Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/fe224f-25fa-420c-89af-7bcea3d38450/1/z379uI0GEsUL1dfhZa94NPDdPwQ.mft
File:                     z379uI0GEsUL1dfhZa94NPDdPwQ.mft (raw, json)
Hash identifier:          h/tjLGmPAY6ZDT3UdKX7IH9IbcZDSIxQ2nRYRr1LacQ=
Subject key identifier:   1A:CD:C5:B1:54:30:F2:F0:80:F1:C5:8A:DA:66:D1:A0:0F:7A:3B:68
Authority key identifier: CF:7E:FD:B8:8D:06:12:C5:0B:D5:D7:E1:65:AF:78:34:F0:DD:3F:04
Certificate issuer:       /CN=cf7efdb88d0612c50bd5d7e165af7834f0dd3f04
Certificate serial:       0197789CA0A8589360E465DF1F7471CC0F11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z379uI0GEsUL1dfhZa94NPDdPwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/fe224f-25fa-420c-89af-7bcea3d38450/1/z379uI0GEsUL1dfhZa94NPDdPwQ.mft
Manifest number:          49
Signing time:             Mon 16 Jun 2025 12:00:20 +0000
Manifest this update:     Mon 16 Jun 2025 12:00:20 +0000
Manifest next update:     Tue 17 Jun 2025 12:00:20 +0000
Files and hashes:         1: z379uI0GEsUL1dfhZa94NPDdPwQ.crl (hash: djUpSIdft8O26LJ96Wr+4KaPTWOfHEDvIIviKKwYeCQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/fe224f-25fa-420c-89af-7bcea3d38450/1/z379uI0GEsUL1dfhZa94NPDdPwQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/fe224f-25fa-420c-89af-7bcea3d38450/1/z379uI0GEsUL1dfhZa94NPDdPwQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z379uI0GEsUL1dfhZa94NPDdPwQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:78:9c:a0:a8:58:93:60:e4:65:df:1f:74:71:cc:0f:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf7efdb88d0612c50bd5d7e165af7834f0dd3f04
        Validity
            Not Before: Jun 16 12:00:20 2025 GMT
            Not After : Jun 17 12:00:20 2025 GMT
        Subject: CN=1acdc5b15430f2f080f1c58ada66d1a00f7a3b68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9e:65:88:1a:72:84:dc:37:85:4c:b2:db:f4:
                    ed:b3:62:34:cf:81:29:d7:92:17:29:2e:57:1b:3f:
                    d4:9a:9b:4f:5c:20:8a:e9:4a:3f:49:67:51:5a:36:
                    1b:a3:01:bc:ca:8e:46:76:dd:ec:2f:84:ec:f9:49:
                    b9:93:cd:ea:c3:0f:7b:d2:6d:09:b2:91:92:2b:dd:
                    9e:fd:33:f2:52:68:0b:42:cc:8d:3d:fc:9a:fe:c6:
                    96:f4:d2:29:c5:3c:35:0b:85:d7:7f:89:cd:3e:80:
                    02:ed:5f:60:2c:97:43:76:fd:3f:2b:f4:19:97:0d:
                    f3:73:3a:dc:4f:1f:e8:ab:8a:e9:27:73:22:54:b2:
                    f0:b1:51:ac:b1:e3:77:0a:d3:25:70:76:5b:7e:7c:
                    3f:51:de:10:a5:e7:cf:0f:08:1c:64:18:2c:ed:f9:
                    b6:fb:06:c4:fd:0f:36:50:90:e2:07:79:f2:d9:1a:
                    7b:0e:97:d5:97:9b:5b:11:6b:5a:42:b6:d0:ff:63:
                    4f:07:25:1f:46:d4:bd:9c:37:01:0e:43:0f:c1:ce:
                    04:45:1a:5d:33:3a:b7:ac:ab:c6:ea:9e:a0:7b:33:
                    2d:06:89:1b:02:8f:6d:a1:ab:76:93:af:17:bd:54:
                    9f:40:48:0c:04:b2:a4:06:a5:13:af:55:79:50:f1:
                    4d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:CD:C5:B1:54:30:F2:F0:80:F1:C5:8A:DA:66:D1:A0:0F:7A:3B:68
            X509v3 Authority Key Identifier:
                keyid:CF:7E:FD:B8:8D:06:12:C5:0B:D5:D7:E1:65:AF:78:34:F0:DD:3F:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z379uI0GEsUL1dfhZa94NPDdPwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/fe224f-25fa-420c-89af-7bcea3d38450/1/z379uI0GEsUL1dfhZa94NPDdPwQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/fe224f-25fa-420c-89af-7bcea3d38450/1/z379uI0GEsUL1dfhZa94NPDdPwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:ab:6d:a1:ff:6c:0f:c2:18:a9:c9:07:eb:c0:08:f1:73:4e:
         8a:c0:04:b0:bf:0a:a0:e0:a3:93:c6:8c:90:1a:82:8a:a0:1e:
         db:34:f9:9d:06:ab:9b:dd:ac:8a:41:79:6c:14:a5:71:33:77:
         c2:28:21:a9:99:0f:b0:55:4a:7a:60:de:8d:2e:17:29:c2:e6:
         85:72:b1:ab:3e:ab:bc:a6:78:7e:44:60:6b:17:b7:dd:8f:04:
         ec:9c:d4:9e:d5:65:e0:e4:82:5a:f9:2f:6c:a1:cb:38:e1:b7:
         45:e4:dd:41:0b:09:86:1f:0a:58:86:87:8b:04:64:f3:08:bd:
         3c:c1:7d:f6:48:b4:14:ea:ae:7b:7d:78:c0:28:d2:7b:c9:ba:
         16:e6:02:f4:47:79:80:df:e2:38:36:ff:bd:18:99:dc:e5:9b:
         ca:92:56:27:88:de:56:e3:8f:3d:9a:22:36:17:ae:55:d6:f5:
         08:2c:1e:d7:83:30:59:d4:7b:2c:f6:24:bc:3b:5f:a0:2b:c7:
         86:98:3e:6a:cf:3b:54:55:eb:22:59:0a:66:93:e6:60:69:ac:
         36:0c:7c:21:29:77:f0:69:45:5c:4a:52:f9:9a:e0:27:b3:75:
         08:47:ec:fc:4b:9b:5d:e7:db:76:ac:08:a1:64:51:bf:7d:ff:
         47:70:21:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:07:54 2025 by rpki-client