Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/eBd1rflxcuL2j8kQUwnTdTuh9M0.mft
File:                     eBd1rflxcuL2j8kQUwnTdTuh9M0.mft (raw, json)
Hash identifier:          4XBMn0sEh6yNUEzPUxir8m8dJJ1zg51gft70lUeKXAI=
Subject key identifier:   BB:3F:9C:36:DC:51:E2:06:FF:56:60:49:E1:4C:15:76:26:50:08:8C
Authority key identifier: 78:17:75:AD:F9:71:72:E2:F6:8F:C9:10:53:09:D3:75:3B:A1:F4:CD
Certificate issuer:       /CN=781775adf97172e2f68fc9105309d3753ba1f4cd
Certificate serial:       01976D3DF7D7A8C8114CA5B07248A1EA2344
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eBd1rflxcuL2j8kQUwnTdTuh9M0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/eBd1rflxcuL2j8kQUwnTdTuh9M0.mft
Manifest number:          158B
Signing time:             Sat 14 Jun 2025 07:01:06 +0000
Manifest this update:     Sat 14 Jun 2025 07:01:06 +0000
Manifest next update:     Sun 15 Jun 2025 07:01:06 +0000
Files and hashes:         1: eBd1rflxcuL2j8kQUwnTdTuh9M0.crl (hash: 4eVpUQP+AALpQhKddrhWJ5HDj3w1zMDJdQYgkoktYu0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/eBd1rflxcuL2j8kQUwnTdTuh9M0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/eBd1rflxcuL2j8kQUwnTdTuh9M0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eBd1rflxcuL2j8kQUwnTdTuh9M0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:3d:f7:d7:a8:c8:11:4c:a5:b0:72:48:a1:ea:23:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=781775adf97172e2f68fc9105309d3753ba1f4cd
        Validity
            Not Before: Jun 14 07:01:06 2025 GMT
            Not After : Jun 15 07:01:06 2025 GMT
        Subject: CN=bb3f9c36dc51e206ff566049e14c15762650088c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:bd:f7:09:b2:22:14:9e:98:57:1b:e3:d3:0b:
                    a2:8e:18:95:7c:17:ee:fd:2e:54:8c:91:cf:48:32:
                    ab:9a:cc:5b:26:19:bd:93:0c:79:5a:4f:2b:d7:f7:
                    57:d3:8d:92:c6:14:27:b2:6a:3f:de:65:65:c3:b9:
                    38:37:ac:d5:7c:6a:eb:4c:e9:fa:cf:64:6e:90:33:
                    c2:62:73:15:29:0a:b5:4b:ea:c8:33:ea:4a:bd:4e:
                    1a:c3:d5:78:0d:c1:f8:ed:ac:c4:ba:89:3c:5d:e0:
                    6f:cb:24:c8:a5:43:f3:53:bd:66:09:0f:c3:8f:a4:
                    92:9b:18:f5:e0:3a:18:36:18:22:f8:41:2f:55:8a:
                    2f:71:7e:ba:0d:f3:0b:03:0d:61:d8:e4:7b:d6:dc:
                    f3:e8:9d:04:f5:29:38:d5:42:39:94:6d:8b:9d:a9:
                    60:bf:8b:58:6d:8e:37:25:9e:51:27:ff:c0:19:f9:
                    e8:dc:92:fe:c4:28:f6:62:e0:f4:5e:1b:1b:87:90:
                    68:d4:9a:1d:f1:2b:da:ea:ec:ee:9d:72:89:63:81:
                    f1:28:f6:02:ed:5a:c3:52:54:80:60:c0:0e:22:eb:
                    8f:8b:22:e4:65:e2:97:1b:52:2d:f8:be:78:8b:29:
                    dc:27:9f:57:b8:07:40:fe:b2:10:f2:55:0a:cc:ce:
                    3e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:3F:9C:36:DC:51:E2:06:FF:56:60:49:E1:4C:15:76:26:50:08:8C
            X509v3 Authority Key Identifier:
                keyid:78:17:75:AD:F9:71:72:E2:F6:8F:C9:10:53:09:D3:75:3B:A1:F4:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eBd1rflxcuL2j8kQUwnTdTuh9M0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/eBd1rflxcuL2j8kQUwnTdTuh9M0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/eBd1rflxcuL2j8kQUwnTdTuh9M0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:61:30:98:f8:a8:1d:52:3b:15:0f:50:ec:6f:01:36:38:4e:
         cb:53:bf:dc:c4:c4:70:c2:40:d9:4e:bd:ca:1e:71:59:b5:9c:
         f0:4c:bb:65:3a:d8:60:0e:b8:2b:47:1f:57:dd:0d:c9:a4:73:
         53:34:60:fc:74:48:15:9a:c0:bc:39:fc:42:6b:67:be:92:96:
         4e:98:6b:89:be:0c:1a:8b:fa:c4:82:85:6c:0b:65:92:4c:c2:
         a7:9b:a8:82:07:f3:97:36:3a:51:be:d2:5d:fb:20:9d:12:09:
         ce:9e:83:9a:0a:4e:02:49:db:64:32:42:1b:ae:37:be:a6:b4:
         e2:75:e8:8d:79:2f:1b:bd:17:85:0c:79:b4:c4:bd:68:2a:1d:
         e9:ad:42:41:a4:64:4d:a2:83:22:6c:7e:8d:a1:a8:d3:e9:1a:
         ab:c8:be:68:4e:cf:28:f2:da:11:25:5f:9a:82:16:4a:47:82:
         66:28:91:9f:df:06:0a:50:cf:69:f4:bf:77:f5:ee:ef:bb:53:
         98:2e:a5:91:76:de:9d:62:ff:3c:ab:3f:f7:fb:55:de:c1:60:
         75:90:e0:a3:3d:d1:e4:78:dd:a8:da:b4:cd:79:d6:26:20:2d:
         3f:03:b1:e8:ed:10:eb:53:f0:4b:d7:e7:69:f6:6c:df:c1:29:
         d3:89:df:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:50:11 2025 by rpki-client