Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ea02b9-d2f0-4b23-8270-9de1cd1af356/1/SyfzJ-UoaJ1FDB1KY0b1QOd1QJM.mft
File:                     SyfzJ-UoaJ1FDB1KY0b1QOd1QJM.mft (raw, json)
Hash identifier:          F8N+oUmZ8KYUABpraw4wu4SCdLbrj3ZgnPMsUPe6Sfo=
Subject key identifier:   0F:B6:F7:40:0B:EF:A0:CC:FC:EB:EC:65:F1:E5:F2:D1:CD:CB:F1:14
Authority key identifier: 4B:27:F3:27:E5:28:68:9D:45:0C:1D:4A:63:46:F5:40:E7:75:40:93
Certificate issuer:       /CN=4b27f327e528689d450c1d4a6346f540e7754093
Certificate serial:       01976BBD181A094DD430EA592B30C093FB44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SyfzJ-UoaJ1FDB1KY0b1QOd1QJM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/ea02b9-d2f0-4b23-8270-9de1cd1af356/1/SyfzJ-UoaJ1FDB1KY0b1QOd1QJM.mft
Manifest number:          0EE0
Signing time:             Sat 14 Jun 2025 00:00:43 +0000
Manifest this update:     Sat 14 Jun 2025 00:00:43 +0000
Manifest next update:     Sun 15 Jun 2025 00:00:43 +0000
Files and hashes:         1: SyfzJ-UoaJ1FDB1KY0b1QOd1QJM.crl (hash: RVVDqbDXvgiReo8oKdH9oaHUeWTukCeanTdcnmO3PTA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/ea02b9-d2f0-4b23-8270-9de1cd1af356/1/SyfzJ-UoaJ1FDB1KY0b1QOd1QJM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/ea02b9-d2f0-4b23-8270-9de1cd1af356/1/SyfzJ-UoaJ1FDB1KY0b1QOd1QJM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SyfzJ-UoaJ1FDB1KY0b1QOd1QJM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 00:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:bd:18:1a:09:4d:d4:30:ea:59:2b:30:c0:93:fb:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b27f327e528689d450c1d4a6346f540e7754093
        Validity
            Not Before: Jun 14 00:00:43 2025 GMT
            Not After : Jun 15 00:00:43 2025 GMT
        Subject: CN=0fb6f7400befa0ccfcebec65f1e5f2d1cdcbf114
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d9:82:66:80:bd:29:14:7f:a4:00:87:81:aa:
                    4e:0c:d7:cc:ab:c2:a9:13:57:f6:95:bd:ff:9d:2a:
                    46:53:80:1d:6a:cc:d4:66:f6:34:f0:d6:24:27:ff:
                    7c:fb:b4:45:19:23:d8:86:5a:2a:35:dd:a2:c7:77:
                    c2:48:7c:5d:66:2a:e1:b1:05:76:a2:d8:ee:31:e6:
                    81:b8:ee:30:b6:6b:70:49:dc:f4:6a:1d:7e:db:44:
                    51:11:04:82:45:7e:9d:38:aa:1e:55:c8:ac:ee:27:
                    73:63:44:b4:28:3a:4d:d8:fa:a2:4d:3c:9f:53:6a:
                    3e:0e:67:2b:c9:bb:bd:72:47:ef:8a:d8:c3:27:dd:
                    51:d0:d7:c5:53:27:f6:d5:4f:13:d1:38:2c:46:4d:
                    d0:05:e2:b4:43:85:ad:7b:7b:ea:06:72:2d:d6:03:
                    6b:2b:48:aa:00:8b:46:35:a1:17:11:11:1a:87:66:
                    bc:33:8f:1d:09:c6:de:c8:71:ec:af:5d:74:f2:19:
                    e4:87:a5:ac:b9:14:bf:85:d1:e4:d1:5e:b9:e4:15:
                    5b:73:d3:a0:75:f8:16:47:6c:dc:9f:32:ef:5c:80:
                    ce:14:a4:f8:c8:42:ca:f9:e0:56:d2:fb:86:81:3d:
                    1f:d7:1d:bf:19:36:30:cf:f3:97:91:78:3a:d5:bf:
                    7a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:B6:F7:40:0B:EF:A0:CC:FC:EB:EC:65:F1:E5:F2:D1:CD:CB:F1:14
            X509v3 Authority Key Identifier:
                keyid:4B:27:F3:27:E5:28:68:9D:45:0C:1D:4A:63:46:F5:40:E7:75:40:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SyfzJ-UoaJ1FDB1KY0b1QOd1QJM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ea02b9-d2f0-4b23-8270-9de1cd1af356/1/SyfzJ-UoaJ1FDB1KY0b1QOd1QJM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ea02b9-d2f0-4b23-8270-9de1cd1af356/1/SyfzJ-UoaJ1FDB1KY0b1QOd1QJM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:21:97:d8:73:c2:e4:e4:cf:7b:bb:7e:44:ea:fe:e2:21:3e:
         89:01:96:a6:bb:ca:65:c0:c5:3d:78:c8:31:33:c0:b8:08:4b:
         ff:9b:97:53:9b:9e:fb:ca:cf:af:fb:99:51:27:27:ca:bd:f0:
         5c:3d:27:9a:c2:d9:e2:00:85:e1:1e:c7:db:7f:ae:cc:6a:07:
         59:d5:61:ff:e7:e1:e2:82:35:d9:69:e0:7a:87:a8:07:a0:73:
         1b:4b:ae:56:b4:3b:be:1f:bd:25:15:a6:f1:4b:e4:96:9c:91:
         13:c4:de:e5:7d:7d:13:cc:9f:5c:96:a3:2a:3f:e1:81:5e:36:
         0d:8a:d3:57:7f:11:98:13:3d:46:5b:ed:10:cc:80:9a:fe:9c:
         7f:1a:95:bd:13:a9:03:91:d0:48:18:a0:6a:fa:fe:0c:ed:d9:
         26:9e:a3:c1:57:93:e7:f7:77:ca:2d:50:5c:94:41:60:8d:31:
         41:20:23:96:aa:8e:8a:29:30:15:fd:09:60:99:77:1d:77:1f:
         29:5d:f8:f8:94:fa:11:72:dd:60:26:49:b0:75:ad:e9:27:5b:
         eb:91:c1:36:b2:78:45:47:5f:d1:f2:6c:2c:76:37:c9:b3:d0:
         9b:ea:b1:15:6b:40:9e:e9:4a:e5:c7:2e:62:8b:2b:bd:c0:a2:
         91:d2:3c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:17:25 2025 by rpki-client