Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft
File:                     cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft (raw, json)
Hash identifier:          rzWtT6AWZTB9M0q6Z9DJhY7O/Oufs8MCMBR18ILTMf0=
Subject key identifier:   EE:D9:6E:08:87:67:3A:B7:55:91:50:79:5B:17:8C:C5:F7:E5:0E:74
Authority key identifier: 72:E5:88:DA:4A:6C:F0:41:3F:FB:30:16:BE:46:78:EC:99:A9:8D:F9
Certificate issuer:       /CN=72e588da4a6cf0413ffb3016be4678ec99a98df9
Certificate serial:       019749314CE04E105C00E027B9C77CA535F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cuWI2kps8EE_-zAWvkZ47Jmpjfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft
Manifest number:          064D
Signing time:             Sat 07 Jun 2025 07:00:56 +0000
Manifest this update:     Sat 07 Jun 2025 07:00:56 +0000
Manifest next update:     Sun 08 Jun 2025 07:00:56 +0000
Files and hashes:         1: cuWI2kps8EE_-zAWvkZ47Jmpjfk.crl (hash: YN++yQK+nw4c7MXnSoMXiQ0LXKagYo/xepwz94pSx0U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cuWI2kps8EE_-zAWvkZ47Jmpjfk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:31:4c:e0:4e:10:5c:00:e0:27:b9:c7:7c:a5:35:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72e588da4a6cf0413ffb3016be4678ec99a98df9
        Validity
            Not Before: Jun  7 07:00:56 2025 GMT
            Not After : Jun  8 07:00:56 2025 GMT
        Subject: CN=eed96e0887673ab7559150795b178cc5f7e50e74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c9:75:02:8e:6e:6f:17:c9:db:89:b8:cb:b4:
                    5d:10:b7:fd:38:50:2a:f0:eb:4b:1a:06:76:7f:1f:
                    cb:28:1b:10:0d:96:1d:bc:f4:81:bd:a1:38:23:9b:
                    ad:bb:92:47:cc:dd:f1:fb:92:98:32:50:ef:06:92:
                    ed:25:ea:af:23:4d:19:e1:b3:c1:35:f2:e3:63:f1:
                    6d:fa:28:af:15:2f:58:d4:30:10:2f:fb:27:3b:9a:
                    05:48:93:9d:b8:0c:a2:41:e4:29:80:33:bb:06:5e:
                    c8:0a:22:ca:b8:12:ff:80:fc:14:9a:bb:05:22:8e:
                    72:1f:31:81:47:0e:df:ee:15:35:cf:a9:9e:10:50:
                    2e:6b:8d:13:7f:87:c2:b7:14:fd:3c:48:a7:b3:e9:
                    92:3b:79:1d:1a:e2:dd:02:cc:77:1f:cb:84:66:23:
                    75:97:b6:f1:7b:10:14:cc:bd:8c:8e:a6:9d:2f:98:
                    ca:e9:30:85:db:90:43:e4:12:21:6d:f7:84:f9:0c:
                    12:1e:2c:24:14:03:31:54:ed:4c:1d:fc:f6:71:ab:
                    43:57:4f:f9:92:8b:08:30:55:7e:38:05:57:5c:fb:
                    d1:57:2e:21:3a:9d:ed:10:4a:8c:4b:e7:a9:cd:bf:
                    58:c7:ec:8f:86:e6:e9:59:59:20:50:93:3d:77:54:
                    81:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:D9:6E:08:87:67:3A:B7:55:91:50:79:5B:17:8C:C5:F7:E5:0E:74
            X509v3 Authority Key Identifier:
                keyid:72:E5:88:DA:4A:6C:F0:41:3F:FB:30:16:BE:46:78:EC:99:A9:8D:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuWI2kps8EE_-zAWvkZ47Jmpjfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:32:b2:62:59:c2:df:2b:07:1d:5b:bd:72:96:5a:ce:6c:d0:
         c5:67:a9:f1:57:04:d5:e6:c2:6d:4c:d2:7b:01:2e:49:93:7f:
         64:10:22:df:b5:93:fd:1e:41:19:11:a4:18:ce:f5:fd:6c:87:
         0c:f1:52:b5:ca:47:9c:6e:cc:7a:04:48:64:92:ae:27:0b:1f:
         ec:4e:e1:6b:55:32:b4:0f:72:5c:cf:3f:78:b6:50:9c:4d:af:
         82:d2:34:0c:43:e5:f9:55:58:49:63:17:1b:9e:0b:bf:c5:f0:
         37:94:cb:17:6c:ed:2e:b8:99:fd:82:8d:2b:0f:52:bd:82:cc:
         97:6d:7e:b1:b1:6d:75:c9:7c:57:cd:62:92:ae:68:96:6a:52:
         1b:65:53:53:24:27:13:15:55:e1:6b:16:56:37:25:32:0d:45:
         39:c8:7d:fa:57:bc:e0:15:8b:66:17:62:cb:be:21:33:f0:c3:
         0e:97:15:40:de:bc:12:35:c3:3f:0c:8d:42:46:72:62:dd:15:
         d4:53:cc:a4:f4:33:37:08:79:20:5f:5d:8e:d7:80:6a:fa:fd:
         a5:77:46:6b:57:75:40:42:a0:13:09:e9:d6:55:a5:fe:2e:f9:
         62:6f:ff:11:38:51:71:8d:f9:25:13:e1:e2:f6:4a:60:1f:2b:
         79:15:49:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:31:05 2025 by rpki-client