Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/6e1003-819a-4392-938a-5ae53c21b8cd/1/rD5tWdR-c37cMaZfMQUUzUuV04c.mft
File:                     rD5tWdR-c37cMaZfMQUUzUuV04c.mft (raw, json)
Hash identifier:          GRNh4kgdwOr4DKblYMqIBEiTCL+YhWX7bWgVyFkrQzU=
Subject key identifier:   18:19:42:35:32:78:4C:D5:5A:DC:B5:D5:31:A3:D6:EB:55:A6:52:CD
Authority key identifier: AC:3E:6D:59:D4:7E:73:7E:DC:31:A6:5F:31:05:14:CD:4B:95:D3:87
Certificate issuer:       /CN=ac3e6d59d47e737edc31a65f310514cd4b95d387
Certificate serial:       01976BBD8097A8FE3BAEB35DBC8D1C50C6D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rD5tWdR-c37cMaZfMQUUzUuV04c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/6e1003-819a-4392-938a-5ae53c21b8cd/1/rD5tWdR-c37cMaZfMQUUzUuV04c.mft
Manifest number:          1589
Signing time:             Sat 14 Jun 2025 00:01:10 +0000
Manifest this update:     Sat 14 Jun 2025 00:01:10 +0000
Manifest next update:     Sun 15 Jun 2025 00:01:10 +0000
Files and hashes:         1: rD5tWdR-c37cMaZfMQUUzUuV04c.crl (hash: 1I50iO6GYHj+qKhyKLdqwQN++mxhBScZQP/tGyxL+40=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/6e1003-819a-4392-938a-5ae53c21b8cd/1/rD5tWdR-c37cMaZfMQUUzUuV04c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/6e1003-819a-4392-938a-5ae53c21b8cd/1/rD5tWdR-c37cMaZfMQUUzUuV04c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rD5tWdR-c37cMaZfMQUUzUuV04c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 00:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:bd:80:97:a8:fe:3b:ae:b3:5d:bc:8d:1c:50:c6:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac3e6d59d47e737edc31a65f310514cd4b95d387
        Validity
            Not Before: Jun 14 00:01:10 2025 GMT
            Not After : Jun 15 00:01:10 2025 GMT
        Subject: CN=1819423532784cd55adcb5d531a3d6eb55a652cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f1:79:57:97:e9:23:0e:3e:e6:15:07:f5:3b:
                    f0:74:e8:fe:db:54:27:2b:cd:bf:c4:d2:07:b8:88:
                    f0:e2:0d:b1:9f:4d:ab:f2:d8:bc:2e:f7:50:58:89:
                    69:2d:47:0e:63:4f:78:ef:26:e9:f1:25:93:4a:be:
                    c6:a6:08:ba:f6:2e:63:40:cb:d8:45:9b:d1:ce:b7:
                    59:94:8d:6c:cd:64:7e:1e:43:50:af:98:b5:b0:5b:
                    0c:88:b6:b0:6c:f4:a4:01:aa:a1:ae:07:41:28:ea:
                    df:75:89:a3:29:f5:50:29:dc:7c:2f:9b:5c:83:58:
                    83:33:5c:04:a7:a0:9b:7f:f1:7f:51:36:31:62:1b:
                    37:ea:c2:f6:66:67:b7:8b:9f:31:da:d6:83:45:e3:
                    34:97:5e:28:26:22:5f:d4:dc:fc:ce:2c:bf:dd:10:
                    61:61:38:93:1f:8f:f1:13:10:8a:dd:8b:d7:85:cb:
                    16:46:0e:8c:82:2d:bb:73:45:d0:99:e0:73:e5:e8:
                    a9:12:05:4a:91:b2:0e:ea:52:36:b4:63:ac:08:3f:
                    22:e0:1b:18:0b:1a:c3:61:e8:23:b3:13:4b:80:1b:
                    14:85:e8:63:d2:f3:25:d2:51:c6:6b:8e:9d:85:dd:
                    6a:8e:06:b6:64:d1:9d:c6:bc:ef:4e:c7:45:69:f3:
                    5e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:19:42:35:32:78:4C:D5:5A:DC:B5:D5:31:A3:D6:EB:55:A6:52:CD
            X509v3 Authority Key Identifier:
                keyid:AC:3E:6D:59:D4:7E:73:7E:DC:31:A6:5F:31:05:14:CD:4B:95:D3:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rD5tWdR-c37cMaZfMQUUzUuV04c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6e1003-819a-4392-938a-5ae53c21b8cd/1/rD5tWdR-c37cMaZfMQUUzUuV04c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6e1003-819a-4392-938a-5ae53c21b8cd/1/rD5tWdR-c37cMaZfMQUUzUuV04c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:fc:48:0f:47:0a:08:08:e5:1f:a5:37:f0:cc:eb:6b:90:eb:
         f8:40:35:3b:17:ae:b0:78:20:87:71:55:1e:ac:01:f6:b7:73:
         c3:f7:1f:4c:db:c4:8a:ec:5b:39:42:2b:85:f8:6a:8c:2a:ab:
         3c:71:b8:9a:51:b0:82:22:09:26:0c:99:e4:5e:16:d6:68:d2:
         c5:a9:cd:ec:34:9c:0c:7c:ae:01:20:6e:f5:4f:84:33:9d:68:
         78:8a:32:cb:18:aa:eb:71:05:96:29:9c:75:3c:11:05:d6:d6:
         52:4f:20:dd:a4:85:c2:9e:4a:8e:0f:2f:94:b2:f4:6a:14:16:
         8d:73:d1:db:4d:b9:c1:d1:45:44:ca:99:2b:43:a1:06:89:3d:
         38:a9:98:42:4e:8f:77:e5:e1:7c:46:4b:77:dc:6a:57:d1:b9:
         ef:cc:62:e6:8e:8d:77:fd:8c:3e:64:da:94:0f:15:10:eb:d4:
         c1:35:ea:6a:ab:88:12:d7:9d:98:2e:5a:79:b3:be:59:0b:98:
         0e:d7:10:be:8b:0d:52:63:ee:02:7f:16:b5:9d:23:95:82:9b:
         91:95:ee:6b:1d:01:71:a1:05:07:0f:f1:58:55:4c:48:64:77:
         61:c0:8e:c4:5b:c4:89:4f:cc:be:bc:ad:25:e9:db:4c:a9:0c:
         5a:ac:df:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:10:10 2025 by rpki-client