Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2ab375-4598-49a1-a4a4-c1b562c57703/1/fQk_bIkHjc7vZ7ycCBbpR-wVt6w.mft
File:                     fQk_bIkHjc7vZ7ycCBbpR-wVt6w.mft (raw, json)
Hash identifier:          /TuYF9Acc5R7vjPyqKqUWR+mZ72Nzw0CYORq0pH0gpQ=
Subject key identifier:   AD:82:8C:BF:87:46:7F:13:20:8C:55:23:59:59:38:D9:79:28:E0:0F
Authority key identifier: 7D:09:3F:6C:89:07:8D:CE:EF:67:BC:9C:08:16:E9:47:EC:15:B7:AC
Certificate issuer:       /CN=7d093f6c89078dceef67bc9c0816e947ec15b7ac
Certificate serial:       01977FE954EF9627FD861D104185E9D5AEEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fQk_bIkHjc7vZ7ycCBbpR-wVt6w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/2ab375-4598-49a1-a4a4-c1b562c57703/1/fQk_bIkHjc7vZ7ycCBbpR-wVt6w.mft
Manifest number:          078E
Signing time:             Tue 17 Jun 2025 22:01:27 +0000
Manifest this update:     Tue 17 Jun 2025 22:01:27 +0000
Manifest next update:     Wed 18 Jun 2025 22:01:27 +0000
Files and hashes:         1: fQk_bIkHjc7vZ7ycCBbpR-wVt6w.crl (hash: 3R4wHMSog6H3uOP8bdY+fKDGL7uz6TjbzTdzrDrXN8U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/2ab375-4598-49a1-a4a4-c1b562c57703/1/fQk_bIkHjc7vZ7ycCBbpR-wVt6w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/2ab375-4598-49a1-a4a4-c1b562c57703/1/fQk_bIkHjc7vZ7ycCBbpR-wVt6w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fQk_bIkHjc7vZ7ycCBbpR-wVt6w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 22:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7f:e9:54:ef:96:27:fd:86:1d:10:41:85:e9:d5:ae:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d093f6c89078dceef67bc9c0816e947ec15b7ac
        Validity
            Not Before: Jun 17 22:01:27 2025 GMT
            Not After : Jun 18 22:01:27 2025 GMT
        Subject: CN=ad828cbf87467f13208c5523595938d97928e00f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ad:40:48:6b:77:32:91:48:90:52:d1:4e:57:
                    9a:e8:bb:a2:09:78:e8:5b:bf:5c:95:d0:18:8a:06:
                    50:7c:04:da:95:87:a5:e1:53:9d:73:7f:53:ee:25:
                    00:3a:70:96:a9:93:49:46:d4:28:ab:f6:8f:69:ce:
                    81:06:ca:e9:b9:6c:c0:ba:c8:d8:6f:06:79:2a:f6:
                    17:2c:6e:88:b6:de:20:56:ff:36:bb:f0:f7:a9:9e:
                    1a:f5:08:e8:76:b7:97:12:fa:00:7e:dc:52:3d:3a:
                    35:a3:8b:94:0f:78:2f:f9:87:f8:43:4c:b5:a1:74:
                    c5:2d:2a:0c:a1:2f:ef:05:04:4f:a1:dc:71:59:b4:
                    0c:44:f7:04:a2:d1:5b:24:67:f3:c8:3c:95:85:ac:
                    f5:8c:38:a6:81:43:26:ee:b9:b1:64:2a:db:4f:ce:
                    c9:31:73:b1:e8:57:a6:05:04:21:48:05:6b:f7:f1:
                    6e:47:44:81:d3:b9:1c:b0:cf:06:96:fc:be:bc:a6:
                    1c:cd:0f:7a:6d:bb:73:d8:e6:db:be:05:02:14:2f:
                    6f:cc:fb:d1:a5:5e:59:10:55:12:ec:07:04:dd:ce:
                    1b:99:26:f8:86:f3:24:02:62:b9:2f:52:27:31:44:
                    f8:7a:c9:a2:7f:68:d5:15:2e:f1:9f:5a:b4:d4:f5:
                    d3:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:82:8C:BF:87:46:7F:13:20:8C:55:23:59:59:38:D9:79:28:E0:0F
            X509v3 Authority Key Identifier:
                keyid:7D:09:3F:6C:89:07:8D:CE:EF:67:BC:9C:08:16:E9:47:EC:15:B7:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQk_bIkHjc7vZ7ycCBbpR-wVt6w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2ab375-4598-49a1-a4a4-c1b562c57703/1/fQk_bIkHjc7vZ7ycCBbpR-wVt6w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2ab375-4598-49a1-a4a4-c1b562c57703/1/fQk_bIkHjc7vZ7ycCBbpR-wVt6w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:b8:f5:25:aa:27:74:97:ba:b2:28:5b:46:9c:72:b8:14:3a:
         d0:99:ed:a5:8c:41:a0:d2:e5:77:26:8a:b6:7e:ae:2d:a6:68:
         85:0e:1d:f0:da:86:0d:31:e0:25:d2:b5:3d:7b:8b:78:df:b0:
         a7:d2:b0:fa:ac:94:33:7c:d0:8e:f3:2e:88:42:5b:55:2e:4b:
         f9:0b:2a:b8:61:9f:86:fc:0e:c9:dc:d6:03:59:e7:b2:13:2f:
         b7:d2:d1:58:1b:64:f5:83:63:70:aa:10:dd:10:f1:98:f4:72:
         42:5f:1c:36:e6:c1:ca:ed:26:72:81:8d:b3:1f:b0:f4:86:b6:
         64:9a:bc:81:3d:65:c2:5d:5e:84:23:49:8d:27:be:47:e0:b9:
         51:51:c1:26:3b:31:98:71:3c:c8:17:8e:ee:56:aa:1e:3a:b4:
         4e:d1:e5:44:a0:06:b6:57:14:97:3c:1e:9a:5e:25:01:67:64:
         66:e1:64:bd:b2:1c:88:81:be:35:38:45:4e:c1:a7:f2:02:99:
         e1:76:8d:b9:10:5b:6a:b5:b1:96:ea:46:2d:8c:4e:f2:78:f3:
         05:37:1b:63:ba:31:5d:1d:ba:f3:5b:db:1e:f0:81:12:69:55:
         90:0b:15:b8:56:13:93:14:30:81:6e:a0:f7:f0:68:26:11:22:
         c3:70:86:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 03:01:28 2025 by rpki-client