Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e794b3-8a2e-4b76-8f0d-29a33902a76f/1/F3XdxSn1elmets19uiuSstN190o.mft
File:                     F3XdxSn1elmets19uiuSstN190o.mft (raw, json)
Hash identifier:          FOaBOsxHo17drpdWcC2FGNvCdzl63/AIOiWYwRxdm0M=
Subject key identifier:   B0:7A:20:00:6B:15:72:21:09:21:B2:35:10:8F:E2:A5:83:39:BF:8F
Authority key identifier: 17:75:DD:C5:29:F5:7A:59:9E:B6:CD:7D:BA:2B:92:B2:D3:75:F7:4A
Certificate issuer:       /CN=1775ddc529f57a599eb6cd7dba2b92b2d375f74a
Certificate serial:       01976F2C5DA3028153C9CD3217D17B375250
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F3XdxSn1elmets19uiuSstN190o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/e794b3-8a2e-4b76-8f0d-29a33902a76f/1/F3XdxSn1elmets19uiuSstN190o.mft
Manifest number:          07C5
Signing time:             Sat 14 Jun 2025 16:01:07 +0000
Manifest this update:     Sat 14 Jun 2025 16:01:07 +0000
Manifest next update:     Sun 15 Jun 2025 16:01:07 +0000
Files and hashes:         1: F3XdxSn1elmets19uiuSstN190o.crl (hash: BIOE51Qs2GTMrKVQMn3KxIUYkKwbo2sV2jHLbDQQVFg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/e794b3-8a2e-4b76-8f0d-29a33902a76f/1/F3XdxSn1elmets19uiuSstN190o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/e794b3-8a2e-4b76-8f0d-29a33902a76f/1/F3XdxSn1elmets19uiuSstN190o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F3XdxSn1elmets19uiuSstN190o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 16:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:2c:5d:a3:02:81:53:c9:cd:32:17:d1:7b:37:52:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1775ddc529f57a599eb6cd7dba2b92b2d375f74a
        Validity
            Not Before: Jun 14 16:01:07 2025 GMT
            Not After : Jun 15 16:01:07 2025 GMT
        Subject: CN=b07a20006b1572210921b235108fe2a58339bf8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ef:1b:76:c0:e1:2f:fd:fa:60:af:a3:75:5b:
                    e4:97:e4:28:93:97:d9:a7:4e:4e:a8:51:e4:96:70:
                    03:df:80:dd:d9:ca:68:f8:45:3b:a5:bf:fa:db:17:
                    3e:e1:0b:2f:7c:a2:c6:03:de:fd:52:0c:34:3d:ab:
                    24:e5:03:6f:53:15:72:03:03:fe:50:1c:2f:c6:8a:
                    8e:d3:c8:5c:64:68:b6:26:9c:97:1c:6d:5b:9a:8a:
                    2f:47:af:39:70:70:32:24:84:fa:e1:e7:32:86:04:
                    b5:ae:65:12:d8:ff:cb:f3:8a:74:81:52:ff:ae:2e:
                    a4:8f:4b:c3:f5:5e:c1:98:3b:a2:3b:17:f5:24:bb:
                    5f:35:08:70:d6:89:82:77:82:0d:c6:43:53:e7:b3:
                    03:5c:f0:46:69:fd:42:23:ae:65:4a:cd:d0:04:af:
                    27:cc:ef:be:7a:a6:3a:c8:e5:a5:65:d6:29:eb:6b:
                    21:d3:1a:0f:d4:ee:7b:ed:44:68:77:7a:48:71:88:
                    b6:36:f0:41:e5:13:10:91:a4:e4:9b:a3:13:ad:f2:
                    33:66:34:43:33:3d:b6:2c:37:98:9d:7c:1c:7e:81:
                    34:c1:5c:d2:c7:dc:a3:1b:59:e2:39:0c:44:ab:89:
                    e0:e7:91:87:11:9b:eb:39:12:a0:bf:16:81:8c:a4:
                    a7:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:7A:20:00:6B:15:72:21:09:21:B2:35:10:8F:E2:A5:83:39:BF:8F
            X509v3 Authority Key Identifier:
                keyid:17:75:DD:C5:29:F5:7A:59:9E:B6:CD:7D:BA:2B:92:B2:D3:75:F7:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3XdxSn1elmets19uiuSstN190o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e794b3-8a2e-4b76-8f0d-29a33902a76f/1/F3XdxSn1elmets19uiuSstN190o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e794b3-8a2e-4b76-8f0d-29a33902a76f/1/F3XdxSn1elmets19uiuSstN190o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:26:df:50:48:e4:b1:33:df:b6:14:ed:db:cd:90:88:77:0f:
         b4:ff:d2:22:2a:e9:f7:b5:d6:72:de:fb:51:fb:cb:dd:b6:6e:
         87:38:c4:b4:23:9f:bd:42:be:63:ec:0e:f3:00:03:32:71:d8:
         a7:e4:01:c8:75:e2:68:19:c8:e0:a0:13:30:81:e3:cc:8a:1e:
         40:54:3f:e9:21:76:d9:6a:10:4f:5c:ca:6f:e1:55:78:ce:1d:
         32:91:d9:4b:76:83:a4:02:94:04:c4:aa:89:56:e1:4b:c4:87:
         68:15:cc:e2:e6:e3:c6:9a:7d:69:53:bc:45:67:e7:6b:7c:7c:
         e9:a3:aa:c9:66:32:7e:ff:e0:e5:8f:89:ce:df:bb:40:db:74:
         b5:e6:f5:7f:1f:bd:25:b8:db:65:65:10:b5:20:82:13:a5:0c:
         04:03:42:0c:a2:a3:55:cb:09:10:03:08:ae:39:ca:ca:42:b7:
         4d:fa:34:01:c3:fb:b8:f2:38:52:75:32:59:f5:90:13:b6:35:
         ad:14:3d:14:48:d9:1b:30:a2:b4:f5:c2:d0:6e:9b:51:88:87:
         40:0d:a4:5b:27:27:c3:71:0e:9e:a1:01:a4:ce:45:e4:10:c4:
         ec:e5:1f:2c:c9:0e:e0:95:1e:3d:95:b2:e2:ce:24:6a:7e:be:
         c5:5a:b6:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 02:00:36 2025 by rpki-client