Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/69e7fe-40c0-45c2-b2b1-b72d7adbfb96/1/Tle6dst9bSrsBSA89BuOZxbufqA.mft
File:                     Tle6dst9bSrsBSA89BuOZxbufqA.mft (raw, json)
Hash identifier:          jjRB0PIryPrOH3vmpcf4l8/3Lw2miRtQY5QHbkZvGX0=
Subject key identifier:   5E:2C:C5:79:46:46:06:12:9A:2D:54:3D:B7:31:8A:E3:0A:10:99:2D
Authority key identifier: 4E:57:BA:76:CB:7D:6D:2A:EC:05:20:3C:F4:1B:8E:67:16:EE:7E:A0
Certificate issuer:       /CN=4e57ba76cb7d6d2aec05203cf41b8e6716ee7ea0
Certificate serial:       0197808D383FF95F9E44C249D71ED7BE6B08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tle6dst9bSrsBSA89BuOZxbufqA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/69e7fe-40c0-45c2-b2b1-b72d7adbfb96/1/Tle6dst9bSrsBSA89BuOZxbufqA.mft
Manifest number:          0EBE
Signing time:             Wed 18 Jun 2025 01:00:28 +0000
Manifest this update:     Wed 18 Jun 2025 01:00:28 +0000
Manifest next update:     Thu 19 Jun 2025 01:00:28 +0000
Files and hashes:         1: Tle6dst9bSrsBSA89BuOZxbufqA.crl (hash: akLBZ25ogPR4II97GDaTVspUnw7V7HdS2QAQqOvrKcM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/69e7fe-40c0-45c2-b2b1-b72d7adbfb96/1/Tle6dst9bSrsBSA89BuOZxbufqA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/69e7fe-40c0-45c2-b2b1-b72d7adbfb96/1/Tle6dst9bSrsBSA89BuOZxbufqA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tle6dst9bSrsBSA89BuOZxbufqA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 22:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:80:8d:38:3f:f9:5f:9e:44:c2:49:d7:1e:d7:be:6b:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e57ba76cb7d6d2aec05203cf41b8e6716ee7ea0
        Validity
            Not Before: Jun 18 01:00:28 2025 GMT
            Not After : Jun 19 01:00:28 2025 GMT
        Subject: CN=5e2cc579464606129a2d543db7318ae30a10992d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9a:d2:f9:e8:34:22:ed:e8:79:d5:d0:16:e6:
                    bf:57:b5:cd:01:ff:e9:d7:61:d2:ad:07:aa:12:1c:
                    3f:94:75:f6:23:43:da:ee:08:12:10:72:29:84:e6:
                    98:18:85:20:75:9d:fa:f4:ee:c7:cb:8b:3e:39:55:
                    28:98:7f:8a:82:bf:d6:2d:9a:d9:df:ba:39:c7:a1:
                    fc:48:78:85:91:34:d1:7f:bc:3b:f5:2a:da:dd:93:
                    c6:39:37:6b:15:8d:a6:87:42:ff:3a:81:18:fe:bf:
                    a2:04:e3:01:b4:35:9a:e4:1f:8b:cb:73:1a:c3:6e:
                    c4:cb:c0:ae:70:17:c6:f8:31:7c:36:e0:b2:df:1c:
                    3c:40:22:be:f9:90:22:57:a9:b2:0b:fc:b5:f1:85:
                    0e:c6:da:f9:d6:d3:85:58:db:1e:ad:ef:73:3a:93:
                    2f:66:da:79:90:2f:62:53:63:70:d3:b3:62:6a:78:
                    13:bc:ee:a2:4e:e7:2f:8e:1e:6d:bf:5d:83:69:44:
                    5e:0e:89:36:ea:af:31:19:5f:ac:37:d4:e2:06:ba:
                    93:99:8d:af:55:d4:04:3a:3d:6b:3d:fe:0d:61:bf:
                    b8:59:d2:5b:44:d3:93:80:1a:bf:12:8c:1a:ed:5d:
                    d2:1a:1a:f5:61:b2:b9:a1:5d:35:83:36:80:5a:0d:
                    93:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:2C:C5:79:46:46:06:12:9A:2D:54:3D:B7:31:8A:E3:0A:10:99:2D
            X509v3 Authority Key Identifier:
                keyid:4E:57:BA:76:CB:7D:6D:2A:EC:05:20:3C:F4:1B:8E:67:16:EE:7E:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tle6dst9bSrsBSA89BuOZxbufqA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/69e7fe-40c0-45c2-b2b1-b72d7adbfb96/1/Tle6dst9bSrsBSA89BuOZxbufqA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/69e7fe-40c0-45c2-b2b1-b72d7adbfb96/1/Tle6dst9bSrsBSA89BuOZxbufqA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:79:9f:66:dc:e0:18:ae:da:f5:20:d8:51:6b:93:c3:5d:08:
         81:cc:06:7d:94:18:5d:67:c8:c4:11:39:9c:31:80:35:43:8e:
         d9:bd:1a:49:95:ab:3a:81:4a:82:4a:3c:5b:f8:58:e4:46:f2:
         89:c7:21:1c:de:60:c3:1f:3d:51:5d:7c:6b:78:5a:f2:fe:80:
         72:80:c7:94:b7:3c:05:55:aa:29:db:fb:ff:21:d7:0c:a8:1c:
         64:57:0a:e3:41:83:6f:f7:a4:a3:63:c6:ca:06:86:d8:41:2a:
         42:77:a2:82:66:ae:56:d1:76:fb:bb:77:b6:4c:e3:cb:9c:a2:
         21:47:29:88:40:c7:44:c4:ee:13:eb:01:3f:ad:34:2f:fe:59:
         62:05:a1:a1:b3:0c:47:4f:16:81:ce:af:9e:e4:9c:5e:29:c6:
         ea:09:13:01:60:72:1c:74:95:36:49:f5:81:02:51:e6:cc:fe:
         b0:53:b8:0b:f9:a0:6e:9e:77:17:9f:32:c7:1f:38:b0:73:17:
         68:73:20:80:0c:71:cf:cf:0f:bd:04:d8:27:69:8d:7f:de:03:
         95:ee:97:50:ed:46:18:0c:6f:0c:33:13:f1:71:8c:c7:a8:b8:
         d9:20:73:f1:b6:f5:87:d9:ff:df:08:eb:e1:4a:a3:7a:fc:f4:
         5e:3f:39:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 08:59:44 2025 by rpki-client