Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft
File:                     1IdkFNyZXRTt46AaMjtiuQb4PFc.mft (raw, json)
Hash identifier:          mjcsujaDfVVaDgkDxMWp4DoegagQ1MeoA8ONiPVRS/g=
Subject key identifier:   4E:FB:6B:E5:3D:28:AD:EF:0E:06:85:82:90:D2:A1:AA:90:4E:EC:57
Authority key identifier: D4:87:64:14:DC:99:5D:14:ED:E3:A0:1A:32:3B:62:B9:06:F8:3C:57
Certificate issuer:       /CN=d4876414dc995d14ede3a01a323b62b906f83c57
Certificate serial:       019747428AB94F5A0327A290C723EDDABFAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1IdkFNyZXRTt46AaMjtiuQb4PFc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft
Manifest number:          0502
Signing time:             Fri 06 Jun 2025 22:00:32 +0000
Manifest this update:     Fri 06 Jun 2025 22:00:32 +0000
Manifest next update:     Sat 07 Jun 2025 22:00:32 +0000
Files and hashes:         1: 1IdkFNyZXRTt46AaMjtiuQb4PFc.crl (hash: OdqvPJJk6/NcgF4b0dW2wYGk67Or13EnwORd5eOlYKM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1IdkFNyZXRTt46AaMjtiuQb4PFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:42:8a:b9:4f:5a:03:27:a2:90:c7:23:ed:da:bf:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4876414dc995d14ede3a01a323b62b906f83c57
        Validity
            Not Before: Jun  6 22:00:32 2025 GMT
            Not After : Jun  7 22:00:32 2025 GMT
        Subject: CN=4efb6be53d28adef0e06858290d2a1aa904eec57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e0:d7:9d:8e:16:4f:75:23:2d:fb:a6:0b:2b:
                    8f:3d:3e:8e:fe:54:82:d6:4c:ea:46:c2:97:74:36:
                    32:d6:2c:5f:21:b9:fa:70:38:19:07:a6:80:06:a7:
                    b9:7a:e5:e0:0f:92:9b:8c:9c:cc:c4:2e:7c:c9:d5:
                    40:70:a8:a9:12:ee:dc:c1:8c:87:bf:a7:4e:18:51:
                    51:8f:a1:c1:b7:95:55:de:40:b6:64:af:01:4c:96:
                    14:58:07:45:a5:b7:28:9a:96:18:83:f6:25:13:81:
                    e3:05:ea:8e:27:5b:ce:7a:aa:df:90:5e:af:2f:f2:
                    cb:a5:db:9d:6e:fa:80:db:ea:7e:60:4b:c0:66:26:
                    bb:99:ea:1a:5f:e0:3e:72:2c:25:88:8d:f5:31:af:
                    25:0e:b1:7d:e7:0d:43:57:60:fe:59:4e:0e:6c:02:
                    41:a7:13:55:93:c0:bb:67:02:40:3f:fb:0e:af:3d:
                    9f:e9:fc:0a:7b:95:73:b5:0c:60:51:2a:9c:df:ec:
                    f1:38:b0:f5:69:72:f7:e0:8d:54:e9:4c:dd:c7:0b:
                    a2:ad:6b:27:a0:d8:69:ef:f7:55:ba:9e:71:09:31:
                    47:7a:48:f9:64:0a:f9:64:69:7f:a8:3e:7c:ca:ca:
                    29:44:3a:53:cd:de:72:2c:b6:8b:08:b2:00:8e:7f:
                    bc:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:FB:6B:E5:3D:28:AD:EF:0E:06:85:82:90:D2:A1:AA:90:4E:EC:57
            X509v3 Authority Key Identifier:
                keyid:D4:87:64:14:DC:99:5D:14:ED:E3:A0:1A:32:3B:62:B9:06:F8:3C:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IdkFNyZXRTt46AaMjtiuQb4PFc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:16:c2:eb:d0:bc:7b:fa:e7:ed:b1:c5:17:9c:64:2f:17:e9:
         4e:bf:72:1f:a7:71:c6:25:25:d4:2a:85:47:e3:6e:d2:50:f9:
         02:c0:d3:de:34:81:96:c0:c3:e6:7e:59:d0:fe:47:e3:7c:d6:
         69:64:c7:8d:47:cd:90:9c:9d:f0:03:62:76:0b:f4:39:26:bb:
         d1:5e:79:ce:dd:7c:52:52:66:12:85:30:27:eb:04:05:27:31:
         d8:f9:57:23:0c:f0:f7:a7:93:33:f6:19:05:42:7a:93:66:d1:
         e6:13:77:2c:16:0f:3e:f6:19:fa:23:a9:34:1f:55:f2:e2:18:
         0d:74:41:5b:6c:27:4c:ca:f5:9f:92:c0:50:66:02:5e:1b:ee:
         af:7b:af:38:bc:ab:65:68:81:b8:e1:37:8a:2f:87:44:95:ea:
         ec:cc:73:54:60:1c:ba:b3:05:d5:7e:79:83:86:40:c2:2d:bf:
         f5:df:b5:da:16:86:d8:f0:b9:a2:5d:55:82:58:55:6a:2d:b6:
         74:68:a5:0a:aa:12:e3:9d:31:08:94:b9:5b:df:da:76:96:85:
         a0:cd:b1:6c:ac:cd:c3:3e:7b:a0:e2:5c:c2:5f:dd:e5:56:a9:
         cf:63:50:3d:c3:42:c7:c9:8f:93:c6:49:e7:dc:73:1a:d9:50:
         90:2a:24:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:50:48 2025 by rpki-client