Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.mft
File:                     xEuito7PJQE5XMZUCOiTWsnYbJc.mft (raw, json)
Hash identifier:          8l4Sk/iVqpxHHd5Lbt45OVU+KIvqW65u9k+n8SlqmDI=
Subject key identifier:   ED:FC:0A:75:66:E1:21:94:5D:3D:F4:63:98:F5:F2:EC:FB:8C:F3:55
Authority key identifier: C4:4B:A2:B6:8E:CF:25:01:39:5C:C6:54:08:E8:93:5A:C9:D8:6C:97
Certificate issuer:       /CN=c44ba2b68ecf2501395cc65408e8935ac9d86c97
Certificate serial:       01978168D8DABEA065614DD0000C51254A7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xEuito7PJQE5XMZUCOiTWsnYbJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.mft
Manifest number:          0274
Signing time:             Wed 18 Jun 2025 05:00:21 +0000
Manifest this update:     Wed 18 Jun 2025 05:00:21 +0000
Manifest next update:     Thu 19 Jun 2025 05:00:21 +0000
Files and hashes:         1: xEuito7PJQE5XMZUCOiTWsnYbJc.crl (hash: e46vN33+XtfU2wyBaUqSz3vGMHol9YJjw9/021x1dxI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xEuito7PJQE5XMZUCOiTWsnYbJc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Jun 2025 05:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:81:68:d8:da:be:a0:65:61:4d:d0:00:0c:51:25:4a:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c44ba2b68ecf2501395cc65408e8935ac9d86c97
        Validity
            Not Before: Jun 18 05:00:21 2025 GMT
            Not After : Jun 19 05:00:21 2025 GMT
        Subject: CN=edfc0a7566e121945d3df46398f5f2ecfb8cf355
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f7:d2:a6:46:6f:d1:87:5c:08:a7:e6:23:e9:
                    a2:29:e2:cf:23:b0:af:86:a3:ee:94:9e:9f:15:4c:
                    bf:86:b9:50:64:7a:26:00:47:9d:b6:bb:17:b7:74:
                    46:cf:45:69:32:42:70:bd:e9:b5:e7:ce:d2:32:cd:
                    11:05:b8:00:43:b6:c6:28:d6:86:57:47:d9:64:98:
                    62:54:fc:1f:f9:e8:05:47:37:5a:cd:a7:3e:7f:74:
                    b1:6f:de:93:ba:9a:ea:ae:55:77:02:a3:25:15:61:
                    dd:ed:4f:fc:45:eb:48:3f:c5:8a:5b:7f:b6:01:39:
                    81:8b:2b:5c:df:57:82:94:bb:fb:ee:44:20:12:b1:
                    90:bb:7d:4c:38:95:29:64:aa:f5:f8:87:43:92:86:
                    7a:bb:42:2c:c4:e3:fc:4b:c1:d3:a2:6f:70:b9:a6:
                    49:34:d6:ee:0f:cc:a6:df:95:90:22:7e:62:00:99:
                    d5:4d:fc:fe:16:f6:79:fc:2a:45:71:0e:a0:cc:31:
                    4c:c1:ad:96:88:4c:ee:53:8e:23:23:e1:05:39:75:
                    cb:d8:a4:24:50:ce:c0:33:5d:f5:af:8e:f1:df:76:
                    fd:7e:c7:bb:0e:fb:c1:9d:f7:ba:c8:70:8a:bd:1c:
                    c5:e8:6f:7c:2d:08:7c:4b:90:35:23:e3:e9:12:48:
                    4c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:FC:0A:75:66:E1:21:94:5D:3D:F4:63:98:F5:F2:EC:FB:8C:F3:55
            X509v3 Authority Key Identifier:
                keyid:C4:4B:A2:B6:8E:CF:25:01:39:5C:C6:54:08:E8:93:5A:C9:D8:6C:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEuito7PJQE5XMZUCOiTWsnYbJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:e6:e1:3c:28:45:f4:0d:21:27:c1:a4:c0:fd:45:7f:d6:33:
         e5:78:3a:55:c9:9c:c7:65:1f:b3:a9:d6:e1:27:5b:73:bf:3c:
         7d:fd:3e:86:ca:78:99:3b:98:98:82:ed:b7:20:0e:bc:10:87:
         aa:04:ca:18:ff:21:0b:d4:f5:20:db:eb:56:4f:bc:8a:6b:0e:
         9e:89:b8:91:1f:2a:62:da:a7:83:b4:32:e6:66:0a:f0:8c:c2:
         05:7c:6f:e7:53:19:c4:22:1b:85:eb:e9:ff:33:41:32:dc:08:
         5c:5e:9d:43:40:be:3c:f9:90:de:cd:bb:f9:91:7f:48:b9:dd:
         9e:74:bc:27:26:f7:ae:a0:0d:2d:6c:a3:dd:5d:5c:35:2a:20:
         c0:95:ae:be:89:b3:db:61:73:0c:bd:27:2a:2f:78:ba:e4:ed:
         0a:99:b8:69:82:70:65:ec:a6:b5:30:50:cc:96:6b:81:a2:97:
         19:86:29:09:54:4b:ac:2d:90:aa:d2:5a:cd:35:66:5a:be:cc:
         be:ee:aa:6e:2a:83:cb:d7:fb:ec:0c:22:06:13:2d:94:92:5b:
         73:e6:9d:86:e8:e6:d8:86:62:57:34:41:24:e0:e1:a3:13:f5:
         73:c9:d4:87:6c:55:6f:c0:e6:31:d7:a8:f1:6f:3a:af:56:4a:
         7d:49:59:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 14:45:47 2025 by rpki-client