Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e6f0c4-799d-4620-ab7b-b4225de2723a/1/D4jGhrHhIvzcFlwCN6D149mQvwE.mft
File:                     D4jGhrHhIvzcFlwCN6D149mQvwE.mft (raw, json)
Hash identifier:          GShhA2EqJe1hkbdyYH8sc+nFt9R4pEgs4J7O+K7bpRg=
Subject key identifier:   61:65:97:C9:74:E4:18:D8:BF:53:15:4D:5A:54:02:61:46:77:69:C7
Authority key identifier: 0F:88:C6:86:B1:E1:22:FC:DC:16:5C:02:37:A0:F5:E3:D9:90:BF:01
Certificate issuer:       /CN=0f88c686b1e122fcdc165c0237a0f5e3d990bf01
Certificate serial:       01976D06A19F21B92E45CF660C5F102FE5F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D4jGhrHhIvzcFlwCN6D149mQvwE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/e6f0c4-799d-4620-ab7b-b4225de2723a/1/D4jGhrHhIvzcFlwCN6D149mQvwE.mft
Manifest number:          0B3C
Signing time:             Sat 14 Jun 2025 06:00:40 +0000
Manifest this update:     Sat 14 Jun 2025 06:00:40 +0000
Manifest next update:     Sun 15 Jun 2025 06:00:40 +0000
Files and hashes:         1: D4jGhrHhIvzcFlwCN6D149mQvwE.crl (hash: MyBwaDcfVmR4U2OgsvgzshUmIlEok0D8Ce7iTLZ0yhM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/e6f0c4-799d-4620-ab7b-b4225de2723a/1/D4jGhrHhIvzcFlwCN6D149mQvwE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/e6f0c4-799d-4620-ab7b-b4225de2723a/1/D4jGhrHhIvzcFlwCN6D149mQvwE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D4jGhrHhIvzcFlwCN6D149mQvwE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:06:a1:9f:21:b9:2e:45:cf:66:0c:5f:10:2f:e5:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f88c686b1e122fcdc165c0237a0f5e3d990bf01
        Validity
            Not Before: Jun 14 06:00:40 2025 GMT
            Not After : Jun 15 06:00:40 2025 GMT
        Subject: CN=616597c974e418d8bf53154d5a540261467769c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:85:95:3d:5c:4f:53:93:0a:4b:5d:1d:ba:fe:
                    9d:34:17:3d:93:30:49:cd:42:3b:ed:02:f7:e0:81:
                    e1:0b:f4:94:d1:14:eb:d1:47:7c:5c:35:f0:9d:a3:
                    0d:39:ab:db:38:6d:53:34:31:4f:c1:0b:26:88:23:
                    3a:f7:d5:1e:f8:66:96:71:1a:a9:96:df:11:a3:34:
                    00:3e:d7:57:c5:bc:d1:65:77:34:e8:68:18:a7:3f:
                    19:07:3c:9f:66:ac:a0:e1:37:98:c8:be:dd:72:fa:
                    4a:4b:c6:ca:cd:a4:bc:81:fb:fc:0b:04:05:3e:fb:
                    a6:7f:8d:4d:ea:f1:35:f8:60:ad:a2:58:2f:6d:f2:
                    0f:b4:be:3f:13:74:da:19:c6:54:e8:e6:3c:0d:81:
                    70:7a:2f:76:ea:4c:bc:11:e1:f7:c0:f7:de:18:db:
                    f5:6c:9b:85:d7:3f:28:b3:26:2d:3e:c2:c4:9b:b2:
                    61:4d:fd:77:ba:9d:88:24:5f:50:a3:df:06:e9:2e:
                    79:4d:cc:84:db:af:f6:d8:5b:29:64:af:1b:13:63:
                    da:b9:54:a1:5a:bf:01:ea:8d:1d:3a:30:f3:e0:44:
                    53:94:6a:d2:ed:36:aa:e4:5e:b9:88:b5:ab:3e:0f:
                    bc:04:a3:e6:a4:29:84:17:43:2c:a5:64:ff:11:3e:
                    84:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:65:97:C9:74:E4:18:D8:BF:53:15:4D:5A:54:02:61:46:77:69:C7
            X509v3 Authority Key Identifier:
                keyid:0F:88:C6:86:B1:E1:22:FC:DC:16:5C:02:37:A0:F5:E3:D9:90:BF:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D4jGhrHhIvzcFlwCN6D149mQvwE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e6f0c4-799d-4620-ab7b-b4225de2723a/1/D4jGhrHhIvzcFlwCN6D149mQvwE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e6f0c4-799d-4620-ab7b-b4225de2723a/1/D4jGhrHhIvzcFlwCN6D149mQvwE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:bf:b9:63:99:ce:3e:e7:4f:70:c8:f1:8e:6c:0e:0c:80:1e:
         5d:3e:fd:17:ee:99:dd:52:b3:73:96:e0:4e:94:9e:11:06:6c:
         d2:9b:a2:76:a8:94:3a:62:ce:dd:0c:5d:22:a9:b5:9c:ff:75:
         59:ac:73:6f:71:7a:aa:1e:a5:42:07:f9:42:88:1c:3d:46:23:
         2d:09:ba:4c:b0:0e:a9:83:77:4f:8e:1e:da:3a:df:51:de:d6:
         69:c0:57:e5:ba:fb:61:3d:f4:9a:b1:10:56:26:67:93:24:8f:
         b7:ed:c3:3d:e9:df:c7:63:b4:10:c3:ef:b0:e1:db:66:52:f3:
         e2:f0:0f:3c:db:6e:6a:c9:f8:a2:0b:fb:52:f9:75:5e:91:25:
         20:ba:a5:fb:f1:9e:bc:44:f1:d1:bd:93:a2:03:2c:c4:c2:d4:
         d3:07:11:71:b0:90:74:c6:18:8f:b4:75:87:81:15:75:bc:d9:
         8e:ca:04:df:98:13:8a:99:b0:88:02:b1:b7:ae:8b:9b:8c:c0:
         81:2e:53:c0:8b:ec:64:97:3a:14:a0:d6:6c:cb:6f:d2:fd:2f:
         68:c2:0c:a0:3e:e0:27:75:5c:7b:65:ee:e0:04:c1:9a:2d:16:
         f9:a7:f9:2e:01:99:e8:f5:48:a5:e5:6e:a6:9b:a5:c9:68:58:
         d4:1d:14:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:12:31 2025 by rpki-client