Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/edaa32-c5d9-4013-84bb-9b2adc74b52d/1/SdWTfY5gK0jLL_UXFtmV0jofPho.mft
File:                     SdWTfY5gK0jLL_UXFtmV0jofPho.mft (raw, json)
Hash identifier:          TIVd2qsqfhWniVaL5H9ECH2u+waVk0hKUxePY2p1JlM=
Subject key identifier:   05:48:13:5F:FE:8C:33:DC:EE:CA:B0:43:5A:95:9D:87:B8:8B:B5:2C
Authority key identifier: 49:D5:93:7D:8E:60:2B:48:CB:2F:F5:17:16:D9:95:D2:3A:1F:3E:1A
Certificate issuer:       /CN=49d5937d8e602b48cb2ff51716d995d23a1f3e1a
Certificate serial:       01976D3E0DE0B1E6EE4927B1FEDEE89C806F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SdWTfY5gK0jLL_UXFtmV0jofPho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/edaa32-c5d9-4013-84bb-9b2adc74b52d/1/SdWTfY5gK0jLL_UXFtmV0jofPho.mft
Manifest number:          0E52
Signing time:             Sat 14 Jun 2025 07:01:12 +0000
Manifest this update:     Sat 14 Jun 2025 07:01:12 +0000
Manifest next update:     Sun 15 Jun 2025 07:01:12 +0000
Files and hashes:         1: SdWTfY5gK0jLL_UXFtmV0jofPho.crl (hash: VSdho5i/476aJ+bhiJ1VT1UgW2+rplJLwP/l7ZlpOTg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/edaa32-c5d9-4013-84bb-9b2adc74b52d/1/SdWTfY5gK0jLL_UXFtmV0jofPho.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/edaa32-c5d9-4013-84bb-9b2adc74b52d/1/SdWTfY5gK0jLL_UXFtmV0jofPho.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SdWTfY5gK0jLL_UXFtmV0jofPho.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:3e:0d:e0:b1:e6:ee:49:27:b1:fe:de:e8:9c:80:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d5937d8e602b48cb2ff51716d995d23a1f3e1a
        Validity
            Not Before: Jun 14 07:01:12 2025 GMT
            Not After : Jun 15 07:01:12 2025 GMT
        Subject: CN=0548135ffe8c33dceecab0435a959d87b88bb52c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:51:37:54:0e:3c:71:77:0c:9e:17:a3:4c:9b:
                    18:70:9f:fd:ee:13:ac:c6:25:4a:f4:85:16:64:da:
                    fd:5f:c4:6c:e1:33:89:a7:38:e1:a6:ae:87:5f:35:
                    8c:11:d3:1f:28:17:55:4d:b3:2b:ec:9d:b3:67:b3:
                    31:52:01:f2:80:5d:57:51:51:d6:58:b2:87:ed:53:
                    43:5a:a7:8d:d4:72:15:80:2f:da:78:c5:94:30:30:
                    a9:4d:67:03:c8:05:86:44:ed:af:90:1f:72:b1:65:
                    06:92:5a:67:18:53:8d:f1:64:43:41:a7:57:c5:60:
                    e6:cb:29:de:c3:2f:71:18:22:71:f2:b1:af:64:48:
                    a1:4e:cd:df:45:f3:7f:a1:75:fb:89:20:1e:85:72:
                    b0:a3:bc:3e:27:da:d1:78:27:f0:a9:74:e1:0a:43:
                    d0:32:78:99:78:b4:21:e8:f1:b2:11:29:e8:11:c1:
                    e4:30:62:5d:b7:d9:ce:0a:d1:b2:13:99:64:4f:93:
                    58:81:81:06:ed:25:90:1a:6a:4b:e2:04:98:24:42:
                    e1:37:4d:f5:b6:f5:d5:8f:b2:8e:6c:03:04:0d:f5:
                    66:d4:cd:54:da:13:fa:47:82:d3:89:a7:76:52:68:
                    d3:06:ed:8d:c6:01:45:7b:ac:fe:14:be:6b:99:fd:
                    bd:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:48:13:5F:FE:8C:33:DC:EE:CA:B0:43:5A:95:9D:87:B8:8B:B5:2C
            X509v3 Authority Key Identifier:
                keyid:49:D5:93:7D:8E:60:2B:48:CB:2F:F5:17:16:D9:95:D2:3A:1F:3E:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SdWTfY5gK0jLL_UXFtmV0jofPho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/edaa32-c5d9-4013-84bb-9b2adc74b52d/1/SdWTfY5gK0jLL_UXFtmV0jofPho.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/edaa32-c5d9-4013-84bb-9b2adc74b52d/1/SdWTfY5gK0jLL_UXFtmV0jofPho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:39:31:27:39:ce:f1:85:19:61:cb:1f:28:74:ef:ae:fe:9c:
         b5:25:31:f2:f9:c0:86:59:67:da:bd:cc:ce:ca:82:8b:ac:df:
         7f:8b:5c:0d:42:4f:c0:b4:d4:21:d1:c9:77:7c:61:9f:3c:a1:
         38:fd:1f:15:2f:8b:8f:77:3a:3a:7d:15:94:2f:c4:c5:71:7c:
         8e:4f:6d:75:15:40:45:e7:fb:7f:bf:19:e1:2e:58:3f:d4:58:
         0c:25:4a:71:2e:f5:4f:f6:7f:b8:91:08:d5:c3:13:93:bc:c8:
         cc:2c:0d:07:eb:97:7d:42:18:9d:71:15:b2:77:39:f3:d3:76:
         88:c1:15:b3:f1:7c:71:a3:ee:b3:e3:76:07:43:76:12:89:13:
         e9:57:d2:e1:c2:58:95:69:84:ce:8f:7b:1a:f7:2c:95:5d:d8:
         9d:69:22:bd:13:40:ce:04:a5:a1:e6:e3:2a:69:94:15:59:28:
         65:86:e9:c3:38:65:bc:e2:af:55:32:eb:8f:f2:25:fa:fb:66:
         27:46:d7:90:20:59:4a:48:14:5b:21:4e:0b:f2:59:88:a2:b5:
         00:86:d0:f4:de:40:7e:bd:7c:51:e4:ce:08:30:c5:bf:f2:0a:
         52:67:cb:c1:bc:fd:5f:0f:ca:65:6e:7e:71:6a:d7:48:33:b8:
         44:7d:f4:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:56:55 2025 by rpki-client