Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/1c9754-32e9-4186-a691-dc3651ccf9ae/1/x3Kabs4tDr6bvl2NeWL3O9ySBKk.mft
File:                     x3Kabs4tDr6bvl2NeWL3O9ySBKk.mft (raw, json)
Hash identifier:          Vai0awd3OaKLdB4a4QLjg35kiobh3c4xrrohP3nA99A=
Subject key identifier:   8F:1E:6D:90:D1:5E:63:23:F0:AD:63:9F:A9:69:85:3C:6A:B4:4D:73
Authority key identifier: C7:72:9A:6E:CE:2D:0E:BE:9B:BE:5D:8D:79:62:F7:3B:DC:92:04:A9
Certificate issuer:       /CN=c7729a6ece2d0ebe9bbe5d8d7962f73bdc9204a9
Certificate serial:       01976D06A601FEBF0A75A7C64B6FEDB28D6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x3Kabs4tDr6bvl2NeWL3O9ySBKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/1c9754-32e9-4186-a691-dc3651ccf9ae/1/x3Kabs4tDr6bvl2NeWL3O9ySBKk.mft
Manifest number:          43
Signing time:             Sat 14 Jun 2025 06:00:41 +0000
Manifest this update:     Sat 14 Jun 2025 06:00:41 +0000
Manifest next update:     Sun 15 Jun 2025 06:00:41 +0000
Files and hashes:         1: x3Kabs4tDr6bvl2NeWL3O9ySBKk.crl (hash: CQkBhqBOZ/OR2okTvCHW0DJSMBsYYhvUfTLIYvDo/KM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/1c9754-32e9-4186-a691-dc3651ccf9ae/1/x3Kabs4tDr6bvl2NeWL3O9ySBKk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/1c9754-32e9-4186-a691-dc3651ccf9ae/1/x3Kabs4tDr6bvl2NeWL3O9ySBKk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x3Kabs4tDr6bvl2NeWL3O9ySBKk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:06:a6:01:fe:bf:0a:75:a7:c6:4b:6f:ed:b2:8d:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7729a6ece2d0ebe9bbe5d8d7962f73bdc9204a9
        Validity
            Not Before: Jun 14 06:00:41 2025 GMT
            Not After : Jun 15 06:00:41 2025 GMT
        Subject: CN=8f1e6d90d15e6323f0ad639fa969853c6ab44d73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:14:24:ad:0e:92:8e:0b:8f:66:7f:df:e6:03:
                    ca:ed:c7:fd:b6:dc:3f:fe:c1:7b:d9:10:48:00:53:
                    5e:04:a6:57:aa:75:45:24:6d:62:8c:86:91:d1:2f:
                    cb:0b:29:78:22:2c:d5:91:bb:dc:cc:8e:be:82:00:
                    1c:4b:5a:01:97:55:10:db:7c:c7:7e:c6:6f:9b:31:
                    05:a9:34:a1:f6:2d:32:31:58:d1:80:e4:1b:ec:45:
                    3e:8a:57:f3:7a:51:95:06:8c:a9:49:67:94:21:1e:
                    f0:9a:5d:5a:c5:c5:09:02:2f:ca:83:00:84:c7:3b:
                    2a:04:72:c9:55:4b:48:c1:29:52:9a:51:20:73:c6:
                    9a:9c:75:98:4d:27:30:6f:3e:cf:68:1f:09:a0:c5:
                    87:a9:2b:e0:eb:e9:88:38:3e:d5:d6:82:a2:cf:85:
                    27:4e:56:14:f8:93:ba:86:c2:3b:77:ef:3e:f8:44:
                    27:0d:36:cc:14:cf:87:0f:f9:92:cc:b4:2e:8e:d8:
                    b0:93:c0:4e:c1:7d:03:26:f0:dd:7a:7e:ff:d8:0a:
                    cb:c7:3e:34:88:b8:11:87:9e:b8:10:83:1b:ab:eb:
                    c1:08:80:69:8a:06:57:46:c8:75:84:36:3b:f3:31:
                    40:9f:39:96:43:37:ea:02:77:09:7f:03:ff:d8:bf:
                    c6:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:1E:6D:90:D1:5E:63:23:F0:AD:63:9F:A9:69:85:3C:6A:B4:4D:73
            X509v3 Authority Key Identifier:
                keyid:C7:72:9A:6E:CE:2D:0E:BE:9B:BE:5D:8D:79:62:F7:3B:DC:92:04:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3Kabs4tDr6bvl2NeWL3O9ySBKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/1c9754-32e9-4186-a691-dc3651ccf9ae/1/x3Kabs4tDr6bvl2NeWL3O9ySBKk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/1c9754-32e9-4186-a691-dc3651ccf9ae/1/x3Kabs4tDr6bvl2NeWL3O9ySBKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:da:38:50:4d:c2:ef:d6:e5:14:88:58:c6:05:41:11:16:17:
         2d:d1:1e:d2:a0:7a:68:ab:0e:f0:67:87:7f:8b:f8:d9:cb:53:
         32:29:fb:2a:ff:cb:71:74:77:f7:d4:c5:1f:b5:32:ef:34:04:
         3a:8a:f9:ff:1b:09:1b:11:75:2d:00:33:c0:51:39:94:d1:34:
         ac:9e:19:e2:a8:53:17:b3:e4:1b:d3:46:bc:de:43:d3:7d:de:
         37:98:67:8e:63:f1:e7:d5:45:f9:5f:cf:e3:c6:2d:fd:dc:2a:
         9b:e3:8a:5a:bf:e4:b7:38:0f:75:ef:28:7d:74:e3:a1:c8:fb:
         4a:43:3c:70:27:28:e5:42:00:6f:1c:3d:4b:28:58:9f:f1:6d:
         dd:73:a2:87:dd:c7:66:06:c7:44:61:ac:b0:bd:26:ed:b2:82:
         4e:06:39:66:6f:93:8c:04:e6:4d:ac:ba:e4:65:77:c8:7b:c5:
         4d:7c:e7:63:b6:29:76:b0:eb:89:a2:e1:14:9f:d6:78:c0:4a:
         2a:10:72:2c:8d:8c:e9:8f:5b:81:8a:06:4b:ad:30:a0:b1:47:
         bd:37:d3:9e:5d:4c:4e:61:7e:22:5c:ac:8f:aa:27:00:80:20:
         8c:28:97:ba:ab:2f:a5:fd:bd:cc:36:d4:ff:1e:58:3d:c2:1a:
         38:47:cf:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:29:04 2025 by rpki-client