Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/8efc0f-b968-46ed-9924-dd185c7355b8/1/leBbGUrhvlKWmltBBFV_8ELBYCo.mft
File:                     leBbGUrhvlKWmltBBFV_8ELBYCo.mft (raw, json)
Hash identifier:          rcSg58Aiev3hAzerXlhkOntbFrCGs8MaOdG/vOGw/wo=
Subject key identifier:   1D:A5:00:F5:04:E6:FD:E3:8B:F3:CC:21:91:73:65:4B:6B:E3:D5:1E
Authority key identifier: 95:E0:5B:19:4A:E1:BE:52:96:9A:5B:41:04:55:7F:F0:42:C1:60:2A
Certificate issuer:       /CN=95e05b194ae1be52969a5b4104557ff042c1602a
Certificate serial:       019768F2FFA418487A2F1D27FD3B3BEB60A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/leBbGUrhvlKWmltBBFV_8ELBYCo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/8efc0f-b968-46ed-9924-dd185c7355b8/1/leBbGUrhvlKWmltBBFV_8ELBYCo.mft
Manifest number:          03E4
Signing time:             Fri 13 Jun 2025 11:00:44 +0000
Manifest this update:     Fri 13 Jun 2025 11:00:44 +0000
Manifest next update:     Sat 14 Jun 2025 11:00:44 +0000
Files and hashes:         1: leBbGUrhvlKWmltBBFV_8ELBYCo.crl (hash: w0+d06erpYxkybu7GCs0ArPPZ7g4s6rCiWmPZoWyqCo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/8efc0f-b968-46ed-9924-dd185c7355b8/1/leBbGUrhvlKWmltBBFV_8ELBYCo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/8efc0f-b968-46ed-9924-dd185c7355b8/1/leBbGUrhvlKWmltBBFV_8ELBYCo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/leBbGUrhvlKWmltBBFV_8ELBYCo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 11:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:f2:ff:a4:18:48:7a:2f:1d:27:fd:3b:3b:eb:60:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e05b194ae1be52969a5b4104557ff042c1602a
        Validity
            Not Before: Jun 13 11:00:44 2025 GMT
            Not After : Jun 14 11:00:44 2025 GMT
        Subject: CN=1da500f504e6fde38bf3cc219173654b6be3d51e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7d:69:3e:ec:ae:a3:c5:d3:67:6b:35:64:c4:
                    30:81:83:5f:7e:21:8f:66:31:4a:43:b1:61:4b:9f:
                    32:cc:db:51:c8:98:71:57:5f:3a:83:9d:ae:c5:92:
                    60:c5:9c:c3:b3:1d:49:9c:93:a3:2d:d7:5c:1f:29:
                    51:c1:42:86:0f:78:a5:c2:06:58:ae:2e:76:26:7f:
                    35:82:c9:6e:3b:5c:49:27:20:a0:21:e5:95:17:f8:
                    c9:38:53:4d:dc:67:98:91:18:5f:5d:b2:b4:95:bc:
                    33:06:32:64:5b:59:0c:41:d7:2e:9c:74:a6:c5:85:
                    40:33:4e:95:af:30:33:5c:ba:83:08:f4:de:65:dd:
                    63:b1:4b:d7:ab:5d:87:98:40:6f:17:5c:59:89:1a:
                    ec:0a:a9:c0:f5:9b:90:1f:07:f0:8e:ed:5b:0a:ae:
                    fb:ae:07:fd:4e:dd:ef:22:70:04:b3:9c:09:1d:d3:
                    18:e2:64:92:16:80:54:d7:7e:e9:2f:09:70:26:8a:
                    0e:62:eb:f2:46:06:60:08:b5:a7:cc:21:28:4b:52:
                    50:e6:c5:be:e3:b3:2b:5d:37:8a:34:14:51:ce:22:
                    31:03:df:52:f9:4a:2e:45:dd:07:de:9d:67:f8:dc:
                    1f:de:f2:66:c5:85:98:e3:3e:4f:52:ee:8a:82:2c:
                    0a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:A5:00:F5:04:E6:FD:E3:8B:F3:CC:21:91:73:65:4B:6B:E3:D5:1E
            X509v3 Authority Key Identifier:
                keyid:95:E0:5B:19:4A:E1:BE:52:96:9A:5B:41:04:55:7F:F0:42:C1:60:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/leBbGUrhvlKWmltBBFV_8ELBYCo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8efc0f-b968-46ed-9924-dd185c7355b8/1/leBbGUrhvlKWmltBBFV_8ELBYCo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8efc0f-b968-46ed-9924-dd185c7355b8/1/leBbGUrhvlKWmltBBFV_8ELBYCo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:68:03:ed:f8:a3:2e:50:6a:05:3d:f1:77:79:b9:d0:c0:c1:
         d5:42:54:45:f4:87:4c:c6:48:5c:29:27:f5:d0:d7:07:5b:9e:
         e2:70:c1:fd:6e:6e:bc:4f:ac:cc:56:31:a1:df:d4:84:18:e6:
         b8:1e:99:c0:70:fb:13:85:d1:3c:ab:b9:2f:f7:da:1c:b8:45:
         73:c6:7d:a4:bf:01:4d:b1:69:9c:e6:f1:80:f7:1d:33:9f:2a:
         80:37:8c:82:95:90:c7:89:10:a4:69:d0:61:23:ad:d0:01:18:
         ac:ba:d0:93:54:37:5f:af:50:ca:4a:9f:ce:79:93:60:5a:66:
         ba:64:76:d5:ae:6e:de:2a:3d:57:c5:7a:50:f8:20:6f:9d:9a:
         6f:47:f5:ef:9f:4b:51:72:b0:da:33:53:22:6f:fa:27:31:36:
         8f:3d:b9:bd:de:53:0c:b1:78:87:03:0c:9a:ca:41:d1:4c:8d:
         a8:a2:54:64:1b:e1:8d:c5:ff:08:dc:41:23:f9:79:78:2a:0c:
         63:fe:b7:5e:74:3f:46:88:88:fc:fd:33:75:6e:d7:14:e8:6d:
         72:ee:1f:6f:5c:1a:f8:ad:a6:f6:8e:89:e6:cc:4a:db:64:a8:
         7d:ff:a8:cb:ae:df:b6:3d:92:b7:2e:d9:4e:35:12:17:2b:6c:
         17:56:84:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:23:22 2025 by rpki-client