Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft
File:                     R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft (raw, json)
Hash identifier:          Nxfw3iUbgVreFg2ZLuT3xro8rTZCObGAKwAvD7d0ZPU=
Subject key identifier:   B7:61:9A:06:AF:D6:5E:70:FF:C6:0F:08:C1:A3:41:23:B8:A4:A5:72
Authority key identifier: 47:4A:63:D4:FE:10:A3:46:B8:12:FB:F3:59:C9:B3:37:78:CD:43:11
Certificate issuer:       /CN=474a63d4fe10a346b812fbf359c9b33778cd4311
Certificate serial:       0197703EC3D993BDC7D72BE64197167F8838
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft
Manifest number:          024C
Signing time:             Sat 14 Jun 2025 21:00:50 +0000
Manifest this update:     Sat 14 Jun 2025 21:00:50 +0000
Manifest next update:     Sun 15 Jun 2025 21:00:50 +0000
Files and hashes:         1: R0pj1P4Qo0a4EvvzWcmzN3jNQxE.crl (hash: mMdao8MsKQwz1dSccNtbRm2b/o2HWG7SozJC9L+KkF8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:3e:c3:d9:93:bd:c7:d7:2b:e6:41:97:16:7f:88:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=474a63d4fe10a346b812fbf359c9b33778cd4311
        Validity
            Not Before: Jun 14 21:00:50 2025 GMT
            Not After : Jun 15 21:00:50 2025 GMT
        Subject: CN=b7619a06afd65e70ffc60f08c1a34123b8a4a572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ba:14:f8:4d:9d:22:d0:ff:94:70:2b:c0:3c:
                    4e:c6:8c:9e:28:ca:b9:2d:ef:43:43:18:b9:55:82:
                    4f:85:53:33:ba:e2:54:d1:39:8f:3f:7e:ef:f9:6d:
                    ca:02:66:93:75:d6:0c:a8:8f:21:52:32:1a:7e:4b:
                    f1:43:7e:84:84:d4:a2:43:76:e1:b4:42:cb:35:9e:
                    3f:69:b2:8b:d7:8d:b7:68:18:23:49:3f:b0:68:c8:
                    b1:3e:55:b1:5b:64:89:f5:e6:7b:46:e9:ad:19:a7:
                    4e:df:ee:50:d7:e4:4c:63:8b:03:13:ae:57:7d:6e:
                    72:b5:09:55:56:05:4d:22:58:49:89:b6:07:17:dc:
                    07:66:f7:2e:c4:e3:ca:21:c1:7c:bf:2f:ea:82:91:
                    3d:72:a1:e4:b5:f7:1f:30:7b:8e:de:5b:8a:f2:eb:
                    77:51:96:7e:24:18:14:8e:c5:fa:c9:db:91:84:57:
                    68:aa:c1:f2:bf:04:05:dd:28:76:0f:83:11:5a:ff:
                    5b:67:c6:3e:2c:4e:81:f8:2e:8e:51:b7:a0:07:d9:
                    97:9e:ff:72:9f:35:30:68:42:d7:40:80:a4:bf:38:
                    5a:39:9f:97:66:9b:94:de:88:56:96:fb:3f:04:e4:
                    8f:71:d1:18:e2:2f:84:03:75:71:5a:92:1f:d1:39:
                    4c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:61:9A:06:AF:D6:5E:70:FF:C6:0F:08:C1:A3:41:23:B8:A4:A5:72
            X509v3 Authority Key Identifier:
                keyid:47:4A:63:D4:FE:10:A3:46:B8:12:FB:F3:59:C9:B3:37:78:CD:43:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:0d:aa:d9:68:07:92:6b:02:55:f2:ad:10:30:75:2e:28:89:
         d6:2b:c4:9d:77:1b:b4:68:05:ba:f3:b6:92:fa:42:cc:8a:b2:
         49:f4:f9:81:61:97:8d:91:79:4b:e4:51:5d:46:94:b2:40:07:
         c0:fe:9d:1e:62:0c:2c:22:aa:94:72:85:83:9f:93:43:18:fc:
         bd:3a:7d:54:c8:9e:4e:18:f1:31:aa:1e:a4:68:38:31:5f:13:
         e5:d4:cd:81:02:aa:87:28:ec:e8:2e:6b:36:2d:3f:12:65:80:
         2d:af:f7:a0:27:e7:15:f6:06:95:09:b5:02:29:12:78:17:a5:
         51:d2:f7:5a:3a:28:a3:6a:e9:ee:77:b1:81:51:dd:c5:f0:bf:
         64:81:1d:2c:64:69:8a:a9:3b:0d:2c:89:1c:a3:c0:80:4a:34:
         6a:a2:af:da:2d:22:b9:29:c3:68:84:3c:8f:51:7f:73:8a:6c:
         49:40:5c:1d:02:d7:ca:ae:2f:99:29:48:cf:2c:53:ec:bc:4f:
         3d:d1:dc:d6:c1:68:2f:38:fd:e8:5c:05:70:6d:9b:3f:17:98:
         f9:61:ba:3b:60:88:5f:98:9f:15:e1:96:1b:c5:89:14:a2:da:
         fc:b3:be:93:b7:eb:2f:c3:ab:13:93:fa:16:a0:b9:d6:9a:2d:
         ad:47:e0:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:26:04 2025 by rpki-client