Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft
File:                     A-7ifdtJC7lmnuug4RaUFkyi6Og.mft (raw, json)
Hash identifier:          KOePtA/c/2lFlqibccMTRxtzqmB2WJDZvlUtmLKK3y4=
Subject key identifier:   AC:3E:E4:6A:D2:39:F5:C6:0A:24:4B:F1:A4:D3:34:5E:DA:F9:65:A8
Authority key identifier: 03:EE:E2:7D:DB:49:0B:B9:66:9E:EB:A0:E1:16:94:16:4C:A2:E8:E8
Certificate issuer:       /CN=03eee27ddb490bb9669eeba0e11694164ca2e8e8
Certificate serial:       01977ED5E1E201571F0839275A9B5A6700C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A-7ifdtJC7lmnuug4RaUFkyi6Og.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft
Manifest number:          0254
Signing time:             Tue 17 Jun 2025 17:00:35 +0000
Manifest this update:     Tue 17 Jun 2025 17:00:35 +0000
Manifest next update:     Wed 18 Jun 2025 17:00:35 +0000
Files and hashes:         1: A-7ifdtJC7lmnuug4RaUFkyi6Og.crl (hash: TG1BqkwxTQ6I8MstBGF2xifc1KX2y0hbNBsWGomSUeA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A-7ifdtJC7lmnuug4RaUFkyi6Og.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 17:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7e:d5:e1:e2:01:57:1f:08:39:27:5a:9b:5a:67:00:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03eee27ddb490bb9669eeba0e11694164ca2e8e8
        Validity
            Not Before: Jun 17 17:00:35 2025 GMT
            Not After : Jun 18 17:00:35 2025 GMT
        Subject: CN=ac3ee46ad239f5c60a244bf1a4d3345edaf965a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0e:01:26:58:8e:9c:9e:53:94:79:6a:fe:ac:
                    37:31:77:57:8d:a3:ed:88:3a:97:d5:db:b2:b9:9c:
                    c1:26:d2:f5:2e:dc:0e:c5:ef:5f:1b:82:0f:56:dc:
                    2a:b2:1d:82:9a:cc:ac:ba:81:09:ea:97:fc:0c:4c:
                    b8:85:e3:cd:1e:72:4c:95:c7:4f:c5:08:4f:e2:b4:
                    97:b7:88:da:70:06:95:be:f5:32:06:65:70:bf:82:
                    7f:16:8b:b1:3c:97:d7:c4:3c:c4:9d:6c:55:57:e2:
                    fe:42:c2:f0:cc:98:55:5b:09:66:a5:29:e9:66:a6:
                    dc:7e:72:07:db:74:e4:0e:42:9d:0f:49:79:f5:93:
                    70:be:64:e2:d3:51:0f:69:f8:c1:32:cc:14:98:f8:
                    f5:dc:80:8b:36:99:01:99:3f:90:86:e1:78:20:b1:
                    f4:2e:72:49:6e:db:33:cc:ff:a3:15:c9:08:7e:fc:
                    55:44:1c:b8:04:98:8d:b7:a8:13:7f:b3:e1:36:70:
                    e5:be:b4:49:34:fe:4b:2a:be:7a:07:2c:25:31:f0:
                    e8:b6:0c:ea:e7:64:a5:7d:3d:d2:23:93:d2:a8:e1:
                    44:07:fd:e2:6c:ce:0a:54:6f:22:92:9b:76:3d:4e:
                    8b:95:cb:7b:21:82:04:dc:e8:84:1c:95:db:21:35:
                    64:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:3E:E4:6A:D2:39:F5:C6:0A:24:4B:F1:A4:D3:34:5E:DA:F9:65:A8
            X509v3 Authority Key Identifier:
                keyid:03:EE:E2:7D:DB:49:0B:B9:66:9E:EB:A0:E1:16:94:16:4C:A2:E8:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-7ifdtJC7lmnuug4RaUFkyi6Og.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:f1:1f:74:f9:6e:73:ca:81:2d:06:52:81:a1:96:89:3a:32:
         9b:49:c3:8f:ab:7a:bf:c9:38:6e:38:03:35:dc:d6:a4:b7:3c:
         77:ba:01:b7:1a:96:88:df:2a:0f:6f:e8:69:02:93:a2:e1:56:
         49:80:51:11:cb:65:7f:06:8c:50:4c:71:2a:7f:17:dd:10:00:
         0c:f4:73:2c:0b:49:05:fa:ee:8c:09:b2:10:88:d7:86:b4:97:
         aa:86:0e:0f:78:8e:82:84:96:e0:1e:9f:80:64:2d:a8:f8:f2:
         33:57:23:fc:64:7d:f0:16:b5:23:39:7b:f0:01:43:b1:24:5a:
         22:15:31:f6:17:9d:65:0a:0c:b7:f1:42:b0:a4:b4:72:3d:af:
         b2:e6:14:f9:b7:4e:ab:95:99:1e:67:af:f2:8e:b3:cb:b2:c6:
         76:c1:91:98:aa:b2:3d:e7:bc:7c:65:0f:60:ac:17:d6:95:10:
         d1:38:70:53:52:bc:1e:76:9c:db:62:31:e3:0f:3c:1e:09:28:
         93:c8:a2:ee:12:ad:c2:30:da:d0:00:bc:1d:56:bf:23:eb:f2:
         b1:1d:87:9e:b6:08:98:5a:bb:3d:ee:e2:b5:a9:23:19:4b:07:
         37:a2:15:e8:a9:e1:1f:e7:9d:8a:cc:30:cc:f7:1c:8f:88:f5:
         95:62:b7:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 03:03:21 2025 by rpki-client