Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/3c87b8-a840-4090-9465-63cef23f8d31/1/eO-oRu6OjAecoehyv-BfngT3_-8.mft
File:                     eO-oRu6OjAecoehyv-BfngT3_-8.mft (raw, json)
Hash identifier:          7mRM+TVb2pvXYuVSuQMgzJ68mmp8svj9ocY68/4eC2o=
Subject key identifier:   01:5F:A4:38:90:16:93:54:BE:40:A5:B4:FC:94:A4:93:EC:28:43:08
Authority key identifier: 78:EF:A8:46:EE:8E:8C:07:9C:A1:E8:72:BF:E0:5F:9E:04:F7:FF:EF
Certificate issuer:       /CN=78efa846ee8e8c079ca1e872bfe05f9e04f7ffef
Certificate serial:       01977AC267B8ACDA7FE5A8C5DDA7D09D108F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eO-oRu6OjAecoehyv-BfngT3_-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/3c87b8-a840-4090-9465-63cef23f8d31/1/eO-oRu6OjAecoehyv-BfngT3_-8.mft
Manifest number:          1123
Signing time:             Mon 16 Jun 2025 22:00:50 +0000
Manifest this update:     Mon 16 Jun 2025 22:00:50 +0000
Manifest next update:     Tue 17 Jun 2025 22:00:50 +0000
Files and hashes:         1: eO-oRu6OjAecoehyv-BfngT3_-8.crl (hash: cvlxUvmpXz6RdTwOUE4wfJXo2qngSXKvRJS1yHemd7M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/3c87b8-a840-4090-9465-63cef23f8d31/1/eO-oRu6OjAecoehyv-BfngT3_-8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/3c87b8-a840-4090-9465-63cef23f8d31/1/eO-oRu6OjAecoehyv-BfngT3_-8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eO-oRu6OjAecoehyv-BfngT3_-8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 22:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7a:c2:67:b8:ac:da:7f:e5:a8:c5:dd:a7:d0:9d:10:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78efa846ee8e8c079ca1e872bfe05f9e04f7ffef
        Validity
            Not Before: Jun 16 22:00:50 2025 GMT
            Not After : Jun 17 22:00:50 2025 GMT
        Subject: CN=015fa43890169354be40a5b4fc94a493ec284308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:46:b2:a7:95:9a:a5:b4:7f:ca:06:a8:94:a9:
                    36:c3:09:12:ba:48:4f:b5:af:75:1d:e4:53:6c:84:
                    a5:52:37:64:63:6f:34:59:13:e6:0b:fa:55:3f:c4:
                    10:d2:67:9b:a7:3d:15:76:aa:42:8a:d2:23:9a:b3:
                    fc:7f:67:9a:aa:a1:0d:49:c9:ea:93:46:6f:77:63:
                    6a:a3:47:03:44:67:ad:5b:01:0d:6d:30:99:7a:d1:
                    6e:fd:68:51:d4:75:fd:c4:76:35:41:ce:1b:00:6e:
                    03:7d:22:31:27:4f:3a:c6:18:01:61:e5:31:87:e0:
                    ff:c8:b4:20:32:02:ca:3b:f3:fd:df:0f:85:58:f4:
                    35:38:c3:d8:68:66:7b:e5:f6:65:2e:d3:32:ff:a5:
                    d9:91:de:21:9b:7c:73:d2:37:46:e7:7e:4e:9e:e2:
                    a0:48:be:65:a9:cf:7f:ff:5a:7d:b5:3b:67:fd:dc:
                    f4:dd:ef:d5:a1:a3:b4:d7:9a:0f:25:09:19:79:f4:
                    5e:77:f6:de:d7:29:c0:3d:46:6b:e6:0c:76:46:8f:
                    8e:0d:60:b4:f1:cf:98:7c:9a:f4:50:6e:cb:f7:3d:
                    7e:df:a1:96:ce:83:51:7b:b1:3d:b4:73:e4:47:9a:
                    f4:75:1f:c6:21:23:3d:33:fa:20:c5:47:6c:30:a3:
                    3c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:5F:A4:38:90:16:93:54:BE:40:A5:B4:FC:94:A4:93:EC:28:43:08
            X509v3 Authority Key Identifier:
                keyid:78:EF:A8:46:EE:8E:8C:07:9C:A1:E8:72:BF:E0:5F:9E:04:F7:FF:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eO-oRu6OjAecoehyv-BfngT3_-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/3c87b8-a840-4090-9465-63cef23f8d31/1/eO-oRu6OjAecoehyv-BfngT3_-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/3c87b8-a840-4090-9465-63cef23f8d31/1/eO-oRu6OjAecoehyv-BfngT3_-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:1a:3e:ca:91:71:df:bc:26:34:8f:04:32:1a:2d:4e:ad:9b:
         6a:95:4e:4c:ff:d7:e2:85:64:ea:cf:a3:46:89:85:a5:c1:74:
         3d:e0:91:85:60:eb:47:6f:25:8a:49:9a:87:fe:fd:ca:2b:f3:
         60:4e:2f:a5:e1:80:52:88:e9:b7:98:48:1e:82:d1:26:15:27:
         84:e2:ca:bd:06:43:9e:4c:41:54:78:c5:dd:8f:4a:1f:1f:14:
         09:a0:87:56:d5:11:a2:26:ed:80:b5:5e:f5:51:5f:95:1e:d8:
         8a:ff:1d:01:fe:1c:b1:9e:f8:97:5d:e0:aa:31:5e:f9:84:aa:
         da:ed:14:12:50:6c:42:54:c6:6e:0b:62:8e:ff:3b:53:b3:7f:
         3c:3f:49:17:9c:bd:2d:61:ea:93:07:63:63:b5:b8:d3:69:0f:
         76:85:75:c5:c2:00:95:da:15:f0:1a:74:39:f0:2b:46:2d:0e:
         7a:b4:a4:b7:d5:47:72:76:8a:8a:53:3c:25:06:fd:34:ee:be:
         05:fb:f1:b6:a7:e6:7a:e4:bc:4b:52:f9:ef:f3:e2:f0:50:67:
         ee:6d:d4:f4:2d:f0:fd:b3:84:f4:df:40:f5:69:5f:9f:78:98:
         81:a7:a4:12:70:79:46:82:85:83:99:12:96:28:b3:c9:f6:b0:
         85:81:e0:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 07:56:20 2025 by rpki-client