Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/ca5b7b-b5d6-40af-877c-1a7f84b40792/1/R8x-nha98tTmHHXufgADPnZvmJc.mft
File:                     R8x-nha98tTmHHXufgADPnZvmJc.mft (raw, json)
Hash identifier:          fLtWEfQ+npBamlO0Ri/APPcbDXHgrsFNl9Lh15PDGGo=
Subject key identifier:   B1:3C:F5:53:54:6F:0E:33:06:07:E2:36:EA:8B:3E:3C:94:4B:B4:9D
Authority key identifier: 47:CC:7E:9E:16:BD:F2:D4:E6:1C:75:EE:7E:00:03:3E:76:6F:98:97
Certificate issuer:       /CN=47cc7e9e16bdf2d4e61c75ee7e00033e766f9897
Certificate serial:       019770756603DD9741433C743CDD7DD17F68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R8x-nha98tTmHHXufgADPnZvmJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/ca5b7b-b5d6-40af-877c-1a7f84b40792/1/R8x-nha98tTmHHXufgADPnZvmJc.mft
Manifest number:          158E
Signing time:             Sat 14 Jun 2025 22:00:31 +0000
Manifest this update:     Sat 14 Jun 2025 22:00:31 +0000
Manifest next update:     Sun 15 Jun 2025 22:00:31 +0000
Files and hashes:         1: R8x-nha98tTmHHXufgADPnZvmJc.crl (hash: I5qoIKnrLqIBIqL+0K9vbcr3W3oDIedsRwdMHF0xlvw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/ca5b7b-b5d6-40af-877c-1a7f84b40792/1/R8x-nha98tTmHHXufgADPnZvmJc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/ca5b7b-b5d6-40af-877c-1a7f84b40792/1/R8x-nha98tTmHHXufgADPnZvmJc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R8x-nha98tTmHHXufgADPnZvmJc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:75:66:03:dd:97:41:43:3c:74:3c:dd:7d:d1:7f:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47cc7e9e16bdf2d4e61c75ee7e00033e766f9897
        Validity
            Not Before: Jun 14 22:00:31 2025 GMT
            Not After : Jun 15 22:00:31 2025 GMT
        Subject: CN=b13cf553546f0e330607e236ea8b3e3c944bb49d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c3:aa:8d:01:92:05:4e:ba:1c:57:66:d7:ab:
                    96:aa:25:4c:15:af:30:49:69:83:d2:1a:fe:a4:f9:
                    fa:65:af:98:f9:f4:63:8b:ed:35:45:89:07:67:2f:
                    62:50:84:eb:df:32:fe:96:c7:3f:99:35:01:fe:d2:
                    9a:e8:f5:93:46:02:e7:b0:12:75:da:f2:aa:82:d3:
                    65:8c:96:1c:d1:64:85:f8:a3:b3:c4:ad:63:ba:b7:
                    7f:a4:37:b1:82:b9:93:c2:5b:0a:b1:53:7b:12:71:
                    2e:d1:74:67:18:10:fa:cf:f2:03:fa:86:9b:6d:e9:
                    f9:73:6e:eb:23:eb:cc:87:0d:ac:b6:09:50:b4:66:
                    4e:66:9e:1e:45:10:0e:6e:84:5e:37:93:21:d4:4a:
                    95:0a:16:33:92:1b:22:36:73:a5:32:72:02:69:e5:
                    27:d1:38:6e:55:e1:65:9d:01:35:d5:c6:8e:14:92:
                    9c:53:11:94:a1:ce:c5:6c:12:df:29:f0:ec:11:29:
                    8b:c2:8b:c1:68:b7:ea:a8:3b:52:c8:ff:e7:1b:bc:
                    35:4c:f4:8a:d3:d9:1a:00:64:24:0e:c1:03:36:31:
                    82:3b:4d:66:2a:14:72:35:2e:79:ef:76:f2:b2:30:
                    b8:e9:9d:97:4c:bd:e0:0e:09:6c:01:42:55:c0:c7:
                    7f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:3C:F5:53:54:6F:0E:33:06:07:E2:36:EA:8B:3E:3C:94:4B:B4:9D
            X509v3 Authority Key Identifier:
                keyid:47:CC:7E:9E:16:BD:F2:D4:E6:1C:75:EE:7E:00:03:3E:76:6F:98:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R8x-nha98tTmHHXufgADPnZvmJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ca5b7b-b5d6-40af-877c-1a7f84b40792/1/R8x-nha98tTmHHXufgADPnZvmJc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ca5b7b-b5d6-40af-877c-1a7f84b40792/1/R8x-nha98tTmHHXufgADPnZvmJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:b9:90:0c:19:97:a0:0e:e8:c2:4a:d8:4d:e1:f7:e0:c5:fc:
         41:0e:76:9d:85:95:7b:5f:5c:63:36:15:fb:ac:b7:e4:9f:79:
         f7:14:e8:17:0c:11:a5:fd:2f:9b:08:b6:bf:0b:50:0f:f0:a1:
         f9:4e:ab:ae:05:b4:b5:37:f2:31:5a:88:21:08:d5:24:de:44:
         be:fd:7d:9a:f8:af:56:ff:2b:a1:76:22:5b:e3:bc:0e:29:d0:
         1f:d1:da:28:8f:75:14:16:ad:5e:cf:e6:eb:46:63:da:90:be:
         af:da:06:b1:c3:24:81:2b:e5:69:36:cf:a3:93:3f:40:6d:bb:
         0a:dc:00:9a:4a:26:75:d3:6c:e2:18:a5:0c:bc:75:65:d6:c8:
         0d:03:75:63:eb:23:c8:d4:30:c4:ee:af:94:ac:98:c6:27:f8:
         05:7e:86:3b:b2:0f:68:10:8c:e3:bd:64:44:dc:75:9a:13:26:
         65:06:54:57:83:71:91:6a:91:86:c2:d2:c9:9b:36:e1:e2:7d:
         c6:3a:e4:33:79:07:4c:86:78:0d:eb:6b:fc:dc:9c:da:3c:96:
         5f:c2:4c:ec:d6:e2:c5:66:eb:e9:76:ff:6c:33:76:07:c5:01:
         2e:5c:7a:53:8c:1e:27:fb:3a:b4:84:e5:52:79:b8:6e:43:ec:
         6b:2f:2c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:03:55 2025 by rpki-client