Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/19a307-ecba-4158-a2d1-c3b46ac9f26d/1/OFt-lPpg22hRcc8TabHO-24g8zQ.mft
File:                     OFt-lPpg22hRcc8TabHO-24g8zQ.mft (raw, json)
Hash identifier:          7Eb9jWl6RObY+kDfr7nWFhOF86ld/ZHzis+R90Jhol0=
Subject key identifier:   B8:EF:A4:91:7A:E5:D5:4D:D4:DD:09:83:35:7C:81:5A:DD:25:50:29
Authority key identifier: 38:5B:7E:94:FA:60:DB:68:51:71:CF:13:69:B1:CE:FB:6E:20:F3:34
Certificate issuer:       /CN=385b7e94fa60db685171cf1369b1cefb6e20f334
Certificate serial:       01976F2C2E9BF45273E5980BA627245738FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OFt-lPpg22hRcc8TabHO-24g8zQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/19a307-ecba-4158-a2d1-c3b46ac9f26d/1/OFt-lPpg22hRcc8TabHO-24g8zQ.mft
Manifest number:          04E3
Signing time:             Sat 14 Jun 2025 16:00:55 +0000
Manifest this update:     Sat 14 Jun 2025 16:00:55 +0000
Manifest next update:     Sun 15 Jun 2025 16:00:55 +0000
Files and hashes:         1: OFt-lPpg22hRcc8TabHO-24g8zQ.crl (hash: vNPXsADYAFLNN4IkyWC2Q8HPnXYazWt8DQAS2bZYDWw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/19a307-ecba-4158-a2d1-c3b46ac9f26d/1/OFt-lPpg22hRcc8TabHO-24g8zQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/19a307-ecba-4158-a2d1-c3b46ac9f26d/1/OFt-lPpg22hRcc8TabHO-24g8zQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OFt-lPpg22hRcc8TabHO-24g8zQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 16:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:2c:2e:9b:f4:52:73:e5:98:0b:a6:27:24:57:38:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=385b7e94fa60db685171cf1369b1cefb6e20f334
        Validity
            Not Before: Jun 14 16:00:55 2025 GMT
            Not After : Jun 15 16:00:55 2025 GMT
        Subject: CN=b8efa4917ae5d54dd4dd0983357c815add255029
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:49:79:bf:5f:aa:5f:60:f3:19:bb:c6:2f:6e:
                    4e:4d:5f:28:5c:cc:c0:b7:29:66:ac:68:4a:67:22:
                    84:f5:c4:7e:a6:ab:35:88:d8:46:fa:3e:5b:27:2e:
                    45:d9:df:65:1e:04:52:34:57:29:b4:b0:62:9f:56:
                    da:78:41:b9:ac:59:8a:5b:51:0b:ca:07:4f:aa:fe:
                    bb:ea:5a:01:a9:cc:1f:ff:0c:09:2b:27:d0:f0:aa:
                    e4:db:bb:44:f2:ef:e7:c8:19:23:8e:7e:1c:90:40:
                    32:fd:84:23:76:99:5c:5d:74:c7:ae:dc:e3:6c:c5:
                    7a:e4:2a:81:96:be:07:66:dd:6c:13:1e:a4:c7:75:
                    32:5d:d2:b7:d9:54:f3:28:cd:08:c9:dc:fd:82:13:
                    fb:6f:f7:48:48:c3:99:07:77:d2:18:bd:13:58:0d:
                    80:f6:f9:e5:71:84:1d:e5:d0:0c:70:a9:8e:1c:05:
                    1a:18:c1:c8:57:cb:88:de:67:b5:43:da:35:70:cd:
                    79:6b:2a:9c:dc:99:35:5d:dc:0c:18:65:78:66:d8:
                    a6:97:d5:94:e7:91:8b:8a:27:ad:a3:7c:3e:2c:94:
                    80:06:c4:ff:1d:d8:28:e1:d5:c3:62:eb:a1:ba:fd:
                    ac:ab:b8:74:1f:f1:50:07:f2:fe:3c:ca:f1:40:cf:
                    14:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:EF:A4:91:7A:E5:D5:4D:D4:DD:09:83:35:7C:81:5A:DD:25:50:29
            X509v3 Authority Key Identifier:
                keyid:38:5B:7E:94:FA:60:DB:68:51:71:CF:13:69:B1:CE:FB:6E:20:F3:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFt-lPpg22hRcc8TabHO-24g8zQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/19a307-ecba-4158-a2d1-c3b46ac9f26d/1/OFt-lPpg22hRcc8TabHO-24g8zQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/19a307-ecba-4158-a2d1-c3b46ac9f26d/1/OFt-lPpg22hRcc8TabHO-24g8zQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:d2:ab:c5:48:f3:9b:ff:04:92:55:9d:0a:d4:63:53:cb:06:
         3b:cb:7f:35:26:0c:69:dc:8d:0c:84:8e:d0:8d:2f:d2:ee:47:
         7a:33:3e:55:34:45:c7:cb:24:6a:a3:b7:86:fd:c9:67:b5:38:
         19:27:06:1e:23:e5:bb:47:22:13:f6:4f:66:13:53:53:38:50:
         d8:7e:e5:ce:25:93:c9:0a:ca:db:fb:dc:a6:e5:12:a5:26:5d:
         56:12:8d:31:70:d4:19:05:2b:8d:f2:69:3b:1a:ea:f0:cc:1c:
         36:ec:14:f7:bd:c0:ed:a4:c5:ee:d1:8e:2a:13:f5:76:e2:85:
         0d:39:24:54:4a:b1:23:1c:ce:c3:be:23:fa:11:8c:6b:6a:36:
         14:10:db:3b:be:a4:94:b3:44:ff:79:2e:ef:54:db:c9:80:4b:
         07:03:4b:88:80:b9:73:a1:a6:9a:f7:0b:c4:94:25:e9:c8:30:
         10:e4:fc:70:2e:be:54:f1:ae:59:4c:3c:21:9d:30:14:ae:63:
         1e:18:04:f8:40:93:4d:bd:3d:4a:17:ab:c8:8d:70:1d:e9:a2:
         73:df:0d:13:a3:b7:0c:db:8e:91:ac:ac:c4:7c:89:41:24:01:
         f5:af:f2:f7:9d:15:a0:a1:90:d4:8c:ea:b9:86:01:14:32:76:
         f9:28:69:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:51:35 2025 by rpki-client