Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/33044c-3be5-4d17-a721-33f3c6b34602/1/X78QDyDnniuCeH_mRaU_TChkKvY.mft
File:                     X78QDyDnniuCeH_mRaU_TChkKvY.mft (raw, json)
Hash identifier:          6OlUqAfLIlrbNNC0aX3x4U6qK3sX8eifpm/pOhmaeMI=
Subject key identifier:   76:36:8D:03:5D:24:F6:CE:8F:6D:60:AA:25:8A:DB:83:79:9A:B2:F5
Authority key identifier: 5F:BF:10:0F:20:E7:9E:2B:82:78:7F:E6:45:A5:3F:4C:28:64:2A:F6
Certificate issuer:       /CN=5fbf100f20e79e2b82787fe645a53f4c28642af6
Certificate serial:       019771F669CDBB4A4031D38D78B6A9136643
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X78QDyDnniuCeH_mRaU_TChkKvY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/33044c-3be5-4d17-a721-33f3c6b34602/1/X78QDyDnniuCeH_mRaU_TChkKvY.mft
Manifest number:          158E
Signing time:             Sun 15 Jun 2025 05:01:03 +0000
Manifest this update:     Sun 15 Jun 2025 05:01:03 +0000
Manifest next update:     Mon 16 Jun 2025 05:01:03 +0000
Files and hashes:         1: X78QDyDnniuCeH_mRaU_TChkKvY.crl (hash: Aau9Jydyl4vqyeci0coWkdSna1FN8s9LQ8Q3KbyU7tw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/33044c-3be5-4d17-a721-33f3c6b34602/1/X78QDyDnniuCeH_mRaU_TChkKvY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/33044c-3be5-4d17-a721-33f3c6b34602/1/X78QDyDnniuCeH_mRaU_TChkKvY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X78QDyDnniuCeH_mRaU_TChkKvY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:f6:69:cd:bb:4a:40:31:d3:8d:78:b6:a9:13:66:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fbf100f20e79e2b82787fe645a53f4c28642af6
        Validity
            Not Before: Jun 15 05:01:03 2025 GMT
            Not After : Jun 16 05:01:03 2025 GMT
        Subject: CN=76368d035d24f6ce8f6d60aa258adb83799ab2f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:82:c7:cd:e3:69:b6:07:55:03:e4:03:64:fd:
                    dc:3b:8b:3c:ab:56:7c:16:53:19:d3:f9:14:3d:a9:
                    24:f3:26:49:d9:f2:9f:2e:d1:aa:58:40:f0:06:c3:
                    5b:5a:47:50:44:6b:d2:89:41:f1:a0:fb:21:75:f1:
                    5d:fd:65:c7:ae:db:02:b6:fb:63:7c:cf:f3:6f:2d:
                    02:1c:06:87:f5:5d:73:b6:92:ee:fb:f6:fe:07:1d:
                    91:a8:c7:bb:70:5d:7a:f9:0b:73:92:8b:d5:84:b5:
                    5b:fc:2b:34:33:c1:87:df:92:d3:9f:3f:8c:71:b3:
                    f0:a4:7c:2c:0b:ff:1b:e2:db:f2:87:8d:dc:d8:4f:
                    11:3c:a9:84:68:b9:c9:ac:9c:2e:b4:8d:58:38:fa:
                    1a:ac:a7:24:6c:b6:fe:f8:c5:88:f6:ce:f1:76:4d:
                    ab:03:25:e4:b1:f0:60:6e:2d:16:44:8c:07:10:0a:
                    e0:99:29:b1:ba:bd:67:bd:ad:56:9e:90:b7:b3:33:
                    45:60:2f:ad:3c:04:1d:5d:13:3c:2d:aa:23:84:75:
                    1b:a0:d4:55:cd:14:52:f9:05:87:38:ff:f8:52:79:
                    1a:15:7a:6a:99:3e:30:12:18:1a:d6:a6:06:e9:22:
                    8d:d2:73:c6:d0:1a:7d:02:3f:2f:8d:cd:97:ef:c2:
                    e2:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:36:8D:03:5D:24:F6:CE:8F:6D:60:AA:25:8A:DB:83:79:9A:B2:F5
            X509v3 Authority Key Identifier:
                keyid:5F:BF:10:0F:20:E7:9E:2B:82:78:7F:E6:45:A5:3F:4C:28:64:2A:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X78QDyDnniuCeH_mRaU_TChkKvY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/33044c-3be5-4d17-a721-33f3c6b34602/1/X78QDyDnniuCeH_mRaU_TChkKvY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/33044c-3be5-4d17-a721-33f3c6b34602/1/X78QDyDnniuCeH_mRaU_TChkKvY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:08:a9:21:5f:2a:69:03:ce:49:61:e4:a7:da:b4:4f:bb:aa:
         9d:34:ab:2c:57:aa:4c:51:f2:ef:38:45:95:cc:7b:50:d0:d9:
         f8:cb:c1:e4:71:8e:30:d5:be:d8:be:54:07:6d:21:c1:bc:a1:
         9a:60:fa:e8:05:25:a5:6c:94:5d:9a:e3:7a:3e:9f:77:03:0f:
         b6:e0:f6:33:06:f6:e6:e8:c5:d6:97:35:12:5e:14:6b:17:4a:
         f2:61:26:43:23:bd:f7:74:d6:38:36:0e:e5:70:8d:ae:39:d8:
         a8:f7:ef:7d:9e:14:7a:3d:0b:9b:93:7f:4d:23:bf:49:4b:73:
         64:f7:8e:04:f7:79:bd:72:f2:5d:e1:89:5d:24:57:f1:ae:d2:
         55:d9:96:95:80:03:9f:67:9b:de:2c:53:f3:b9:a3:8f:23:5c:
         13:5a:0a:5e:8a:ff:08:b7:53:46:f2:b1:27:3a:33:e5:3b:04:
         dc:43:b9:19:fb:87:d6:c8:92:7f:a9:e6:60:72:cb:e2:39:1d:
         4e:57:63:8d:f7:0e:da:87:b9:e6:3e:fd:2f:c9:b3:15:41:f7:
         bc:c1:7c:e7:ba:4d:97:6e:92:d5:82:fe:c6:25:b9:01:bc:98:
         1c:16:f0:6a:ac:55:ba:72:60:db:11:d8:b6:63:e3:fa:a0:00:
         cb:94:2f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:34:05 2025 by rpki-client