Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/53f263-cf40-4dc5-8865-7dff48c11db6/1/JfpfxGJ07c3lzc6wqUjbEg4zkhk.mft
File:                     JfpfxGJ07c3lzc6wqUjbEg4zkhk.mft (raw, json)
Hash identifier:          PkPk8Qnojt9z4tykL7hSQeW14HP5PdAOURpuNOPOYWM=
Subject key identifier:   6D:BC:19:73:C4:21:50:89:BD:E1:6B:A7:D2:0B:C6:D4:F8:10:C7:29
Authority key identifier: 25:FA:5F:C4:62:74:ED:CD:E5:CD:CE:B0:A9:48:DB:12:0E:33:92:19
Certificate issuer:       /CN=25fa5fc46274edcde5cdceb0a948db120e339219
Certificate serial:       019749316799C8EC89EF71B6B58E54D9868A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JfpfxGJ07c3lzc6wqUjbEg4zkhk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/53f263-cf40-4dc5-8865-7dff48c11db6/1/JfpfxGJ07c3lzc6wqUjbEg4zkhk.mft
Manifest number:          51
Signing time:             Sat 07 Jun 2025 07:01:03 +0000
Manifest this update:     Sat 07 Jun 2025 07:01:03 +0000
Manifest next update:     Sun 08 Jun 2025 07:01:03 +0000
Files and hashes:         1: JfpfxGJ07c3lzc6wqUjbEg4zkhk.crl (hash: 55RPd25XZnOiqKJlD8GXPlCbQricwjOKMRZxIS/Jqok=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/53f263-cf40-4dc5-8865-7dff48c11db6/1/JfpfxGJ07c3lzc6wqUjbEg4zkhk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/53f263-cf40-4dc5-8865-7dff48c11db6/1/JfpfxGJ07c3lzc6wqUjbEg4zkhk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JfpfxGJ07c3lzc6wqUjbEg4zkhk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 07:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:31:67:99:c8:ec:89:ef:71:b6:b5:8e:54:d9:86:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25fa5fc46274edcde5cdceb0a948db120e339219
        Validity
            Not Before: Jun  7 07:01:03 2025 GMT
            Not After : Jun  8 07:01:03 2025 GMT
        Subject: CN=6dbc1973c4215089bde16ba7d20bc6d4f810c729
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:83:2f:79:33:8b:9e:ae:93:76:71:1c:e8:02:
                    2c:4d:4d:48:3d:41:aa:07:e0:ab:8f:7d:0f:28:f5:
                    3d:6b:5b:42:ff:53:f7:6e:82:85:d7:fc:8d:b4:70:
                    f0:28:89:3c:18:b1:65:5b:f6:f9:52:a8:17:fa:95:
                    db:bf:0c:70:00:c6:09:64:93:2f:4f:99:e0:50:5a:
                    1f:7f:0f:29:0b:b9:36:52:82:3e:a7:40:eb:5d:01:
                    b7:b2:57:97:a2:0f:ea:60:44:79:7a:0f:b7:d0:ae:
                    89:e3:74:72:9e:d4:c9:19:f5:a4:40:17:8e:19:82:
                    f6:11:4b:d2:55:fa:63:a0:a9:8f:f3:6c:fa:04:37:
                    de:1f:1d:f1:9a:c8:fb:f7:00:c5:70:af:d8:50:ba:
                    74:46:22:60:72:22:4c:df:4f:c3:63:56:bf:ca:b5:
                    2d:87:f5:96:cc:d3:a4:9f:b4:72:26:f0:f4:94:1b:
                    a5:06:69:e6:5e:cc:05:4a:b9:e6:30:45:fc:43:cc:
                    5e:d8:08:b3:99:91:9e:fa:0c:95:e2:ba:95:37:a7:
                    21:57:e4:4b:a3:03:d8:63:38:22:db:9a:53:77:ff:
                    97:4e:81:7d:09:53:e2:01:50:3e:3b:a6:71:00:27:
                    63:32:12:c4:1a:8a:39:36:61:ba:e5:ce:93:b9:87:
                    93:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:BC:19:73:C4:21:50:89:BD:E1:6B:A7:D2:0B:C6:D4:F8:10:C7:29
            X509v3 Authority Key Identifier:
                keyid:25:FA:5F:C4:62:74:ED:CD:E5:CD:CE:B0:A9:48:DB:12:0E:33:92:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JfpfxGJ07c3lzc6wqUjbEg4zkhk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/53f263-cf40-4dc5-8865-7dff48c11db6/1/JfpfxGJ07c3lzc6wqUjbEg4zkhk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/53f263-cf40-4dc5-8865-7dff48c11db6/1/JfpfxGJ07c3lzc6wqUjbEg4zkhk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:64:2f:63:1d:60:8e:74:3f:9b:89:53:e6:47:13:8a:ea:e7:
         ae:4c:65:d1:eb:e6:e8:e3:6c:38:ea:f1:73:73:53:eb:24:4c:
         25:9f:37:5a:be:08:d3:3d:e7:1f:64:2d:ab:b8:1f:51:83:6c:
         7b:3a:db:71:60:95:0e:f2:81:09:1c:63:9a:cc:3c:b2:ab:db:
         7a:45:ad:fa:0b:13:d8:f4:07:05:a8:cf:c8:1b:21:86:24:63:
         a3:15:24:0b:af:0b:0b:2c:0f:0e:b5:06:54:5a:32:f6:f7:22:
         3d:26:31:58:d9:04:af:0d:3f:92:08:e9:f1:37:57:0d:73:6d:
         7f:d0:cc:13:1e:ff:ac:c8:46:2f:0c:3d:c4:f5:90:52:1b:da:
         05:fa:62:ae:05:91:c6:d3:96:2e:f3:9d:dd:a4:85:dc:2f:50:
         db:75:24:be:54:ad:ab:51:b7:73:ea:7a:ed:8c:47:a9:47:ff:
         3a:62:1e:5b:ad:a7:6f:9d:1a:91:89:95:51:4e:e9:0f:dc:bb:
         9e:6c:46:3f:dd:48:16:4b:ca:ce:ce:4c:40:c8:13:06:df:1a:
         cc:36:f9:4a:c8:5e:62:6f:ec:4d:cd:f0:18:e2:7d:fb:72:7e:
         21:c1:40:bb:91:e7:47:a3:bd:8f:45:5c:c1:82:39:f7:7f:96:
         d4:42:06:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:44:20 2025 by rpki-client