Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.mft
File:                     dWQXildKJgm7bv8cxSG0U9dch9w.mft (raw, json)
Hash identifier:          rZkbj0qxgKVMigTmQMxZXg6kHqGVXQEnRVSKEUyc7J4=
Subject key identifier:   AC:CA:03:F2:B8:AE:12:64:48:E1:B5:46:2B:79:97:57:20:6F:DD:02
Authority key identifier: 75:64:17:8A:57:4A:26:09:BB:6E:FF:1C:C5:21:B4:53:D7:5C:87:DC
Certificate issuer:       /CN=7564178a574a2609bb6eff1cc521b453d75c87dc
Certificate serial:       01976D3DAF6B77E0540A9AEBA2FF66F58816
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dWQXildKJgm7bv8cxSG0U9dch9w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.mft
Manifest number:          0CEF
Signing time:             Sat 14 Jun 2025 07:00:48 +0000
Manifest this update:     Sat 14 Jun 2025 07:00:48 +0000
Manifest next update:     Sun 15 Jun 2025 07:00:48 +0000
Files and hashes:         1: dWQXildKJgm7bv8cxSG0U9dch9w.crl (hash: TO+/XKYST6Wsu+5dA4/YqNhfS9uznmZh2zGIzpm/Qpo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dWQXildKJgm7bv8cxSG0U9dch9w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:3d:af:6b:77:e0:54:0a:9a:eb:a2:ff:66:f5:88:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7564178a574a2609bb6eff1cc521b453d75c87dc
        Validity
            Not Before: Jun 14 07:00:48 2025 GMT
            Not After : Jun 15 07:00:48 2025 GMT
        Subject: CN=acca03f2b8ae126448e1b5462b799757206fdd02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fe:40:26:17:b6:1e:42:e8:a2:82:96:b0:6c:
                    73:85:e4:d7:26:47:36:8d:ef:1f:b1:e1:81:c3:6a:
                    d1:fc:39:4a:55:a7:52:79:5a:09:cf:7d:b5:db:4b:
                    71:95:bf:e1:04:0b:83:51:42:64:31:49:35:d9:ee:
                    4e:7c:e4:46:ba:dc:66:0e:b9:46:31:44:67:43:06:
                    6e:34:95:1f:b8:96:5a:e8:83:7b:8a:db:c7:f9:42:
                    37:47:dc:6a:3c:4c:5d:04:c1:09:57:b0:a7:9d:2f:
                    4c:10:1d:8b:2a:a6:20:88:6e:d6:21:9c:8b:f8:0f:
                    99:f0:d1:f4:bd:12:b1:8b:0a:5a:7c:87:d2:35:48:
                    69:c4:6c:c9:ea:cf:95:c1:33:ed:ba:7a:cd:83:b9:
                    b0:aa:ce:e5:85:75:65:2c:c2:8e:c3:11:e0:03:ed:
                    0d:2b:a5:0a:cd:6b:c5:b5:85:f8:80:e3:43:6e:f9:
                    2c:28:33:cf:41:eb:09:c1:ad:82:ab:dc:b7:6c:96:
                    bc:e8:87:23:54:71:b1:b3:87:1a:5e:2a:db:c5:53:
                    7e:87:e9:76:b2:8f:11:d5:9d:dd:04:9f:61:42:0a:
                    2a:dc:65:6e:98:67:11:5c:19:f1:3c:db:e3:8d:11:
                    4f:75:13:39:ad:c6:0e:81:1e:1b:a9:d3:24:55:3f:
                    3f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:CA:03:F2:B8:AE:12:64:48:E1:B5:46:2B:79:97:57:20:6F:DD:02
            X509v3 Authority Key Identifier:
                keyid:75:64:17:8A:57:4A:26:09:BB:6E:FF:1C:C5:21:B4:53:D7:5C:87:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWQXildKJgm7bv8cxSG0U9dch9w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:3c:0f:e4:a5:ae:2c:82:54:48:fd:9e:bc:04:d9:5e:75:1e:
         77:4c:05:3c:d2:b6:da:40:b1:fc:71:2d:57:25:7a:86:bb:f7:
         3a:ea:cc:65:33:b8:57:6b:ad:3f:3f:ba:57:ef:00:5a:19:24:
         b6:de:2f:dc:d9:d0:0b:37:5c:e4:5f:25:25:8a:eb:2c:22:0f:
         94:d4:5d:d9:d5:13:b9:4f:ef:0a:0d:56:e2:a1:b3:2d:54:75:
         3b:f6:39:ff:03:6e:2b:fe:48:5a:15:0e:4f:90:e1:9b:dd:4b:
         0a:08:cd:1f:a2:f2:60:30:dc:58:69:30:63:84:4a:9a:2f:36:
         80:d4:11:41:60:9d:3c:b3:a2:20:5f:81:71:8e:f0:8c:28:90:
         84:6a:8a:4f:0d:ba:b9:29:92:2f:2f:1c:a4:31:38:9b:f3:50:
         f4:8c:b6:cb:01:24:5f:e9:4d:a7:c8:9e:64:37:95:27:47:a2:
         88:fc:5c:ac:55:91:45:d1:c8:fd:11:19:c6:7e:cd:d3:ac:e8:
         5a:06:ec:6d:bf:30:67:4d:cd:39:d9:5c:2c:47:28:37:34:42:
         60:e3:b4:1c:91:d6:31:18:b3:4a:66:35:10:8e:8d:ca:99:4f:
         15:4a:55:84:77:39:3f:aa:d8:28:b7:84:e6:6a:6e:a2:0c:c7:
         e8:a6:bc:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:21:15 2025 by rpki-client