Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.mft
File:                     e4jNrtKWszDz3e1AaNVTJLNQPhE.mft (raw, json)
Hash identifier:          OlHG0elUngGhBs8X6ZhMnXADbh6EGr5mmv/BHc9j0AY=
Subject key identifier:   7F:83:64:38:5A:F8:9D:F3:2B:C7:79:E6:4E:32:AA:9B:32:78:0D:53
Authority key identifier: 7B:88:CD:AE:D2:96:B3:30:F3:DD:ED:40:68:D5:53:24:B3:50:3E:11
Certificate issuer:       /CN=7b88cdaed296b330f3dded4068d55324b3503e11
Certificate serial:       01976F2CAA6EB0F69C5FEF3935236000B95A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e4jNrtKWszDz3e1AaNVTJLNQPhE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.mft
Manifest number:          0C60
Signing time:             Sat 14 Jun 2025 16:01:27 +0000
Manifest this update:     Sat 14 Jun 2025 16:01:27 +0000
Manifest next update:     Sun 15 Jun 2025 16:01:27 +0000
Files and hashes:         1: e4jNrtKWszDz3e1AaNVTJLNQPhE.crl (hash: kvr4BdlIPDiXf8gRFfBJmnAPgE6bbADgP5lMVo9Xu8M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e4jNrtKWszDz3e1AaNVTJLNQPhE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:2c:aa:6e:b0:f6:9c:5f:ef:39:35:23:60:00:b9:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b88cdaed296b330f3dded4068d55324b3503e11
        Validity
            Not Before: Jun 14 16:01:27 2025 GMT
            Not After : Jun 15 16:01:27 2025 GMT
        Subject: CN=7f8364385af89df32bc779e64e32aa9b32780d53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2b:64:77:19:7d:7e:99:78:4d:27:83:ca:b0:
                    2d:36:0d:72:f7:41:26:88:39:bd:6c:ec:0d:6c:ff:
                    6b:54:e3:3c:b5:0e:ad:f3:1a:ff:70:fa:46:79:dc:
                    e1:9d:2f:58:52:61:22:0c:f6:e8:31:95:6a:bd:96:
                    e0:8a:56:3e:0f:d9:9e:77:8f:60:fa:09:62:28:e5:
                    e9:e1:e7:c3:ea:95:a6:9a:3f:30:9a:46:fe:a2:74:
                    4b:6d:b8:0c:0b:b4:18:85:bb:2d:fd:22:96:53:bc:
                    a9:68:50:ea:d4:34:12:d2:f2:55:32:b8:24:ea:67:
                    2e:57:58:04:bc:30:84:be:fb:39:45:ec:7e:69:0a:
                    a8:81:8f:ec:3c:58:9a:f4:94:34:04:ec:04:0a:ba:
                    c7:a9:2b:01:3e:23:6c:26:78:7c:23:6e:ea:6a:8f:
                    78:cf:c4:c4:34:c8:97:94:59:6b:a5:fb:89:32:1e:
                    be:df:f2:02:95:b8:02:78:ab:7d:aa:88:51:a4:9d:
                    7a:a3:71:3f:07:21:df:ab:5f:4e:f8:8a:17:58:84:
                    12:6d:3e:6e:27:80:e1:bc:cc:d1:e3:1f:7d:c3:ce:
                    c7:b5:67:51:72:1f:d3:a5:38:c2:94:63:9b:67:5e:
                    92:c9:e5:40:87:5b:e1:f2:63:dd:3a:01:b9:65:23:
                    70:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:83:64:38:5A:F8:9D:F3:2B:C7:79:E6:4E:32:AA:9B:32:78:0D:53
            X509v3 Authority Key Identifier:
                keyid:7B:88:CD:AE:D2:96:B3:30:F3:DD:ED:40:68:D5:53:24:B3:50:3E:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4jNrtKWszDz3e1AaNVTJLNQPhE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:23:0f:b3:9a:59:a2:f9:02:9d:e6:40:55:9f:b4:dc:82:aa:
         03:84:14:c7:3e:70:b4:d3:a2:7a:70:6d:22:97:e2:cc:15:b2:
         83:df:f8:1b:10:3d:3a:cb:fd:89:cf:61:10:2b:18:38:65:66:
         05:35:30:00:1d:08:3f:0c:bd:3b:94:25:6a:1f:13:71:b1:56:
         48:8d:03:ec:f3:d6:72:de:83:19:32:ce:cc:b0:76:37:f7:24:
         e6:de:4c:8b:6b:1e:bb:d0:36:59:25:57:2e:e0:67:cb:cc:95:
         18:1c:19:c0:78:dc:90:b1:38:32:8c:d8:4c:93:69:83:6c:52:
         de:27:9c:07:b8:d5:d9:2c:c4:70:88:bb:9d:20:60:de:cb:58:
         44:88:12:09:15:8a:be:e1:74:17:32:f5:b5:82:e0:90:fc:34:
         7d:7f:80:c6:f6:5e:a0:07:51:83:b3:0d:0f:c3:09:f4:bc:6e:
         92:d8:7e:9f:a0:08:f4:42:9f:cd:9d:9e:9e:61:35:2b:f1:a6:
         2c:00:c1:76:45:f5:96:6c:41:80:2d:68:fc:2e:22:fc:0e:90:
         ae:2c:bf:d2:6f:61:10:16:b4:c1:fa:32:56:e0:05:97:db:23:
         39:da:de:3a:c7:8f:33:d6:3d:72:a4:ca:ba:fb:c2:fe:0e:a9:
         a1:ad:a9:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:23:45 2025 by rpki-client