Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/e2be5c-0e67-4f82-97c2-105d8002149d/1/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.mft
File:                     e8e-Uh0XpqWSzGH3kUwl8WlXzJw.mft (raw, json)
Hash identifier:          WtWsf0qKKV+/bcTyMI/bx7LfQipisjO/hcxEAaKOsgA=
Subject key identifier:   4C:61:DF:DE:FA:58:97:AF:15:83:D4:82:24:3A:A0:31:53:CF:2E:5F
Authority key identifier: 7B:C7:BE:52:1D:17:A6:A5:92:CC:61:F7:91:4C:25:F1:69:57:CC:9C
Certificate issuer:       /CN=7bc7be521d17a6a592cc61f7914c25f16957cc9c
Certificate serial:       01976960C0E2633ED6B75EAEE174245BD08E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/e2be5c-0e67-4f82-97c2-105d8002149d/1/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.mft
Manifest number:          0549
Signing time:             Fri 13 Jun 2025 13:00:37 +0000
Manifest this update:     Fri 13 Jun 2025 13:00:37 +0000
Manifest next update:     Sat 14 Jun 2025 13:00:37 +0000
Files and hashes:         1: e8e-Uh0XpqWSzGH3kUwl8WlXzJw.crl (hash: eezKwsU06vGuRBKbegdnBkiY0wYn60j8XL5rbSfb/LU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/e2be5c-0e67-4f82-97c2-105d8002149d/1/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/e2be5c-0e67-4f82-97c2-105d8002149d/1/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:60:c0:e2:63:3e:d6:b7:5e:ae:e1:74:24:5b:d0:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bc7be521d17a6a592cc61f7914c25f16957cc9c
        Validity
            Not Before: Jun 13 13:00:37 2025 GMT
            Not After : Jun 14 13:00:37 2025 GMT
        Subject: CN=4c61dfdefa5897af1583d482243aa03153cf2e5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:15:db:55:00:bc:d4:0d:cd:6a:b9:d3:07:9e:
                    e9:f9:6e:7b:fc:00:62:c3:6d:82:07:39:4f:38:ab:
                    74:de:ae:3f:0a:6a:64:d0:ea:8a:7a:03:28:a7:95:
                    53:e5:06:92:9b:1f:a2:91:a4:02:bb:9c:d0:fb:93:
                    4f:e6:e9:2e:56:b1:31:3c:80:d3:96:71:ee:d8:d2:
                    34:16:64:eb:c9:2c:47:93:e7:9d:e1:1d:90:14:b7:
                    16:59:57:91:43:c9:3c:df:5d:7b:6a:4a:ad:06:b8:
                    f5:00:a8:6c:5b:48:83:1c:87:2b:36:85:8b:ee:fd:
                    04:34:ef:4c:c5:6b:8f:32:c0:cb:84:53:93:3a:fd:
                    f8:aa:6c:52:bb:99:3d:3a:45:07:8a:89:7e:86:f5:
                    b5:f8:95:a9:ce:89:20:eb:ad:d1:74:f6:93:9a:ef:
                    ac:ae:f7:66:d2:62:cf:c9:02:d1:cb:65:74:54:79:
                    f6:da:9b:9c:dc:dc:c7:24:2e:16:d4:55:80:1d:a4:
                    e1:a2:fc:7a:af:aa:99:0e:6a:35:5d:aa:48:9c:38:
                    55:f2:2c:99:8b:d3:c5:84:63:34:d2:0a:5e:20:df:
                    74:86:66:dd:55:d0:db:86:ba:70:5c:09:be:a2:b0:
                    ef:34:31:3f:ca:5d:14:69:03:22:3b:bd:92:97:45:
                    23:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:61:DF:DE:FA:58:97:AF:15:83:D4:82:24:3A:A0:31:53:CF:2E:5F
            X509v3 Authority Key Identifier:
                keyid:7B:C7:BE:52:1D:17:A6:A5:92:CC:61:F7:91:4C:25:F1:69:57:CC:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e2be5c-0e67-4f82-97c2-105d8002149d/1/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e2be5c-0e67-4f82-97c2-105d8002149d/1/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:ca:05:18:0f:60:40:27:b6:56:b8:20:74:0f:b0:4d:fa:71:
         4d:00:57:f9:81:0a:ec:7b:61:c4:6d:b6:46:0a:43:91:66:ac:
         36:04:b4:33:16:61:61:bd:23:34:94:ae:28:6f:e9:4e:d2:ba:
         75:cb:76:11:9a:b5:d6:ca:30:cb:a2:bc:f5:9c:26:51:dd:b3:
         ff:7f:74:1a:73:73:f4:56:1f:19:cd:a5:56:44:df:47:c5:17:
         07:ae:65:da:e9:13:58:bc:2d:72:45:d4:67:f7:c8:7b:2a:3c:
         e0:dd:d9:f2:06:05:0d:91:10:da:43:8a:be:8c:6a:a6:b7:b2:
         88:af:37:2e:03:69:f8:ae:7b:d8:89:26:6b:e4:c5:a0:11:0f:
         91:a3:d4:1c:13:45:2b:ed:d3:84:ed:e1:d2:86:5f:72:09:cd:
         45:07:af:3d:73:a1:cd:ae:f6:dd:a5:ea:0d:04:3c:4e:5c:77:
         26:4a:95:ab:93:5d:7c:dc:41:52:d2:51:c8:fe:e6:29:8a:7c:
         5c:dd:e2:62:2c:df:85:11:d0:40:45:5c:b6:51:c1:9f:a8:70:
         91:86:e0:40:1a:06:32:b5:5d:e2:e9:43:9c:86:36:a8:c7:39:
         d1:c1:7c:af:c8:1f:ca:ed:6c:55:88:6b:36:a1:0d:52:5b:74:
         8e:70:e4:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:56:26 2025 by rpki-client