Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/d1f16c-5d15-4f7b-ba5e-6be0bfe1cbdb/1/_izVtrb_hGG7l5eGHJuBZ2oHU6o.mft
File:                     _izVtrb_hGG7l5eGHJuBZ2oHU6o.mft (raw, json)
Hash identifier:          OT1XuUfczsXB9rfDKsU2AQ0524qH/7tPtiea7/6p7+I=
Subject key identifier:   23:EF:E0:64:56:3D:13:5F:BD:AF:3C:92:87:28:7E:30:1D:A5:2B:1A
Authority key identifier: FE:2C:D5:B6:B6:FF:84:61:BB:97:97:86:1C:9B:81:67:6A:07:53:AA
Certificate issuer:       /CN=fe2cd5b6b6ff8461bb9797861c9b81676a0753aa
Certificate serial:       01976B8658F5B06BC21FC5126AAF86CE6A3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_izVtrb_hGG7l5eGHJuBZ2oHU6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/d1f16c-5d15-4f7b-ba5e-6be0bfe1cbdb/1/_izVtrb_hGG7l5eGHJuBZ2oHU6o.mft
Manifest number:          054A
Signing time:             Fri 13 Jun 2025 23:00:56 +0000
Manifest this update:     Fri 13 Jun 2025 23:00:56 +0000
Manifest next update:     Sat 14 Jun 2025 23:00:56 +0000
Files and hashes:         1: _izVtrb_hGG7l5eGHJuBZ2oHU6o.crl (hash: MJTQFl+2g/OHBTTWtkuRSRKp/BwsUN7k3qcs60f/LY4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/d1f16c-5d15-4f7b-ba5e-6be0bfe1cbdb/1/_izVtrb_hGG7l5eGHJuBZ2oHU6o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/d1f16c-5d15-4f7b-ba5e-6be0bfe1cbdb/1/_izVtrb_hGG7l5eGHJuBZ2oHU6o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_izVtrb_hGG7l5eGHJuBZ2oHU6o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:86:58:f5:b0:6b:c2:1f:c5:12:6a:af:86:ce:6a:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe2cd5b6b6ff8461bb9797861c9b81676a0753aa
        Validity
            Not Before: Jun 13 23:00:56 2025 GMT
            Not After : Jun 14 23:00:56 2025 GMT
        Subject: CN=23efe064563d135fbdaf3c9287287e301da52b1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c9:68:b5:4e:b3:d4:a6:90:0a:79:9b:ac:be:
                    fb:86:71:5b:ef:4a:05:1c:85:99:83:2e:97:4b:d9:
                    15:63:dc:dc:4b:48:cd:9f:c0:23:55:27:d0:f2:06:
                    f0:0e:5b:12:0c:97:42:9c:da:50:69:88:22:27:fd:
                    10:44:83:54:8b:c9:ac:37:02:84:8a:78:b5:3c:0c:
                    1d:33:c1:e0:0d:5b:5f:d8:e1:aa:3c:46:0c:ba:73:
                    f6:5f:78:1f:3f:8a:58:22:04:78:ff:d4:2f:76:31:
                    dd:64:1f:46:1a:a5:b7:35:7c:e1:ae:44:4a:f6:2d:
                    3d:75:e4:38:9c:97:2b:79:5b:85:94:d0:40:c7:a2:
                    d9:e2:ab:88:61:52:5e:0f:1e:e6:98:05:20:47:10:
                    cd:e3:7e:6d:db:4e:8f:a0:8b:7d:1f:c7:46:a0:6e:
                    04:a8:be:76:69:af:2a:a4:8d:63:d2:62:9d:39:ae:
                    9a:03:ed:ae:51:a0:dd:01:da:10:b4:21:3f:d2:20:
                    16:1b:e5:94:01:a2:10:68:52:1d:38:40:dc:0d:2d:
                    bb:55:3d:ed:dd:dc:5d:39:85:48:cc:96:e5:cc:7f:
                    02:9b:d8:ea:d9:ad:03:47:35:85:cd:db:e1:c3:d0:
                    a8:cc:ba:27:c0:c8:6b:e4:72:3b:75:d7:96:74:74:
                    0d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:EF:E0:64:56:3D:13:5F:BD:AF:3C:92:87:28:7E:30:1D:A5:2B:1A
            X509v3 Authority Key Identifier:
                keyid:FE:2C:D5:B6:B6:FF:84:61:BB:97:97:86:1C:9B:81:67:6A:07:53:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_izVtrb_hGG7l5eGHJuBZ2oHU6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d1f16c-5d15-4f7b-ba5e-6be0bfe1cbdb/1/_izVtrb_hGG7l5eGHJuBZ2oHU6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d1f16c-5d15-4f7b-ba5e-6be0bfe1cbdb/1/_izVtrb_hGG7l5eGHJuBZ2oHU6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:c1:6a:47:24:aa:5e:6d:14:75:27:7c:d4:69:d9:7b:f8:6a:
         96:cf:fe:9a:9a:af:ff:50:01:ab:b5:f4:56:7b:34:2a:ce:ce:
         61:0c:fe:ae:61:24:aa:78:7b:03:0f:8e:0d:d3:ed:f1:24:3a:
         19:06:37:1e:2f:88:e2:0d:29:1e:50:3f:b4:5b:e5:5b:55:0f:
         6f:a2:15:2f:a7:99:12:ea:8a:4e:3b:71:59:fc:d4:56:85:25:
         01:2f:31:73:68:bd:29:52:25:9c:96:b4:8f:3a:e5:f3:a3:6c:
         a3:c9:2f:e2:7a:c7:bc:c0:f5:1e:da:b1:a9:48:7d:9f:64:b5:
         50:74:f3:d0:48:a9:5c:81:12:67:1a:22:87:58:9f:9e:33:db:
         e5:6b:91:1a:5f:ec:7c:80:6e:21:aa:a8:c1:c5:10:84:95:7b:
         9c:89:d3:f6:b0:b4:d2:e1:3e:36:8b:e2:1e:15:7e:b4:89:ca:
         30:8d:1f:71:f4:1f:39:50:c3:43:fe:78:fc:84:47:7f:3b:3f:
         98:82:25:a4:2e:7e:fb:98:02:c7:c1:bb:0b:86:8a:14:0d:84:
         42:32:de:31:d7:e7:ca:0f:cc:3e:2b:04:07:34:18:be:22:d7:
         95:20:6f:9e:ad:33:99:e6:60:5e:8b:28:a1:2a:fa:ab:9e:b4:
         6b:4b:96:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:09:54 2025 by rpki-client