Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.mft
File:                     u_E0smpfP3zNjK9dLGvnDKwPoks.mft (raw, json)
Hash identifier:          tGPPHHdtLEj8qd5y+i2G7g2TKswzJ/O5eE5iWYVHGlk=
Subject key identifier:   00:30:B5:1D:B3:6D:2F:E3:10:34:6F:6B:A9:90:9C:5F:85:14:39:39
Authority key identifier: BB:F1:34:B2:6A:5F:3F:7C:CD:8C:AF:5D:2C:6B:E7:0C:AC:0F:A2:4B
Certificate issuer:       /CN=bbf134b26a5f3f7ccd8caf5d2c6be70cac0fa24b
Certificate serial:       0197790AE168FBB5A7D61886844BEF1EBFF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u_E0smpfP3zNjK9dLGvnDKwPoks.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.mft
Manifest number:          04B9
Signing time:             Mon 16 Jun 2025 14:00:45 +0000
Manifest this update:     Mon 16 Jun 2025 14:00:45 +0000
Manifest next update:     Tue 17 Jun 2025 14:00:45 +0000
Files and hashes:         1: u_E0smpfP3zNjK9dLGvnDKwPoks.crl (hash: ++3A5roUI1LV8eG53pQhG8DodGD/JmSBN07q3Y0Fniw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u_E0smpfP3zNjK9dLGvnDKwPoks.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 13:25:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:79:0a:e1:68:fb:b5:a7:d6:18:86:84:4b:ef:1e:bf:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbf134b26a5f3f7ccd8caf5d2c6be70cac0fa24b
        Validity
            Not Before: Jun 16 14:00:45 2025 GMT
            Not After : Jun 17 14:00:45 2025 GMT
        Subject: CN=0030b51db36d2fe310346f6ba9909c5f85143939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:80:db:0a:96:4a:4a:22:26:84:1b:5f:40:69:
                    c2:f7:51:fa:16:63:1b:4f:5c:1f:34:5c:de:da:06:
                    48:66:fa:10:2d:19:fc:a0:b7:26:ec:ac:64:6d:77:
                    e1:0e:08:67:19:9d:45:47:75:55:31:38:03:f8:bf:
                    1d:0c:34:16:75:13:90:f7:c4:f9:9f:3d:61:41:16:
                    ea:74:c7:73:0f:de:69:1d:b8:0f:ca:75:c9:fa:1f:
                    d1:7c:02:e9:c7:5e:97:38:0a:04:10:d4:2c:37:89:
                    7f:10:16:87:c8:5d:31:52:5a:22:d9:69:16:06:03:
                    8b:9d:01:98:dd:d0:5d:7d:ad:2e:2e:45:22:e4:96:
                    e1:66:d0:25:34:87:5d:e9:a8:d9:9b:b7:cb:35:94:
                    93:ee:5f:48:3a:a8:7d:7b:a8:39:1d:06:cd:45:04:
                    71:77:3a:5c:e4:17:5e:a2:b9:2b:e4:02:e8:8c:46:
                    c1:37:8f:d8:a5:5f:59:14:a1:d2:16:a4:6c:79:0a:
                    e4:98:fe:7d:1e:f9:05:f6:ce:36:2c:50:49:80:be:
                    e1:46:a3:4d:5c:53:ef:0a:eb:ef:da:ad:fa:7b:a8:
                    d0:69:4f:23:2c:29:ce:43:80:8f:58:61:5e:34:42:
                    c8:85:9a:42:c0:98:6c:d8:90:dc:1c:ee:73:aa:27:
                    bb:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:30:B5:1D:B3:6D:2F:E3:10:34:6F:6B:A9:90:9C:5F:85:14:39:39
            X509v3 Authority Key Identifier:
                keyid:BB:F1:34:B2:6A:5F:3F:7C:CD:8C:AF:5D:2C:6B:E7:0C:AC:0F:A2:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_E0smpfP3zNjK9dLGvnDKwPoks.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:96:e3:fb:1c:ba:18:5f:4e:54:e9:35:2a:72:7b:cb:43:c2:
         ad:93:54:eb:82:72:86:2b:7e:a4:a3:95:c5:49:0c:1b:bf:9c:
         d5:f6:4c:2b:26:87:83:8a:78:d7:9c:ed:d3:a0:05:a1:07:a9:
         b2:46:7f:5c:a1:ab:10:e4:02:7c:28:ed:39:0a:a2:9b:bc:09:
         b7:44:ba:f0:7b:87:3d:79:c5:34:ca:42:55:7c:78:e5:29:95:
         e9:50:79:72:7a:31:bd:65:16:07:45:c2:e5:5b:41:cf:d6:ff:
         9c:72:78:f9:28:1a:cb:21:e7:86:4d:8b:06:37:2e:a0:51:eb:
         0f:e8:44:74:e9:45:e7:46:89:a2:f4:cc:2c:30:19:6a:c4:e3:
         4a:c5:6f:cd:f0:e6:8e:12:91:9d:7c:1a:f0:4b:06:5d:20:46:
         24:c6:0a:0d:4e:d1:6e:fc:87:3d:c2:76:d1:00:5c:4f:d8:bf:
         2d:fa:c8:02:09:4e:9c:ac:24:b1:95:42:f3:b2:9a:0c:69:e0:
         79:62:9a:04:7e:bf:10:d7:d3:5a:ec:aa:59:59:b3:ab:4d:99:
         e5:cc:ce:77:28:32:b9:18:77:f8:25:63:d1:4e:35:b1:b7:52:
         cf:46:76:a7:7b:06:b9:02:5b:73:8a:41:d7:96:c7:79:73:15:
         77:29:00:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 16:35:17 2025 by rpki-client