Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/ebafee-8198-4d10-8936-f1a8881519b1/1/skdjJsizNc1GFWo9VpBcbp0NhbU.mft
File:                     skdjJsizNc1GFWo9VpBcbp0NhbU.mft (raw, json)
Hash identifier:          ckCHhM8jgOFm2QCt0hOKEzG7ACAupMRtKPPTzVGuSnM=
Subject key identifier:   93:AB:E0:4F:81:79:76:64:2F:75:52:C1:16:ED:70:68:D9:53:52:B0
Authority key identifier: B2:47:63:26:C8:B3:35:CD:46:15:6A:3D:56:90:5C:6E:9D:0D:85:B5
Certificate issuer:       /CN=b2476326c8b335cd46156a3d56905c6e9d0d85b5
Certificate serial:       019752D8D0E74A32DC2C426907581536064C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/skdjJsizNc1GFWo9VpBcbp0NhbU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/ebafee-8198-4d10-8936-f1a8881519b1/1/skdjJsizNc1GFWo9VpBcbp0NhbU.mft
Manifest number:          047B
Signing time:             Mon 09 Jun 2025 04:00:30 +0000
Manifest this update:     Mon 09 Jun 2025 04:00:30 +0000
Manifest next update:     Tue 10 Jun 2025 04:00:30 +0000
Files and hashes:         1: skdjJsizNc1GFWo9VpBcbp0NhbU.crl (hash: mv0ZtbjObS1pfT7l3SZ7MSDd+cFJdAhS8juejja4zrs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/ebafee-8198-4d10-8936-f1a8881519b1/1/skdjJsizNc1GFWo9VpBcbp0NhbU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/ebafee-8198-4d10-8936-f1a8881519b1/1/skdjJsizNc1GFWo9VpBcbp0NhbU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/skdjJsizNc1GFWo9VpBcbp0NhbU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 21:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:52:d8:d0:e7:4a:32:dc:2c:42:69:07:58:15:36:06:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2476326c8b335cd46156a3d56905c6e9d0d85b5
        Validity
            Not Before: Jun  9 04:00:30 2025 GMT
            Not After : Jun 10 04:00:30 2025 GMT
        Subject: CN=93abe04f817976642f7552c116ed7068d95352b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:24:b5:65:20:a9:bb:80:b8:6c:19:b9:37:37:
                    11:a0:43:75:9e:56:8f:d4:de:05:6c:45:fe:d2:13:
                    90:44:a1:8b:e0:5d:b1:57:c6:4b:e2:61:66:18:17:
                    08:79:67:65:ea:2c:c4:9a:97:56:c6:19:aa:f9:1f:
                    05:a3:34:55:58:92:54:8e:5a:39:e5:43:85:ba:16:
                    0f:9a:ed:ea:b0:61:08:90:9e:43:30:c0:08:97:37:
                    d8:72:af:d9:ea:55:e5:7a:eb:62:c3:e3:a9:c2:d9:
                    77:ae:05:5d:00:9a:95:00:36:9d:31:3e:77:d2:54:
                    7a:10:b9:e7:c1:66:7f:d4:31:9c:41:e5:2a:32:ea:
                    15:98:e0:80:ce:cc:1d:a8:f5:5a:ac:5c:83:1f:27:
                    34:20:9f:0c:51:47:70:fc:f9:71:b1:89:b7:6a:ae:
                    c8:07:5c:88:34:ff:71:ea:3e:7c:89:c0:b9:67:0e:
                    97:57:6f:03:bb:9c:25:3a:33:88:28:c9:28:00:c8:
                    8b:f4:ac:b5:e2:e2:13:b9:d9:f0:ab:3b:89:cc:90:
                    39:b3:18:15:d2:44:8a:01:90:e5:81:40:86:ff:78:
                    3f:e4:d7:12:68:65:60:5a:54:7e:11:08:36:5a:0e:
                    36:f2:41:17:f1:5d:a9:f9:f2:cb:c5:6d:b6:a0:98:
                    95:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:AB:E0:4F:81:79:76:64:2F:75:52:C1:16:ED:70:68:D9:53:52:B0
            X509v3 Authority Key Identifier:
                keyid:B2:47:63:26:C8:B3:35:CD:46:15:6A:3D:56:90:5C:6E:9D:0D:85:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skdjJsizNc1GFWo9VpBcbp0NhbU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ebafee-8198-4d10-8936-f1a8881519b1/1/skdjJsizNc1GFWo9VpBcbp0NhbU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ebafee-8198-4d10-8936-f1a8881519b1/1/skdjJsizNc1GFWo9VpBcbp0NhbU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:95:d6:2d:a3:de:c9:b9:3d:ed:9d:d7:71:ff:64:ca:3c:f8:
         46:67:77:bb:87:42:6d:10:d3:b0:7e:36:f5:43:08:e2:ac:bb:
         4c:2c:31:2e:19:a5:0f:b9:c2:73:a4:bb:60:d5:f8:b6:5d:3a:
         cb:da:3e:b0:5f:8a:29:66:2a:4c:5b:47:25:fe:45:c5:4f:68:
         3b:0a:3d:3c:e4:bd:59:06:ec:a9:3e:3a:ea:25:c6:e8:1a:0a:
         2b:5c:3e:35:b5:d5:11:1b:a9:a4:92:f5:1b:23:df:c1:f5:5d:
         aa:4d:8d:31:b7:2e:f8:93:37:9f:2e:03:2a:f8:73:4d:52:cf:
         d0:57:10:36:d5:40:c3:48:17:51:4f:fb:5c:17:42:bf:27:2d:
         87:23:03:cf:d1:be:80:6e:56:7c:a9:93:cd:90:d1:58:aa:a1:
         e0:d7:59:c9:17:47:ca:78:12:75:ad:76:58:6a:89:16:79:3d:
         06:47:14:2c:b3:69:42:55:cf:a6:5e:45:35:de:86:2a:8e:24:
         00:cc:28:21:4f:8d:ac:a6:d0:54:a2:59:6a:50:55:f6:56:ac:
         12:be:ce:f9:a6:95:31:68:8d:2d:af:dc:c8:ea:4a:5c:6f:60:
         97:92:cd:a7:b7:19:92:9a:6a:b5:af:b4:25:c4:1a:a5:dc:73:
         70:d4:3c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:50:24 2025 by rpki-client