Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b5fc04-ff86-4ced-91c2-0e386a3dbe6a/1/pR4tu_AZ2NN0flcwOSVU3xH27ZM.mft
File:                     pR4tu_AZ2NN0flcwOSVU3xH27ZM.mft (raw, json)
Hash identifier:          7AOEDen1gYcFOpfd98sPR2NUS73rkK3RlYHqzSDuS5g=
Subject key identifier:   B8:27:FA:E5:BE:DE:64:37:DE:14:B9:EC:B4:F1:DC:1D:2A:77:A0:A3
Authority key identifier: A5:1E:2D:BB:F0:19:D8:D3:74:7E:57:30:39:25:54:DF:11:F6:ED:93
Certificate issuer:       /CN=a51e2dbbf019d8d3747e5730392554df11f6ed93
Certificate serial:       0197696077559E74C1528840897D9DF64C73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pR4tu_AZ2NN0flcwOSVU3xH27ZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/b5fc04-ff86-4ced-91c2-0e386a3dbe6a/1/pR4tu_AZ2NN0flcwOSVU3xH27ZM.mft
Manifest number:          158B
Signing time:             Fri 13 Jun 2025 13:00:19 +0000
Manifest this update:     Fri 13 Jun 2025 13:00:19 +0000
Manifest next update:     Sat 14 Jun 2025 13:00:19 +0000
Files and hashes:         1: pR4tu_AZ2NN0flcwOSVU3xH27ZM.crl (hash: 0rB3uaIj844n4Txiu1gTgfi1XpkZb1J8TbguwECaqHY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/b5fc04-ff86-4ced-91c2-0e386a3dbe6a/1/pR4tu_AZ2NN0flcwOSVU3xH27ZM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/b5fc04-ff86-4ced-91c2-0e386a3dbe6a/1/pR4tu_AZ2NN0flcwOSVU3xH27ZM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pR4tu_AZ2NN0flcwOSVU3xH27ZM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:60:77:55:9e:74:c1:52:88:40:89:7d:9d:f6:4c:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a51e2dbbf019d8d3747e5730392554df11f6ed93
        Validity
            Not Before: Jun 13 13:00:19 2025 GMT
            Not After : Jun 14 13:00:19 2025 GMT
        Subject: CN=b827fae5bede6437de14b9ecb4f1dc1d2a77a0a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:26:5e:6c:71:ae:d9:16:87:f3:7d:c4:02:1b:
                    16:6f:38:3c:91:68:66:75:80:75:fe:34:c7:47:e1:
                    9d:85:bd:5b:5e:94:e7:fd:28:9e:5d:4f:62:17:6e:
                    c9:75:d9:41:17:ef:63:14:bd:4d:3f:61:1f:f1:2b:
                    94:57:c6:34:78:bc:98:d0:fe:7d:6a:d4:59:93:d8:
                    4f:e2:40:24:b8:a1:f6:fb:cf:e2:b3:2e:91:bd:60:
                    9e:80:5f:ee:72:d9:59:5c:80:5d:5b:7f:45:ee:57:
                    d4:4c:07:85:30:57:0e:37:b0:38:6b:47:87:65:ac:
                    f9:87:4b:d4:76:18:3d:83:28:37:0d:ca:a8:67:d8:
                    7a:3c:ee:15:68:79:24:6c:22:e0:53:af:16:b2:63:
                    98:5e:f3:43:ba:82:c9:12:8a:75:59:df:4a:b1:a5:
                    e0:e4:94:56:e5:7f:f7:3e:ce:57:d6:4a:8e:8f:cb:
                    a9:65:cc:ca:b4:38:66:56:24:e9:e9:24:09:02:03:
                    e8:e4:4a:5b:40:f4:33:e3:15:51:b1:43:8b:b7:67:
                    bb:4b:c7:14:6f:d0:28:fb:fc:8a:50:9b:aa:d4:49:
                    50:81:75:85:37:0b:e9:92:60:33:de:60:f2:32:cf:
                    46:77:8d:02:64:f4:d2:50:36:ce:e0:2f:56:d4:38:
                    a8:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:27:FA:E5:BE:DE:64:37:DE:14:B9:EC:B4:F1:DC:1D:2A:77:A0:A3
            X509v3 Authority Key Identifier:
                keyid:A5:1E:2D:BB:F0:19:D8:D3:74:7E:57:30:39:25:54:DF:11:F6:ED:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pR4tu_AZ2NN0flcwOSVU3xH27ZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b5fc04-ff86-4ced-91c2-0e386a3dbe6a/1/pR4tu_AZ2NN0flcwOSVU3xH27ZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b5fc04-ff86-4ced-91c2-0e386a3dbe6a/1/pR4tu_AZ2NN0flcwOSVU3xH27ZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:9b:8e:3b:9d:d2:0e:01:2d:ba:54:18:c2:2d:7d:6c:d0:1a:
         4d:df:b4:d3:2e:95:a0:63:f9:fd:05:22:46:17:58:2c:00:1e:
         8c:31:d5:48:b8:16:c4:43:7d:57:21:44:da:95:51:a1:bb:45:
         f9:8c:50:30:07:9a:dd:a8:e5:30:f1:ec:a9:e4:0b:e6:53:24:
         e2:03:09:3f:16:71:3b:e1:ce:09:10:cd:fe:44:68:e1:14:15:
         2a:9f:98:69:45:19:bf:e3:87:b2:56:7c:44:aa:51:31:9f:85:
         36:01:40:d9:68:30:bb:98:84:a8:e1:23:70:aa:be:1a:20:42:
         06:6d:f5:c8:c7:65:eb:2c:11:2a:47:5c:9b:81:eb:83:35:a3:
         68:c8:1a:ff:92:ad:09:ae:c6:ff:54:78:d0:e2:28:d6:5b:04:
         6d:77:1b:71:d0:27:f8:55:d1:5f:a7:b7:36:66:8f:5a:82:56:
         fa:06:b4:23:b6:e0:3e:c0:4a:7e:c9:2e:7c:12:67:23:6c:a4:
         f8:6d:90:69:77:0a:01:b5:3d:57:1f:1d:13:0f:fd:eb:01:0e:
         eb:f7:a7:65:8e:fe:8e:73:7a:91:c0:51:17:76:57:d2:b1:c3:
         a0:fb:ba:c5:9b:ba:c2:52:8e:95:4d:3d:b3:19:6a:ba:fc:32:
         de:3e:b5:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:13:13 2025 by rpki-client