Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/PRKXkoZrFiE7VsW_pr66x8YYsVA.mft
File:                     PRKXkoZrFiE7VsW_pr66x8YYsVA.mft (raw, json)
Hash identifier:          8Yn97az2iOl2uoXzj8CCp94Rdh7CYIhgG6lzgcsgbjs=
Subject key identifier:   98:81:EE:81:F1:69:52:CD:73:61:6E:D5:B3:2D:E9:9B:9A:65:49:C9
Authority key identifier: 3D:12:97:92:86:6B:16:21:3B:56:C5:BF:A6:BE:BA:C7:C6:18:B1:50
Certificate issuer:       /CN=3d129792866b16213b56c5bfa6bebac7c618b150
Certificate serial:       0197488C1287C3F79C13F6F929738BB8054F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PRKXkoZrFiE7VsW_pr66x8YYsVA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/PRKXkoZrFiE7VsW_pr66x8YYsVA.mft
Manifest number:          110A
Signing time:             Sat 07 Jun 2025 04:00:28 +0000
Manifest this update:     Sat 07 Jun 2025 04:00:28 +0000
Manifest next update:     Sun 08 Jun 2025 04:00:28 +0000
Files and hashes:         1: PRKXkoZrFiE7VsW_pr66x8YYsVA.crl (hash: 85lmFJYZ6jvvuCeoBmKHWHxtq+olN64vFAuZoUqw8qs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/PRKXkoZrFiE7VsW_pr66x8YYsVA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/PRKXkoZrFiE7VsW_pr66x8YYsVA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PRKXkoZrFiE7VsW_pr66x8YYsVA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:8c:12:87:c3:f7:9c:13:f6:f9:29:73:8b:b8:05:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d129792866b16213b56c5bfa6bebac7c618b150
        Validity
            Not Before: Jun  7 04:00:28 2025 GMT
            Not After : Jun  8 04:00:28 2025 GMT
        Subject: CN=9881ee81f16952cd73616ed5b32de99b9a6549c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:59:e9:4f:7b:36:15:3c:a3:ad:59:0c:6f:38:
                    81:cf:30:70:b6:cc:77:dc:ee:1b:63:1c:0b:a7:32:
                    ef:3d:74:7f:27:82:df:7e:81:97:05:e6:f8:11:5e:
                    a4:81:8a:42:d6:0f:03:04:fd:9f:88:ac:82:0a:bf:
                    c2:de:c6:85:07:96:2a:e6:d6:df:46:90:b5:0b:99:
                    b8:01:69:5f:55:9b:34:fa:1b:ce:ce:de:e4:44:bb:
                    fb:92:a4:10:4e:7a:de:f3:f3:7d:b0:ac:0e:b9:41:
                    c5:45:50:9f:f6:16:bf:80:d4:3d:0a:9b:b4:a5:14:
                    36:34:1a:ac:36:96:33:82:89:10:26:4e:1f:fd:46:
                    a2:a1:a8:2f:02:02:ac:a5:4c:65:76:92:2d:56:c5:
                    cd:1c:08:47:20:db:ee:05:05:b3:84:32:f6:59:40:
                    75:58:60:d4:64:a3:77:f2:69:68:49:9c:94:9b:63:
                    14:5c:04:ce:3f:c7:6d:9e:e6:38:42:62:a9:b2:34:
                    b8:d0:a8:9e:b3:6b:72:41:8b:8c:5e:82:ed:53:5b:
                    ca:39:29:bb:c1:65:d5:6c:89:a9:9f:b7:3c:61:e7:
                    b1:98:65:e1:17:d5:0b:11:d6:d2:70:d5:27:76:9f:
                    8b:81:e7:53:9f:79:c3:97:37:54:91:95:02:4b:ba:
                    da:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:81:EE:81:F1:69:52:CD:73:61:6E:D5:B3:2D:E9:9B:9A:65:49:C9
            X509v3 Authority Key Identifier:
                keyid:3D:12:97:92:86:6B:16:21:3B:56:C5:BF:A6:BE:BA:C7:C6:18:B1:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRKXkoZrFiE7VsW_pr66x8YYsVA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/PRKXkoZrFiE7VsW_pr66x8YYsVA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/PRKXkoZrFiE7VsW_pr66x8YYsVA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:f2:f2:16:31:17:d0:49:04:de:13:13:ac:0e:2b:39:42:f7:
         0e:b8:18:89:16:a7:85:72:fe:b3:e7:80:f5:69:df:bd:b6:78:
         77:bb:94:3f:94:93:11:c6:c3:93:c5:af:f5:51:cd:96:52:ac:
         ab:80:ca:b3:e4:69:1b:d9:80:59:6b:46:02:58:3c:41:17:33:
         9e:16:cb:f4:3c:92:25:42:6d:27:24:35:c9:49:4a:ca:d8:9a:
         65:56:b0:fe:a0:73:6a:dd:8e:11:a2:0d:3b:ea:21:8c:d8:b1:
         0b:aa:e6:fd:18:c4:eb:c3:58:c6:30:69:30:d4:d3:ac:f2:e8:
         99:79:f9:20:3d:d4:c4:db:6d:75:0a:27:ed:00:31:de:11:16:
         4b:e7:ca:68:ab:34:bb:bb:c2:ad:36:61:d9:95:fe:0c:ef:c6:
         05:a9:d4:71:3d:df:fc:7d:f7:0a:32:2d:d3:c3:c5:ef:4c:5d:
         5d:73:02:7c:5a:44:99:ae:f3:b4:b9:8d:17:42:bc:78:69:df:
         e4:b5:3e:9d:2f:49:5b:77:21:35:82:f5:c0:53:67:77:17:d9:
         dc:20:6a:c9:0e:91:21:c0:c9:a4:58:f1:bd:ea:37:05:8b:f2:
         ac:cd:4c:8a:19:d8:45:a4:06:2d:37:9b:45:2d:e9:5e:7d:c0:
         e8:df:6d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:22:01 2025 by rpki-client