Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/575915-ff7f-4364-a3e6-731e8b11d55d/1/8mAhR5HPhJn8k68B96Q_XL6QKpg.mft
File:                     8mAhR5HPhJn8k68B96Q_XL6QKpg.mft (raw, json)
Hash identifier:          WnnOMVVy0iF1K67RmLNvHk+7WDY2C2VpdVoQl9a7bds=
Subject key identifier:   D0:50:79:65:CD:29:75:89:C5:C6:6E:C2:D0:AE:C9:05:D7:DF:44:96
Authority key identifier: F2:60:21:47:91:CF:84:99:FC:93:AF:01:F7:A4:3F:5C:BE:90:2A:98
Certificate issuer:       /CN=f260214791cf8499fc93af01f7a43f5cbe902a98
Certificate serial:       01976F2CD0BAA5217EEF248FC0175DA531B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8mAhR5HPhJn8k68B96Q_XL6QKpg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/575915-ff7f-4364-a3e6-731e8b11d55d/1/8mAhR5HPhJn8k68B96Q_XL6QKpg.mft
Manifest number:          0E75
Signing time:             Sat 14 Jun 2025 16:01:37 +0000
Manifest this update:     Sat 14 Jun 2025 16:01:37 +0000
Manifest next update:     Sun 15 Jun 2025 16:01:37 +0000
Files and hashes:         1: 8mAhR5HPhJn8k68B96Q_XL6QKpg.crl (hash: hv3/oVCx14AswuDU1IH3kiS++VcFPp6Y2Pa1C3mwHMo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/575915-ff7f-4364-a3e6-731e8b11d55d/1/8mAhR5HPhJn8k68B96Q_XL6QKpg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/575915-ff7f-4364-a3e6-731e8b11d55d/1/8mAhR5HPhJn8k68B96Q_XL6QKpg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8mAhR5HPhJn8k68B96Q_XL6QKpg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:2c:d0:ba:a5:21:7e:ef:24:8f:c0:17:5d:a5:31:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f260214791cf8499fc93af01f7a43f5cbe902a98
        Validity
            Not Before: Jun 14 16:01:37 2025 GMT
            Not After : Jun 15 16:01:37 2025 GMT
        Subject: CN=d0507965cd297589c5c66ec2d0aec905d7df4496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d1:72:c3:49:5e:b1:5f:bf:91:6e:b6:e1:8f:
                    e1:72:ef:23:85:03:c0:49:e0:f6:8e:8a:05:bc:01:
                    f8:3c:3e:a9:5d:ce:a7:06:82:3a:7f:fc:51:41:77:
                    5a:ab:07:25:4e:f7:44:e1:65:32:a5:e6:a8:5c:e2:
                    ce:01:32:e8:b7:d1:c8:47:13:79:a4:e4:d3:08:13:
                    86:d9:75:19:8c:88:90:2f:9a:99:99:45:f7:19:e6:
                    4b:aa:7b:42:97:0e:88:d4:66:a9:f4:ca:01:11:2e:
                    4b:6c:d3:fe:f3:71:89:23:bb:a0:b3:20:05:be:5f:
                    23:c4:f6:5f:e7:be:fe:3d:0b:e4:f1:6e:f7:45:32:
                    9c:58:a6:b7:f1:7c:3e:21:7a:5a:14:1a:49:7b:eb:
                    0a:40:5d:68:b5:39:77:d3:cf:e4:81:cf:c9:0e:25:
                    cd:f2:30:3a:6a:d9:1e:32:4a:43:7f:51:2e:5d:f8:
                    6b:6e:5d:67:fb:89:ff:ef:5a:d2:89:5c:f0:36:8f:
                    46:35:9a:12:32:12:cd:00:44:09:c1:c8:7a:4d:16:
                    4b:7c:12:10:a6:f4:62:1f:72:8e:01:ff:69:78:7b:
                    f7:a5:48:48:fd:2d:c5:3a:ec:7b:61:d5:65:59:ec:
                    3d:aa:cc:2e:a7:d1:76:dd:21:c6:3b:78:80:b8:97:
                    73:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:50:79:65:CD:29:75:89:C5:C6:6E:C2:D0:AE:C9:05:D7:DF:44:96
            X509v3 Authority Key Identifier:
                keyid:F2:60:21:47:91:CF:84:99:FC:93:AF:01:F7:A4:3F:5C:BE:90:2A:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mAhR5HPhJn8k68B96Q_XL6QKpg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/575915-ff7f-4364-a3e6-731e8b11d55d/1/8mAhR5HPhJn8k68B96Q_XL6QKpg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/575915-ff7f-4364-a3e6-731e8b11d55d/1/8mAhR5HPhJn8k68B96Q_XL6QKpg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:fa:cb:e0:1d:15:bf:46:e7:76:d1:3d:2e:6c:64:fb:9a:a3:
         96:76:8e:72:f6:5b:a2:b7:d1:6d:15:49:36:a9:6e:b4:f5:94:
         45:3c:b8:b6:91:6d:cb:66:7d:26:1e:98:54:ce:ac:72:20:f9:
         d0:95:13:70:de:1d:14:e4:a7:7f:93:35:b3:bc:dc:89:32:8a:
         20:40:96:9a:85:20:4e:0a:14:6d:be:59:87:bc:8a:47:c9:b0:
         4e:88:43:28:cf:85:86:54:24:31:0e:76:46:7c:f3:ce:7e:29:
         18:71:0b:a0:ff:09:e6:6f:96:ce:45:83:7c:d2:21:76:bb:78:
         f5:db:14:d8:9b:63:46:f4:0e:7a:1c:68:32:af:d2:2b:1d:99:
         f6:50:0c:4d:02:aa:31:81:06:0d:93:f9:f0:22:2c:33:6a:d2:
         5e:6c:87:c9:f4:24:33:54:b1:39:83:5a:39:c1:c9:1a:40:92:
         fa:34:da:90:e2:a2:26:6c:0c:d3:17:82:3e:6e:cd:97:f3:c5:
         3b:66:9a:cc:cb:f4:cf:ed:33:e0:90:b0:8c:62:08:34:0a:ab:
         af:f9:54:3c:9a:3c:ed:f4:6c:ac:05:75:23:b6:47:d8:04:da:
         f2:2e:f0:05:1b:12:83:41:f7:43:92:c3:30:2c:4d:75:f1:7d:
         08:36:84:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:30:10 2025 by rpki-client