Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/4b5c18-8472-41db-b557-2269c1af2ad3/1/K5Ro565AOUbluk3mHMHEej2b794.mft
File:                     K5Ro565AOUbluk3mHMHEej2b794.mft (raw, json)
Hash identifier:          t80sgW7JkUT8eQ19G+e5SuUxNjRXMpNUUkI4pklxUns=
Subject key identifier:   2F:FB:91:0C:95:A7:AC:5E:A8:DB:30:7F:F1:A7:50:A2:ED:28:CC:A1
Authority key identifier: 2B:94:68:E7:AE:40:39:46:E5:BA:4D:E6:1C:C1:C4:7A:3D:9B:EF:DE
Certificate issuer:       /CN=2b9468e7ae403946e5ba4de61cc1c47a3d9befde
Certificate serial:       01976D069677B54C787CCDF523461E7AB675
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K5Ro565AOUbluk3mHMHEej2b794.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/4b5c18-8472-41db-b557-2269c1af2ad3/1/K5Ro565AOUbluk3mHMHEej2b794.mft
Manifest number:          0A48
Signing time:             Sat 14 Jun 2025 06:00:37 +0000
Manifest this update:     Sat 14 Jun 2025 06:00:37 +0000
Manifest next update:     Sun 15 Jun 2025 06:00:37 +0000
Files and hashes:         1: K5Ro565AOUbluk3mHMHEej2b794.crl (hash: f0x/L9RoDKY0vUhY2ht/+JDZSD7yYd0LXIEGOa/ys2s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/4b5c18-8472-41db-b557-2269c1af2ad3/1/K5Ro565AOUbluk3mHMHEej2b794.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/4b5c18-8472-41db-b557-2269c1af2ad3/1/K5Ro565AOUbluk3mHMHEej2b794.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K5Ro565AOUbluk3mHMHEej2b794.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:06:96:77:b5:4c:78:7c:cd:f5:23:46:1e:7a:b6:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b9468e7ae403946e5ba4de61cc1c47a3d9befde
        Validity
            Not Before: Jun 14 06:00:37 2025 GMT
            Not After : Jun 15 06:00:37 2025 GMT
        Subject: CN=2ffb910c95a7ac5ea8db307ff1a750a2ed28cca1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:84:d8:bc:5f:0f:ca:80:f6:27:4e:45:f4:50:
                    c3:3e:97:f5:71:94:16:cb:b3:58:3b:d6:1c:13:57:
                    f5:2c:d9:88:1e:91:74:c4:9f:db:93:6e:59:5f:55:
                    22:32:49:8f:b9:be:13:8b:65:b7:7b:b5:67:7e:75:
                    7f:51:9d:14:f6:2f:c0:9c:a2:ec:c1:3c:8b:66:ba:
                    6c:d2:f1:23:21:df:62:bb:c1:f0:42:60:a3:e4:9c:
                    02:b5:08:6d:ae:91:92:c9:9b:21:b6:60:85:c3:44:
                    97:9b:b1:88:e4:5a:a2:24:85:75:86:d7:fd:c4:00:
                    ff:fc:29:80:6c:1f:7a:f1:80:4c:6c:68:85:aa:f8:
                    a9:21:fa:6a:b6:76:8f:af:5f:1e:9c:cd:0e:72:66:
                    44:8c:d4:18:a7:0b:41:33:52:7a:9c:6a:7b:4f:43:
                    40:dc:ea:7a:e8:b5:81:cb:fb:a2:87:b8:9e:c2:73:
                    7c:00:67:32:34:85:d8:2f:27:a5:29:b9:7d:5e:fa:
                    c1:62:5e:03:2b:04:3e:71:17:cc:a7:c2:31:04:ec:
                    d2:7f:c5:5d:b9:6e:26:15:5b:68:33:a9:b1:20:3d:
                    0e:67:84:b2:3c:26:05:23:bb:72:eb:7e:a6:66:da:
                    da:05:a0:0a:30:b9:cc:10:6c:2d:4d:08:26:52:0d:
                    68:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:FB:91:0C:95:A7:AC:5E:A8:DB:30:7F:F1:A7:50:A2:ED:28:CC:A1
            X509v3 Authority Key Identifier:
                keyid:2B:94:68:E7:AE:40:39:46:E5:BA:4D:E6:1C:C1:C4:7A:3D:9B:EF:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5Ro565AOUbluk3mHMHEej2b794.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/4b5c18-8472-41db-b557-2269c1af2ad3/1/K5Ro565AOUbluk3mHMHEej2b794.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/4b5c18-8472-41db-b557-2269c1af2ad3/1/K5Ro565AOUbluk3mHMHEej2b794.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:f4:2c:35:59:d9:29:d4:45:ab:92:02:5b:0e:ea:6e:d1:30:
         44:c1:60:c6:14:b2:ae:33:67:06:5a:80:bc:23:25:bf:5d:4a:
         67:a6:24:f9:ed:60:de:9f:59:7f:47:d4:39:04:3d:29:5e:7d:
         ba:1b:82:6f:1a:1c:d3:2e:9d:fc:df:fd:de:91:99:28:e2:e9:
         29:37:4b:d5:9b:dc:f9:1f:32:b0:8a:1c:f5:5a:65:70:0f:77:
         c5:b8:c6:81:0b:ab:c1:1b:e6:a0:49:b0:fd:75:5d:3e:8c:47:
         da:15:65:d8:22:58:a7:56:a6:65:b6:df:d0:c1:61:b9:7e:83:
         d4:de:5b:56:12:c4:90:51:33:71:b4:22:2a:19:84:9c:44:fd:
         4f:09:94:01:06:6f:a3:43:0b:b1:46:36:3d:e9:c9:06:c4:7a:
         5f:30:53:f7:7e:bf:22:b7:41:f8:8c:86:dd:54:55:40:db:80:
         f2:3c:87:56:a2:e2:7a:1f:66:67:dc:a6:66:4e:be:ee:22:47:
         9b:53:61:f3:ff:7f:f1:f9:38:ff:04:fe:e1:21:fa:0b:0a:9d:
         e8:00:3e:5c:15:e2:8f:f7:08:f8:77:d3:37:bf:1d:3b:95:ab:
         eb:46:36:78:1b:3f:ea:5d:75:a1:a5:cc:6c:e8:58:0f:60:69:
         18:aa:65:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:14:44 2025 by rpki-client