Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.mft
File:                     54CVVajwXwQLRfmuycPvVaG6kz0.mft (raw, json)
Hash identifier:          fncyd0bSPHrW1KMpNnBhm9QQT0SqEYZLSot1iZAOM6c=
Subject key identifier:   69:E2:A5:17:7F:C6:29:83:2C:41:08:4A:94:FF:28:81:7E:3E:78:55
Authority key identifier: E7:80:95:55:A8:F0:5F:04:0B:45:F9:AE:C9:C3:EF:55:A1:BA:93:3D
Certificate issuer:       /CN=e7809555a8f05f040b45f9aec9c3ef55a1ba933d
Certificate serial:       019781A03ADD79B19E5006386F4EAC155F51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/54CVVajwXwQLRfmuycPvVaG6kz0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.mft
Manifest number:          036E
Signing time:             Wed 18 Jun 2025 06:00:51 +0000
Manifest this update:     Wed 18 Jun 2025 06:00:51 +0000
Manifest next update:     Thu 19 Jun 2025 06:00:51 +0000
Files and hashes:         1: 54CVVajwXwQLRfmuycPvVaG6kz0.crl (hash: zxUmGH8Cg0jwgKrUXrhkkW1p4FgWcMMCEFAhsP/Z12k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/54CVVajwXwQLRfmuycPvVaG6kz0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Jun 2025 06:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:81:a0:3a:dd:79:b1:9e:50:06:38:6f:4e:ac:15:5f:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7809555a8f05f040b45f9aec9c3ef55a1ba933d
        Validity
            Not Before: Jun 18 06:00:51 2025 GMT
            Not After : Jun 19 06:00:51 2025 GMT
        Subject: CN=69e2a5177fc629832c41084a94ff28817e3e7855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:d8:cd:37:62:d7:05:a7:dc:b4:30:c3:65:4a:
                    ea:22:d6:71:80:11:28:2a:ee:8f:f1:6a:f9:92:32:
                    7d:2e:8b:08:74:f3:b9:a9:9e:f0:29:87:53:4c:f5:
                    d5:45:2b:c2:89:09:01:32:8a:49:79:48:63:3a:89:
                    27:da:aa:83:82:7e:4f:3b:6a:e8:54:88:2a:da:c5:
                    f3:0c:e9:58:de:e8:d4:29:56:3a:e2:a1:48:88:bf:
                    85:52:1e:91:12:54:46:19:93:fa:1d:b8:6a:6e:2c:
                    c5:ae:b3:85:a3:61:d4:47:76:5f:6c:dd:ca:62:23:
                    b4:26:b0:35:d1:c1:29:88:38:55:ae:80:12:f7:61:
                    19:0c:bf:99:fc:0a:5c:74:33:4c:42:e5:96:f1:ec:
                    64:99:b4:7a:b1:d6:8c:1f:e6:3c:d2:a4:79:10:a0:
                    f9:08:e1:e7:d2:d1:7a:32:ec:f1:7d:b9:ad:09:01:
                    dc:86:2a:c1:f9:4b:45:00:8b:86:6b:0d:e5:cb:5f:
                    7f:7e:d1:74:36:04:ef:a8:b1:c7:5e:cc:dc:18:ab:
                    15:20:2f:48:4a:7b:44:0f:ef:d3:86:4c:b3:64:52:
                    d7:c6:95:12:b8:e1:54:b4:b3:bd:d2:6d:32:f7:ce:
                    e2:63:e4:ae:86:98:c5:b4:29:dd:56:b9:27:f5:be:
                    e6:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:E2:A5:17:7F:C6:29:83:2C:41:08:4A:94:FF:28:81:7E:3E:78:55
            X509v3 Authority Key Identifier:
                keyid:E7:80:95:55:A8:F0:5F:04:0B:45:F9:AE:C9:C3:EF:55:A1:BA:93:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/54CVVajwXwQLRfmuycPvVaG6kz0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:78:5a:af:7c:0c:7a:34:7b:5d:a2:fd:4e:5b:ef:26:d3:cc:
         5c:1c:64:6c:19:57:58:0a:2a:c4:ce:b7:94:5c:1b:75:29:0a:
         59:05:e0:9a:fb:c4:c5:d7:43:a6:43:01:e7:13:bd:bc:49:ba:
         c7:88:1b:c7:e8:6e:cd:1d:8c:53:61:eb:af:c5:92:26:2d:25:
         1f:26:3b:98:02:6e:44:37:fc:c3:ac:dd:9a:32:42:1d:e6:2c:
         68:d1:2e:f9:1e:3e:2f:cf:0d:7c:71:47:c7:84:27:26:8d:69:
         c1:ae:35:77:3c:b7:59:21:0b:c5:eb:4f:27:22:53:e1:27:b9:
         e5:23:49:f9:83:9d:ed:8f:92:20:7a:e6:b3:17:9a:15:a8:9a:
         05:a0:a4:ff:45:ad:9e:43:37:04:f8:88:3b:d3:c7:1e:d0:74:
         0c:4f:ab:9c:d0:89:13:2f:3e:b5:3e:71:0b:1d:fc:48:1d:d4:
         8d:64:cd:a3:8b:dc:84:ae:b2:72:c3:3c:cf:d1:16:bb:34:a9:
         de:6e:eb:e0:e5:94:95:32:6a:db:7f:dc:1a:60:5d:33:aa:b2:
         4e:3e:b0:bc:71:05:78:39:27:f2:46:c3:54:9a:dc:7e:56:05:
         76:57:e7:72:a6:50:01:6c:4b:66:3d:a3:a5:82:13:2f:ab:d7:
         51:20:4f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 09:42:35 2025 by rpki-client