Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/a3828d-0f51-4da0-8433-df56a241098f/1/soTN8FB0Q-FuUJ1XoinpFPc1ZqQ.mft
File:                     soTN8FB0Q-FuUJ1XoinpFPc1ZqQ.mft (raw, json)
Hash identifier:          HN+RxnTI4ez25JZv7X03KKndjDsgLP2EzXzsMV1qUX0=
Subject key identifier:   07:9B:32:16:3B:B9:74:7F:3A:3C:38:5F:B0:B4:2C:3E:75:EF:DC:FA
Authority key identifier: B2:84:CD:F0:50:74:43:E1:6E:50:9D:57:A2:29:E9:14:F7:35:66:A4
Certificate issuer:       /CN=b284cdf0507443e16e509d57a229e914f73566a4
Certificate serial:       01977264198E8499532B8E6B7D82EA9B9E63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/soTN8FB0Q-FuUJ1XoinpFPc1ZqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/a3828d-0f51-4da0-8433-df56a241098f/1/soTN8FB0Q-FuUJ1XoinpFPc1ZqQ.mft
Manifest number:          1438
Signing time:             Sun 15 Jun 2025 07:00:52 +0000
Manifest this update:     Sun 15 Jun 2025 07:00:52 +0000
Manifest next update:     Mon 16 Jun 2025 07:00:52 +0000
Files and hashes:         1: soTN8FB0Q-FuUJ1XoinpFPc1ZqQ.crl (hash: gx6f6iA4Bhu8fFDckz7vXeXT16MDNnF3gKqxYR/TJaU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/a3828d-0f51-4da0-8433-df56a241098f/1/soTN8FB0Q-FuUJ1XoinpFPc1ZqQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/a3828d-0f51-4da0-8433-df56a241098f/1/soTN8FB0Q-FuUJ1XoinpFPc1ZqQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/soTN8FB0Q-FuUJ1XoinpFPc1ZqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 04:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:72:64:19:8e:84:99:53:2b:8e:6b:7d:82:ea:9b:9e:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b284cdf0507443e16e509d57a229e914f73566a4
        Validity
            Not Before: Jun 15 07:00:52 2025 GMT
            Not After : Jun 16 07:00:52 2025 GMT
        Subject: CN=079b32163bb9747f3a3c385fb0b42c3e75efdcfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:85:d1:16:b8:62:b8:33:3c:3f:15:92:50:86:
                    36:75:b2:62:3c:10:18:88:94:f0:4e:67:d4:b0:75:
                    cf:1f:c6:e7:c0:b1:0e:37:b4:24:71:50:e9:aa:92:
                    66:41:b4:b4:20:e3:94:58:01:80:51:b8:b2:36:c8:
                    47:95:9e:9d:89:a7:1b:7e:73:f4:09:ba:1a:b8:f0:
                    e9:a5:e2:dd:cd:2d:2d:fa:48:e9:f2:f7:b7:2f:04:
                    6c:5a:1b:45:bf:b7:13:a4:7d:fe:21:e1:b6:ae:fb:
                    88:e6:13:b4:73:c8:72:99:7a:c7:0a:80:3c:4d:1a:
                    83:76:e9:36:02:27:7f:cb:02:ce:74:1e:b4:f4:50:
                    43:3b:00:98:b2:51:b7:50:59:36:d4:01:a5:c9:a3:
                    b1:66:f8:17:71:e2:4c:a0:39:83:b1:bb:06:b5:99:
                    1a:c0:a8:8b:02:d7:9a:e3:e8:8f:3f:dd:22:d5:95:
                    6d:52:54:8b:9e:40:57:81:5f:ab:f2:2d:6d:84:e4:
                    c1:f0:d1:3d:50:db:fc:70:71:42:a2:07:4a:0d:c1:
                    68:52:74:f6:02:fd:83:09:ac:ee:ae:be:a1:98:e6:
                    27:b1:2e:8d:f9:0d:a7:95:6b:f8:b9:cf:5e:b6:b9:
                    a9:86:b1:75:ae:d6:36:42:66:b4:c0:68:d1:dc:f1:
                    30:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:9B:32:16:3B:B9:74:7F:3A:3C:38:5F:B0:B4:2C:3E:75:EF:DC:FA
            X509v3 Authority Key Identifier:
                keyid:B2:84:CD:F0:50:74:43:E1:6E:50:9D:57:A2:29:E9:14:F7:35:66:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/soTN8FB0Q-FuUJ1XoinpFPc1ZqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a3828d-0f51-4da0-8433-df56a241098f/1/soTN8FB0Q-FuUJ1XoinpFPc1ZqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a3828d-0f51-4da0-8433-df56a241098f/1/soTN8FB0Q-FuUJ1XoinpFPc1ZqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:7e:59:54:e3:1b:3f:d7:0f:d2:8b:4a:16:8b:b9:9a:62:c0:
         0a:b0:41:6a:76:2c:a8:df:42:94:0d:e9:fe:14:94:fb:5c:48:
         a9:b2:a2:d3:74:4a:99:32:16:7e:c2:46:33:e5:db:60:39:fc:
         8b:c9:e2:ea:ef:dd:10:62:e6:63:a7:83:1e:ef:5e:e2:14:cd:
         db:1c:30:64:db:53:0c:ad:6a:3d:44:7c:e1:95:7c:de:28:ae:
         63:ce:df:e3:10:91:5e:60:01:3a:2d:b8:d5:88:10:43:a9:79:
         d5:6e:57:ff:2d:40:b9:13:86:6b:67:a0:23:9c:ab:ff:d6:96:
         2a:3c:17:ce:70:87:57:72:b6:4e:f6:3d:05:94:62:7c:d6:0e:
         13:ee:df:bb:c5:a1:e9:66:b2:27:bf:51:45:55:78:00:43:78:
         5a:a1:51:93:c5:14:dd:15:79:54:80:e5:ba:11:85:69:61:6d:
         3b:73:17:1d:72:8e:14:be:ce:7a:a5:6b:c9:d9:06:1f:68:dc:
         65:65:f8:89:ae:66:bb:72:b9:97:7c:bb:fa:eb:33:0e:c1:da:
         75:e7:36:c5:73:85:eb:e9:23:c0:86:f1:48:99:e0:f9:69:8f:
         2e:8f:27:dc:0b:4c:75:59:2c:30:60:85:4f:07:12:fa:0d:87:
         d3:75:56:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:41:26 2025 by rpki-client