Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.mft
File:                     7XQHAiR6L-rM3r4TqYQs_9O0DJY.mft (raw, json)
Hash identifier:          WKDzVSuthoMHANPgSWPeDvzhe1ljLxaoREDL5cBhAJo=
Subject key identifier:   63:45:9B:3D:D9:54:EB:D5:9A:AD:CA:B2:84:0C:95:72:19:9D:BC:EC
Authority key identifier: ED:74:07:02:24:7A:2F:EA:CC:DE:BE:13:A9:84:2C:FF:D3:B4:0C:96
Certificate issuer:       /CN=ed740702247a2feaccdebe13a9842cffd3b40c96
Certificate serial:       0197711AFA596518445A45B897F522BF1435
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7XQHAiR6L-rM3r4TqYQs_9O0DJY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.mft
Manifest number:          158F
Signing time:             Sun 15 Jun 2025 01:01:22 +0000
Manifest this update:     Sun 15 Jun 2025 01:01:22 +0000
Manifest next update:     Mon 16 Jun 2025 01:01:22 +0000
Files and hashes:         1: 7XQHAiR6L-rM3r4TqYQs_9O0DJY.crl (hash: 8i9w3gFJ03z/WEuRoaQUE5lNJg3lxk4fwcvMI4THSu0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7XQHAiR6L-rM3r4TqYQs_9O0DJY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 01:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:1a:fa:59:65:18:44:5a:45:b8:97:f5:22:bf:14:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed740702247a2feaccdebe13a9842cffd3b40c96
        Validity
            Not Before: Jun 15 01:01:22 2025 GMT
            Not After : Jun 16 01:01:22 2025 GMT
        Subject: CN=63459b3dd954ebd59aadcab2840c9572199dbcec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:15:3f:e6:53:96:86:87:dc:80:d6:52:44:06:
                    10:50:82:5e:3c:1f:b6:79:cc:dc:1e:65:2e:06:1e:
                    86:f8:b9:db:27:cc:58:c2:8e:e2:f7:80:c1:d9:85:
                    54:ce:14:f0:71:59:10:e5:dc:24:9d:ad:f5:4b:97:
                    96:82:93:c9:e4:24:3d:e1:93:c2:b4:a2:c9:66:5e:
                    db:42:0b:8d:58:0a:0d:f3:cb:de:49:f2:28:b2:da:
                    48:78:ce:6b:41:b5:10:dc:74:b4:ea:6f:d7:70:10:
                    9d:6e:5d:24:28:3e:17:16:1e:05:db:1d:6a:d9:14:
                    67:2b:f0:d9:ce:15:3e:6a:69:1b:7e:36:fb:e7:7c:
                    7d:31:42:0a:d5:15:27:fc:f2:7a:de:b3:96:ae:a0:
                    a9:e8:af:39:4e:8d:7c:69:b9:92:b5:c2:0d:b8:5c:
                    dd:7f:ca:19:e3:a9:cf:df:3e:b3:bc:5c:3f:dc:01:
                    d2:92:7f:05:ae:37:25:f8:35:13:8e:40:f5:a6:9b:
                    58:75:64:4a:c4:fe:11:85:30:33:6e:d6:0e:89:fe:
                    48:0b:d1:ca:9e:6e:57:c4:c0:3c:47:91:5e:3c:ac:
                    31:e8:fa:bb:5e:b2:43:13:18:d6:58:9b:cf:e8:78:
                    b3:b5:b5:f5:8d:45:2f:53:95:65:9d:1c:c4:5e:1f:
                    7c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:45:9B:3D:D9:54:EB:D5:9A:AD:CA:B2:84:0C:95:72:19:9D:BC:EC
            X509v3 Authority Key Identifier:
                keyid:ED:74:07:02:24:7A:2F:EA:CC:DE:BE:13:A9:84:2C:FF:D3:B4:0C:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XQHAiR6L-rM3r4TqYQs_9O0DJY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:b0:51:50:91:ad:c2:fb:7f:45:b7:84:64:c7:2b:11:9b:09:
         f9:9d:b6:ac:e7:25:67:17:d9:1c:20:84:a4:3f:64:88:a8:c6:
         21:ae:80:74:3a:f3:2b:56:e7:aa:30:90:5a:bf:25:8f:22:64:
         d9:6d:99:d8:71:2d:f7:cd:97:05:8f:78:83:9a:92:d8:3f:aa:
         ef:84:b7:00:8b:09:d6:91:b9:f5:06:45:48:8b:30:fa:e8:c0:
         5b:3f:0a:63:0c:46:de:be:7e:a9:3a:eb:87:9c:79:1d:28:69:
         be:90:a6:dc:18:40:93:0f:ee:33:18:c2:19:33:a6:03:ff:d3:
         dc:1d:a7:af:41:69:af:a3:5b:08:67:78:1f:d3:84:32:ba:2f:
         c5:e8:c3:79:38:fe:fe:d5:4b:89:33:52:0b:14:d4:4d:18:fa:
         cd:4e:aa:10:1e:b8:e7:51:ab:91:68:76:46:0d:ea:b2:88:26:
         22:a0:27:99:41:4d:61:8e:72:f7:25:0d:82:b6:9e:8a:6c:62:
         8a:bc:3c:0c:ac:93:f9:73:44:2b:db:df:1d:9b:b9:47:32:5b:
         d5:63:b8:8b:96:90:9b:be:5e:04:df:28:d6:13:c5:15:9a:f7:
         98:83:b3:75:b3:78:f6:bb:b0:ff:6a:c4:82:09:d4:93:1a:77:
         f6:c9:c5:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:29:31 2025 by rpki-client