Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6e3744-9dd9-423e-ab99-78f982dfc32f/1/7XlzzE58-_RHB0eBDEFuzH6YGIU.mft
File:                     7XlzzE58-_RHB0eBDEFuzH6YGIU.mft (raw, json)
Hash identifier:          rwlPf0Tw1QBxu2NmgqO6vO895jBadSxG8xczQCXua0Y=
Subject key identifier:   FA:EB:43:2F:D3:02:23:37:A3:57:28:28:D3:A0:60:C2:5B:D2:60:3D
Authority key identifier: ED:79:73:CC:4E:7C:FB:F4:47:07:47:81:0C:41:6E:CC:7E:98:18:85
Certificate issuer:       /CN=ed7973cc4e7cfbf4470747810c416ecc7e981885
Certificate serial:       0197726427614A86AD5127972649BDD089E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7XlzzE58-_RHB0eBDEFuzH6YGIU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/6e3744-9dd9-423e-ab99-78f982dfc32f/1/7XlzzE58-_RHB0eBDEFuzH6YGIU.mft
Manifest number:          1109
Signing time:             Sun 15 Jun 2025 07:00:55 +0000
Manifest this update:     Sun 15 Jun 2025 07:00:55 +0000
Manifest next update:     Mon 16 Jun 2025 07:00:55 +0000
Files and hashes:         1: 7XlzzE58-_RHB0eBDEFuzH6YGIU.crl (hash: H3xP1sGqCc6xq1zwtAeSG9CZnQ7GrQ8W/wlYUe2IuUU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/6e3744-9dd9-423e-ab99-78f982dfc32f/1/7XlzzE58-_RHB0eBDEFuzH6YGIU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/6e3744-9dd9-423e-ab99-78f982dfc32f/1/7XlzzE58-_RHB0eBDEFuzH6YGIU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7XlzzE58-_RHB0eBDEFuzH6YGIU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 04:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:72:64:27:61:4a:86:ad:51:27:97:26:49:bd:d0:89:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed7973cc4e7cfbf4470747810c416ecc7e981885
        Validity
            Not Before: Jun 15 07:00:55 2025 GMT
            Not After : Jun 16 07:00:55 2025 GMT
        Subject: CN=faeb432fd3022337a3572828d3a060c25bd2603d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3a:6d:55:15:58:00:ba:7d:2f:4c:5e:39:94:
                    37:cc:b2:24:5b:bb:93:5c:68:0a:ba:04:b7:a2:e9:
                    75:c2:8b:e0:93:15:03:f8:93:b3:7a:23:1b:e9:ab:
                    79:9a:0a:0e:0e:54:46:5a:ea:ba:e9:72:90:75:90:
                    df:5b:f7:2e:f5:e1:5c:c0:cd:2b:fe:b2:fa:f6:98:
                    1d:d3:a7:f0:1f:fd:79:87:98:38:e1:1f:ba:6d:02:
                    be:cb:b8:f6:f8:d5:69:48:57:91:2d:e1:4f:ec:32:
                    69:83:fc:f0:1c:a8:ef:32:86:c1:3e:3b:d7:6f:7e:
                    b1:8b:b1:94:40:30:89:5d:e5:b5:f7:93:8e:0c:e0:
                    97:c4:d7:b6:ce:11:3b:93:9b:73:94:f9:56:69:42:
                    fb:12:2c:8d:49:5a:9e:f7:a8:ce:09:f9:c9:96:11:
                    ee:c4:8c:13:89:4d:cc:fa:2c:72:8e:38:29:ae:ba:
                    ff:4a:a4:7c:66:66:0e:12:ad:dc:53:a3:a2:cd:d1:
                    e3:c7:fe:2e:66:23:87:1b:7a:e3:50:ed:41:5d:43:
                    bb:5a:2f:e2:7c:fa:bc:69:9c:6f:0e:4e:73:87:7d:
                    36:c0:32:b2:33:13:f9:3f:6a:29:b8:1e:39:8b:bc:
                    73:54:f5:52:7f:f5:c4:37:20:80:e0:f1:2e:bb:12:
                    13:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:EB:43:2F:D3:02:23:37:A3:57:28:28:D3:A0:60:C2:5B:D2:60:3D
            X509v3 Authority Key Identifier:
                keyid:ED:79:73:CC:4E:7C:FB:F4:47:07:47:81:0C:41:6E:CC:7E:98:18:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XlzzE58-_RHB0eBDEFuzH6YGIU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6e3744-9dd9-423e-ab99-78f982dfc32f/1/7XlzzE58-_RHB0eBDEFuzH6YGIU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6e3744-9dd9-423e-ab99-78f982dfc32f/1/7XlzzE58-_RHB0eBDEFuzH6YGIU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:d0:7d:03:3e:52:80:e2:59:81:71:7a:bd:82:eb:fc:76:2b:
         5c:8a:67:2f:3e:0b:4e:e9:d4:b4:95:ae:e0:42:bf:52:3c:0d:
         88:d6:6a:05:63:b3:7b:5c:49:cc:4f:3f:0e:91:5e:2d:56:1e:
         5f:87:93:b3:09:75:2a:a4:9e:90:89:71:cb:31:fa:53:e0:63:
         45:15:dd:3a:4a:4b:ab:23:c4:b3:2c:43:20:8d:5a:49:9f:6e:
         39:ea:4f:23:19:7f:4a:bd:95:75:60:a9:02:d7:af:89:0f:94:
         83:17:61:d6:41:bf:a5:fe:be:25:0c:4e:92:8d:ea:ce:2a:3d:
         af:76:62:ec:e7:60:77:4a:f3:d1:fc:41:a4:a5:fd:71:76:33:
         4a:dd:f5:8a:15:e5:6d:3d:c5:57:5b:1c:b1:d1:58:89:34:f0:
         74:17:14:3f:4d:b7:b2:56:c9:c6:46:15:25:6c:44:db:6b:1f:
         73:ba:6e:67:a1:d8:3a:af:a3:45:54:3e:46:6d:7c:77:be:ff:
         40:1f:96:cb:b8:bd:aa:19:f4:89:b1:27:79:44:c5:2a:08:7e:
         54:ff:ed:3a:63:bb:6a:62:51:20:94:ec:18:20:83:ea:56:2f:
         59:5b:6e:09:00:e1:26:24:cd:10:1e:3e:9c:70:0b:05:b0:c4:
         6b:2e:0b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:41:40 2025 by rpki-client