Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/357492-07ab-4138-8426-b1674a37153b/1/mYf1lRU_EX4prIkHh2ZWpLin7GI.mft
File:                     mYf1lRU_EX4prIkHh2ZWpLin7GI.mft (raw, json)
Hash identifier:          A3069/f73/jSdTfVT2xIpX+YYp8BOAd9hmHJkn2mddQ=
Subject key identifier:   38:8E:7A:08:C3:9C:5D:DB:3E:02:B9:F7:CA:0F:44:71:F9:D0:C7:55
Authority key identifier: 99:87:F5:95:15:3F:11:7E:29:AC:89:07:87:66:56:A4:B8:A7:EC:62
Certificate issuer:       /CN=9987f595153f117e29ac8907876656a4b8a7ec62
Certificate serial:       01976C98C7C31A49C5D0BE6F8719D6399481
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mYf1lRU_EX4prIkHh2ZWpLin7GI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/357492-07ab-4138-8426-b1674a37153b/1/mYf1lRU_EX4prIkHh2ZWpLin7GI.mft
Manifest number:          1076
Signing time:             Sat 14 Jun 2025 04:00:41 +0000
Manifest this update:     Sat 14 Jun 2025 04:00:41 +0000
Manifest next update:     Sun 15 Jun 2025 04:00:41 +0000
Files and hashes:         1: mYf1lRU_EX4prIkHh2ZWpLin7GI.crl (hash: hi7xRqZYNqYadjCRcv5Vm2WVTKSJGCpw7EdAeGZH1MU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/357492-07ab-4138-8426-b1674a37153b/1/mYf1lRU_EX4prIkHh2ZWpLin7GI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/357492-07ab-4138-8426-b1674a37153b/1/mYf1lRU_EX4prIkHh2ZWpLin7GI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mYf1lRU_EX4prIkHh2ZWpLin7GI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:98:c7:c3:1a:49:c5:d0:be:6f:87:19:d6:39:94:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9987f595153f117e29ac8907876656a4b8a7ec62
        Validity
            Not Before: Jun 14 04:00:41 2025 GMT
            Not After : Jun 15 04:00:41 2025 GMT
        Subject: CN=388e7a08c39c5ddb3e02b9f7ca0f4471f9d0c755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:9c:d0:ed:97:d2:96:3b:c0:dc:fe:d8:07:f0:
                    a5:8f:aa:ed:68:fc:0c:cc:f5:a3:55:d6:af:eb:d4:
                    13:a1:ca:4a:b7:41:7a:1b:c4:42:db:f2:8a:bf:4e:
                    4f:69:bb:63:cf:27:c2:55:ab:2a:c2:74:d0:aa:64:
                    54:62:8f:ad:eb:77:2f:98:70:d0:3b:99:5c:0d:c1:
                    c9:f7:af:e8:9e:0a:a2:1d:20:fa:b4:4c:06:a7:63:
                    17:ee:3b:5e:e8:00:c1:95:8c:17:73:86:8c:28:df:
                    b8:e5:2b:aa:ae:c7:58:0c:56:f9:f5:1a:7f:bb:2f:
                    4c:ad:a4:43:0f:92:28:dc:02:9f:71:4a:60:cb:71:
                    e4:07:57:ec:ba:12:01:a1:de:3a:db:18:cb:64:7a:
                    b7:07:1e:71:02:50:a8:10:7b:e6:34:30:a2:c9:54:
                    d4:6f:b2:c5:89:bd:d9:8e:e3:b1:3a:b1:a5:c8:f0:
                    e7:a6:36:07:06:b9:0f:61:cf:b4:f3:42:c7:8e:c5:
                    92:65:10:90:11:e5:87:6f:34:e3:63:f9:f6:da:06:
                    b0:ac:31:ce:94:e0:5a:5f:65:38:c4:56:7b:b8:37:
                    05:48:f1:de:ca:90:33:e4:bb:a4:23:6e:d0:5f:56:
                    0f:66:d4:83:b3:49:b3:04:b4:3f:1f:e7:96:c4:8a:
                    d2:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:8E:7A:08:C3:9C:5D:DB:3E:02:B9:F7:CA:0F:44:71:F9:D0:C7:55
            X509v3 Authority Key Identifier:
                keyid:99:87:F5:95:15:3F:11:7E:29:AC:89:07:87:66:56:A4:B8:A7:EC:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYf1lRU_EX4prIkHh2ZWpLin7GI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/357492-07ab-4138-8426-b1674a37153b/1/mYf1lRU_EX4prIkHh2ZWpLin7GI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/357492-07ab-4138-8426-b1674a37153b/1/mYf1lRU_EX4prIkHh2ZWpLin7GI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:42:2c:53:bf:5b:c9:e4:b8:62:c8:2e:17:dc:94:71:b2:d0:
         ad:30:ce:59:8f:d1:1d:4d:99:9d:ea:45:14:2e:a5:b2:d2:a4:
         c5:c0:d3:be:f9:61:f0:7f:69:78:9f:e1:92:67:12:f1:f0:39:
         69:f6:17:2c:0d:93:3a:27:ea:74:7e:8b:e4:47:d5:f2:b6:ba:
         9c:6a:db:30:50:69:6f:23:ca:db:a1:90:1c:b4:5f:eb:b0:5c:
         86:6d:25:23:89:40:6a:10:73:8e:15:c0:26:c9:3c:4b:7e:0a:
         78:39:39:b8:54:6c:48:07:aa:0e:4f:6f:1b:d1:9e:2e:3b:e2:
         a5:ea:44:ca:90:f7:22:2c:4f:58:73:c8:88:a6:8f:db:89:90:
         84:98:b2:4a:0c:40:4c:ff:f7:df:cd:3d:8d:70:9c:eb:06:77:
         09:f5:66:62:22:bb:65:8e:2e:8e:eb:3d:93:5a:d9:5b:94:3f:
         2b:13:2b:44:a2:ec:46:0d:20:03:4b:ed:19:41:6d:36:ef:8b:
         40:0d:c7:53:3a:2a:6b:9b:86:6f:28:1c:81:fa:53:b1:16:b5:
         aa:1d:f3:03:46:8f:77:3e:39:7b:48:84:a8:2e:59:12:93:fe:
         ce:4f:1c:d4:0a:78:49:f0:ee:d4:c2:f9:56:24:1d:12:c5:d3:
         af:f2:39:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:06:30 2025 by rpki-client