Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.mft
File:                     mrlC3a28mskLTs---tsjEyOmcFU.mft (raw, json)
Hash identifier:          ZB7TFXh+ZMst32vo/zSE9ZYOPhUq2VqAoXOuUdh47FA=
Subject key identifier:   8C:77:13:94:9A:6A:82:BA:33:5E:DC:F6:C8:2F:68:F9:C6:67:75:36
Authority key identifier: 9A:B9:42:DD:AD:BC:9A:C9:0B:4E:CF:BE:FA:DB:23:13:23:A6:70:55
Certificate issuer:       /CN=9ab942ddadbc9ac90b4ecfbefadb231323a67055
Certificate serial:       019784D82D2728D29CE13CB0B76BC07BA00A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mrlC3a28mskLTs---tsjEyOmcFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.mft
Manifest number:          0C80
Signing time:             Wed 18 Jun 2025 21:00:49 +0000
Manifest this update:     Wed 18 Jun 2025 21:00:49 +0000
Manifest next update:     Thu 19 Jun 2025 21:00:49 +0000
Files and hashes:         1: mrlC3a28mskLTs---tsjEyOmcFU.crl (hash: BZmdwdKt5PERBltoOSm4m44ZIANtQ39EMYnHrIiSkzE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mrlC3a28mskLTs---tsjEyOmcFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Jun 2025 21:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:84:d8:2d:27:28:d2:9c:e1:3c:b0:b7:6b:c0:7b:a0:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab942ddadbc9ac90b4ecfbefadb231323a67055
        Validity
            Not Before: Jun 18 21:00:49 2025 GMT
            Not After : Jun 19 21:00:49 2025 GMT
        Subject: CN=8c7713949a6a82ba335edcf6c82f68f9c6677536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c2:a0:47:8b:72:96:9c:b6:19:6b:43:f6:b6:
                    c8:c1:45:e8:44:4c:d8:38:04:a9:12:b9:61:17:5d:
                    17:0e:0d:e4:72:a4:e7:21:42:0d:0e:83:60:69:28:
                    dc:7d:bb:0f:1d:d7:fa:54:8e:0c:e9:4c:e6:a8:26:
                    d4:7e:a2:68:dd:fc:2f:dc:48:9e:b7:89:8a:20:0f:
                    f6:1e:21:a2:5e:db:20:18:49:06:38:bb:4f:2e:fa:
                    c7:67:24:d3:8a:4e:b3:bc:15:eb:5d:f3:58:c3:f0:
                    bf:93:38:c9:bf:97:35:ed:40:00:58:08:45:78:1a:
                    8e:f3:bd:58:44:07:2c:0f:78:29:e3:88:dc:56:b6:
                    bb:ad:eb:f2:e4:2e:6d:0b:2e:6d:c3:1d:da:b8:5a:
                    49:35:0a:cb:a5:c1:d7:a0:e5:9b:f2:54:b7:1d:c4:
                    dd:cf:d6:4d:55:75:28:ab:bf:ca:1d:9d:6c:66:a5:
                    03:90:10:1a:0b:e8:c7:98:8c:fb:14:b1:d7:ff:00:
                    0c:dd:43:0f:93:fa:43:6a:d9:6e:9b:c9:69:55:59:
                    4c:32:7a:22:76:54:1b:a1:5b:91:35:13:41:0e:fe:
                    85:cc:f4:d5:93:9e:8f:c8:39:e0:95:e6:ac:83:e1:
                    71:4c:f0:7b:01:cf:1b:c1:eb:1f:c7:4e:c7:84:97:
                    95:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:77:13:94:9A:6A:82:BA:33:5E:DC:F6:C8:2F:68:F9:C6:67:75:36
            X509v3 Authority Key Identifier:
                keyid:9A:B9:42:DD:AD:BC:9A:C9:0B:4E:CF:BE:FA:DB:23:13:23:A6:70:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrlC3a28mskLTs---tsjEyOmcFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:0b:03:ff:ee:06:50:29:55:0b:37:ff:78:e3:0d:12:5a:b3:
         f2:61:f5:1c:56:e5:5c:05:fe:0b:fb:0f:4d:c2:3e:21:bb:8f:
         7f:f6:3e:a5:18:af:70:2b:e6:22:00:9c:d7:e3:8f:ca:17:8d:
         66:bb:15:d4:95:c3:f7:4b:5a:fd:c1:5e:be:c5:f2:ed:8c:4a:
         ce:2b:48:3f:ee:3a:2a:7e:ec:90:fe:fd:b1:01:4e:ca:1b:34:
         0d:34:3e:b4:0b:90:f6:3a:b0:12:99:6b:f2:1e:f8:d4:08:cf:
         74:f7:39:14:d8:9d:95:c0:cc:d6:a4:14:56:60:b4:d3:aa:77:
         93:69:be:20:ef:78:13:97:61:4e:06:e7:73:ab:e4:81:26:07:
         0d:86:1b:e6:e2:12:56:60:4e:93:fb:a1:d9:13:c1:c2:d4:fb:
         22:57:d8:8a:08:a0:43:02:d2:c3:38:b8:31:b6:74:b0:29:fd:
         92:6a:da:a7:b0:bc:69:ef:c5:b6:71:2f:1f:75:26:7e:23:75:
         2c:da:bf:5a:f1:79:ad:c7:79:b1:3c:99:23:16:70:af:50:89:
         f7:74:dc:ff:fa:7a:75:a6:07:a9:ed:5e:8f:50:e3:1f:78:bd:
         fc:b7:ec:69:fc:0c:9c:26:2b:ce:b7:33:c0:be:c3:16:9c:5e:
         5e:96:f2:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 05:58:46 2025 by rpki-client