Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.mft
File:                     m7OdtQEo2zUK68hDgISZGLsF5wU.mft (raw, json)
Hash identifier:          yyP+w0gKEmGZITtU7fwJrajXiHVt5z00bX+JYeu/rgk=
Subject key identifier:   83:26:1C:BD:AE:92:4C:B4:88:40:06:9A:E2:3F:DC:07:A4:B6:72:CE
Authority key identifier: 9B:B3:9D:B5:01:28:DB:35:0A:EB:C8:43:80:84:99:18:BB:05:E7:05
Certificate issuer:       /CN=9bb39db50128db350aebc84380849918bb05e705
Certificate serial:       01976C2A94483E1C5D5B7120A241128EF074
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m7OdtQEo2zUK68hDgISZGLsF5wU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.mft
Manifest number:          0FFF
Signing time:             Sat 14 Jun 2025 02:00:19 +0000
Manifest this update:     Sat 14 Jun 2025 02:00:19 +0000
Manifest next update:     Sun 15 Jun 2025 02:00:19 +0000
Files and hashes:         1: m7OdtQEo2zUK68hDgISZGLsF5wU.crl (hash: RhDg/RoDMxsbr4XOFZGVJlSfHmrdG5R95AFQSzzQy64=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m7OdtQEo2zUK68hDgISZGLsF5wU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:2a:94:48:3e:1c:5d:5b:71:20:a2:41:12:8e:f0:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bb39db50128db350aebc84380849918bb05e705
        Validity
            Not Before: Jun 14 02:00:19 2025 GMT
            Not After : Jun 15 02:00:19 2025 GMT
        Subject: CN=83261cbdae924cb48840069ae23fdc07a4b672ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:95:a8:ac:3d:0a:68:91:5f:81:66:0d:da:14:
                    6d:38:ab:ec:87:88:8c:82:fb:72:73:7a:b5:3d:99:
                    21:1b:f6:e7:ea:ce:a9:24:ad:d2:9f:84:83:c6:0e:
                    c0:fa:01:fa:65:91:a2:49:ee:a1:f4:c7:f8:56:a0:
                    9b:ac:a0:be:6c:99:e8:a9:0c:23:72:72:a2:26:13:
                    28:2f:82:1a:49:ff:b1:90:1e:60:d6:9f:14:dc:20:
                    d3:10:dd:2e:e2:f6:74:a7:68:a1:5c:05:c6:41:b6:
                    d7:af:7e:ae:37:ba:53:31:0c:96:fc:d3:1a:c6:4a:
                    88:c5:b4:1b:07:55:db:f7:0d:77:fc:46:a7:f5:3b:
                    89:50:8f:42:ba:41:a3:72:b3:fc:63:19:88:79:9f:
                    4a:2f:1b:d4:c8:f9:10:6e:d0:a9:28:3d:bc:d8:5d:
                    5e:d5:21:fd:1c:14:60:83:12:91:a5:15:93:48:b8:
                    8c:11:02:a3:08:69:fd:d6:2d:2d:9e:db:23:81:3c:
                    ee:f2:9b:c2:f5:22:b1:98:4b:42:d5:4b:15:44:28:
                    a5:43:8d:97:6a:ea:f6:04:cf:00:8e:21:1b:6b:02:
                    5c:ce:f5:ad:2c:17:e8:8b:55:5a:9d:21:05:33:35:
                    22:80:77:2a:a6:5b:f8:b8:6e:36:41:94:3d:32:b7:
                    90:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:26:1C:BD:AE:92:4C:B4:88:40:06:9A:E2:3F:DC:07:A4:B6:72:CE
            X509v3 Authority Key Identifier:
                keyid:9B:B3:9D:B5:01:28:DB:35:0A:EB:C8:43:80:84:99:18:BB:05:E7:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7OdtQEo2zUK68hDgISZGLsF5wU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:eb:1a:40:d8:ba:25:e3:e7:7a:70:d5:6e:2f:a2:8c:dc:37:
         24:3a:05:7b:59:e0:0d:3c:23:d8:8a:bd:69:e5:24:51:d9:f0:
         dc:22:f5:1d:07:7b:6e:ee:e9:6a:f8:e9:c3:3e:63:ef:35:36:
         05:54:73:5d:6b:dc:67:44:99:aa:57:01:ba:5f:04:9b:f4:91:
         42:30:4b:71:8a:f9:6c:10:9f:3d:2b:e5:ca:15:8b:47:da:74:
         f8:ef:69:99:50:b0:e5:b7:8b:b3:bf:10:59:6a:c7:68:20:75:
         c4:6b:3a:c9:a1:86:d3:e2:c5:70:cd:46:13:88:35:af:69:cf:
         5b:c2:f3:1b:f7:bf:44:ef:ce:72:5c:67:af:77:0b:d7:fc:1b:
         6f:79:b2:bb:1f:08:e7:cb:2d:01:44:40:2c:d8:35:7c:32:35:
         6b:e6:98:15:9f:4f:96:7d:3d:77:7f:15:66:c2:97:36:79:71:
         7f:bc:59:b6:37:c4:d0:4c:24:b9:02:28:af:ec:07:49:30:f5:
         df:27:2a:e4:b4:d7:a5:63:17:09:0a:37:2d:bb:d3:83:38:51:
         58:bc:f8:4d:9d:22:85:4e:af:72:59:f3:04:49:8f:0c:8b:10:
         d7:32:0d:76:89:46:e6:50:d3:67:c8:da:43:ee:4a:4d:30:3b:
         c2:0d:a9:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:33:31 2025 by rpki-client