Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.mft
File:                     8V__itxu51EnLAqR0F3K_36NLWk.mft (raw, json)
Hash identifier:          pmZ+0wfUrPmIPwdQH8fnlgfEjOgrvYjOC9TV3nmKWr4=
Subject key identifier:   B5:F3:8D:E9:96:6D:2C:23:DE:74:9F:ED:B4:50:14:12:26:FF:3C:7C
Authority key identifier: F1:5F:FF:8A:DC:6E:E7:51:27:2C:0A:91:D0:5D:CA:FF:7E:8D:2D:69
Certificate issuer:       /CN=f15fff8adc6ee751272c0a91d05dcaff7e8d2d69
Certificate serial:       01974A7B4EAB8AEDB694170F7DA8CF5CD73D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8V__itxu51EnLAqR0F3K_36NLWk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.mft
Manifest number:          157B
Signing time:             Sat 07 Jun 2025 13:01:24 +0000
Manifest this update:     Sat 07 Jun 2025 13:01:24 +0000
Manifest next update:     Sun 08 Jun 2025 13:01:24 +0000
Files and hashes:         1: 8V__itxu51EnLAqR0F3K_36NLWk.crl (hash: oVffgGDQf7ytAdF+ReDFyDl2FGYE0iKT0CMjTIFSXC8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8V__itxu51EnLAqR0F3K_36NLWk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:7b:4e:ab:8a:ed:b6:94:17:0f:7d:a8:cf:5c:d7:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f15fff8adc6ee751272c0a91d05dcaff7e8d2d69
        Validity
            Not Before: Jun  7 13:01:24 2025 GMT
            Not After : Jun  8 13:01:24 2025 GMT
        Subject: CN=b5f38de9966d2c23de749fedb450141226ff3c7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:66:c4:44:c5:b5:41:f4:b1:3c:68:66:a3:68:
                    c6:0a:5f:89:ff:da:2c:b5:21:05:cb:71:1b:ab:fd:
                    a5:f9:d3:ee:ae:3e:dc:ef:a5:0c:0a:e7:42:81:36:
                    ca:aa:60:be:b4:d0:1b:eb:66:87:e5:d3:29:cb:2e:
                    20:d6:3c:41:fa:a1:3c:05:24:6e:d9:df:36:8e:49:
                    c5:f0:35:5c:20:37:61:0a:80:b7:59:37:7b:8a:c5:
                    19:44:3a:39:a3:36:a4:2b:9a:e9:ed:bf:86:2a:4e:
                    f9:ad:88:55:fa:bd:86:4f:24:04:2b:95:54:16:01:
                    5b:91:d0:37:d4:28:fb:9f:10:ee:1c:94:75:31:b0:
                    2f:0b:e5:56:6e:a2:0d:5b:f8:ff:47:de:d3:18:d4:
                    7b:51:e1:18:2e:0c:03:1b:a3:05:c1:28:97:b5:03:
                    63:6e:1d:de:ac:83:3b:e4:60:44:5e:bb:9b:dd:04:
                    fb:6f:42:9c:b2:78:7c:63:fc:6a:2e:9f:dc:38:06:
                    98:80:ff:2e:f1:5a:a2:a4:b9:7e:7f:91:9a:dc:c6:
                    a0:b4:9f:44:98:74:a1:42:6b:21:87:3c:02:8e:60:
                    08:41:5c:83:f7:7e:b4:9e:2d:32:70:a6:21:66:bf:
                    73:bc:f0:f2:c4:e4:f2:6a:1e:da:5b:24:6d:cf:02:
                    85:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:F3:8D:E9:96:6D:2C:23:DE:74:9F:ED:B4:50:14:12:26:FF:3C:7C
            X509v3 Authority Key Identifier:
                keyid:F1:5F:FF:8A:DC:6E:E7:51:27:2C:0A:91:D0:5D:CA:FF:7E:8D:2D:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8V__itxu51EnLAqR0F3K_36NLWk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:26:75:5e:fa:6d:02:ba:7f:e0:49:4c:48:d2:b3:bf:4a:79:
         9f:ce:74:17:33:63:19:c9:80:7b:a1:2b:b5:cf:65:f5:df:2e:
         bd:f5:28:0a:68:ea:43:90:53:b8:2b:5a:56:32:1f:91:7d:95:
         4e:79:e3:6a:54:0a:6a:11:08:a6:a3:f4:41:b2:8d:bf:bf:b0:
         60:73:0a:5f:17:c5:67:47:ce:d7:23:a0:80:20:cd:5c:43:4f:
         78:66:7b:46:e9:20:7c:71:b9:6c:14:39:c5:31:b0:18:57:00:
         9a:2f:63:e4:4c:c9:e8:10:dd:4b:1c:f6:f2:17:fb:0a:66:01:
         fd:41:0a:3a:25:6b:91:43:7f:60:bd:46:68:d7:24:5d:45:11:
         ca:d2:35:3a:1e:6b:bd:77:0c:81:b0:11:dd:bc:85:31:f3:04:
         67:82:6c:c1:ad:20:7d:66:6b:8d:83:71:16:db:cf:18:f3:b9:
         83:2e:2e:74:ea:6d:1d:db:ad:88:59:c1:58:55:bc:a9:95:93:
         c0:b4:1c:7c:1a:53:d1:16:ce:27:6e:d7:e9:ca:f2:f5:18:72:
         5d:b7:10:e6:5a:69:c8:a8:51:2e:71:ef:08:d9:6d:a5:83:a0:
         09:1e:86:a8:4d:6f:59:4b:2c:ce:a0:99:09:df:6b:9d:dc:f2:
         2d:e8:c8:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:49:19 2025 by rpki-client