:23:97:7C:A2:5B:F4:41:31:4A:49
Authority key identifier: DE:DB:EE:98:CB:A9:B8:E6:25:A1:14:7B:B3:B5:51:97:D2:D0:A0:57
Certificate issuer:       /CN=dedbee98cba9b8e625a1147bb3b55197d2d0a057
Certificate serial:       01975BDC6013C7A6FA2DCBFEEF4F409EA432
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3tvumMupuOYloRR7s7VRl9LQoFc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/0ef678-7870-4e08-ab25-18f0b80f250d/1/3tvumMupuOYloRR7s7VRl9LQoFc.mft
Manifest number:          05EE
Signing time:             Tue 10 Jun 2025 22:00:58 +0000
Manifest this update:     Tue 10 Jun 2025 22:00:58 +0000
Manifest next update:     Wed 11 Jun 2025 22:00:58 +0000
Files and hashes:         1: 3tvumMupuOYloRR7s7VRl9LQoFc.crl (hash: k5gnKlk3CIKYphvz0FRTvyxDkCiAlFxNMqszuih0PaM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/0ef678-7870-4e08-ab25-18f0b80f250d/1/3tvumMupuOYloRR7s7VRl9LQoFc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/0ef678-7870-4e08-ab25-18f0b80f250d/1/3tvumMupuOYloRR7s7VRl9LQoFc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3tvumMupuOYloRR7s7VRl9LQoFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 20:45:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5b:dc:60:13:c7:a6:fa:2d:cb:fe:ef:4f:40:9e:a4:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dedbee98cba9b8e625a1147bb3b55197d2d0a057
        Validity
            Not Before: Jun 10 22:00:58 2025 GMT
            Not After : Jun 11 22:00:58 2025 GMT
        Subject: CN=22b53514d724b6bdcbc823977ca25bf441314a49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6a:94:da:22:6e:32:9e:60:5f:13:e4:cf:38:
                    9d:2e:8a:49:03:c8:45:7e:20:3e:fa:4f:a7:7c:04:
                    2e:9b:3e:1d:1f:5b:80:1e:15:c9:12:75:d0:1d:0e:
                    72:2c:b9:0d:98:5d:0c:ed:64:c7:48:a2:43:38:be:
                    44:41:77:11:67:4a:3d:51:ef:79:4d:66:c3:fb:14:
                    f6:1a:11:6a:ca:c6:cf:04:3f:d1:e7:83:83:40:d1:
                    84:99:77:de:1b:b1:b3:3f:69:25:62:c3:ea:aa:24:
                    c5:95:02:25:22:5b:67:55:d9:ec:39:42:c6:2c:53:
                    ea:72:c6:28:ae:ce:b2:1a:1f:4e:f7:18:2a:57:be:
                    bf:18:a4:0d:dc:40:9b:0f:cf:de:08:86:f7:64:6c:
                    7a:fc:b4:bf:30:aa:a9:c8:4f:7d:46:12:24:f8:73:
                    d4:88:d4:bd:08:ec:a0:b6:d5:a2:f3:ed:e8:d1:13:
                    ec:d4:c8:a1:9b:ac:73:0c:f7:72:6b:2f:b5:e1:4f:
                    54:2b:e7:7d:d6:4a:78:5b:f1:eb:03:a5:51:0c:0a:
                    38:76:23:53:26:f9:5d:9c:37:76:4d:ec:93:b3:b3:
                    f6:6b:14:27:28:98:05:c4:38:b7:aa:39:97:5f:6d:
                    85:1a:b0:56:4a:c4:59:a4:e6:ab:24:94:92:7a:b0:
                    46:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:B5:35:14:D7:24:B6:BD:CB:C8:23:97:7C:A2:5B:F4:41:31:4A:49
            X509v3 Authority Key Identifier:
                keyid:DE:DB:EE:98:CB:A9:B8:E6:25:A1:14:7B:B3:B5:51:97:D2:D0:A0:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tvumMupuOYloRR7s7VRl9LQoFc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0ef678-7870-4e08-ab25-18f0b80f250d/1/3tvumMupuOYloRR7s7VRl9LQoFc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0ef678-7870-4e08-ab25-18f0b80f250d/1/3tvumMupuOYloRR7s7VRl9LQoFc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:91:10:0b:f6:ac:57:c9:90:ca:bf:f7:3f:7d:0a:a8:e7:17:
         34:2d:91:71:2e:aa:ad:a6:44:f4:a7:6c:ee:c4:c2:cf:ac:35:
         13:e2:80:da:7c:70:fc:57:91:c9:98:27:e9:ca:69:20:b9:71:
         fc:40:87:72:8c:63:33:ca:d1:5b:31:db:d3:a1:12:d0:f5:bc:
         57:b7:c7:1e:c5:e9:0a:ba:ff:0e:3d:9b:5a:93:be:24:02:20:
         13:a0:b0:cf:03:ba:8e:76:4c:99:8a:ed:89:14:3b:aa:d5:63:
         21:e2:9a:54:23:9d:36:97:ac:31:50:d8:55:fe:93:b6:45:76:
         84:46:f2:04:32:90:fe:d2:ee:a0:c8:3d:fa:c5:93:63:9a:ab:
         d4:38:02:6f:5c:ec:04:7c:38:cb:40:56:2b:b2:8d:8f:01:68:
         48:04:80:12:99:7a:f8:51:89:8f:3a:9b:0f:99:bf:a0:94:f3:
         51:2b:d7:c8:4b:38:ce:ba:a3:1a:3b:96:45:99:af:47:7e:db:
         f2:b7:db:1d:fb:2d:ce:b0:24:e2:b4:23:34:fa:11:40:2e:84:
         5e:e7:de:81:00:58:62:32:ee:8a:83:5e:48:a8:16:97:93:7a:
         e2:7c:a1:cb:f2:ef:30:77:05:27:63:7d:68:77:89:63:17:36:
         ee:63:cc:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 02:57:55 2025 by rpki-client