Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.mft
File:                     a4PZKBp6UIq_xJUwSumcmMBCxhE.mft (raw, json)
Hash identifier:          afDiubiXqVwU/rghXiicwvuuNozKQ3ohMWNSTs5xJbw=
Subject key identifier:   7E:22:27:03:2F:BA:A5:8B:8D:72:2C:69:40:F3:BB:CB:DF:89:3B:21
Authority key identifier: 6B:83:D9:28:1A:7A:50:8A:BF:C4:95:30:4A:E9:9C:98:C0:42:C6:11
Certificate issuer:       /CN=6b83d9281a7a508abfc495304ae99c98c042c611
Certificate serial:       019771BF99FC7611069FA0043DEB8070E94D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a4PZKBp6UIq_xJUwSumcmMBCxhE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.mft
Manifest number:          1521
Signing time:             Sun 15 Jun 2025 04:01:11 +0000
Manifest this update:     Sun 15 Jun 2025 04:01:11 +0000
Manifest next update:     Mon 16 Jun 2025 04:01:11 +0000
Files and hashes:         1: a4PZKBp6UIq_xJUwSumcmMBCxhE.crl (hash: id+Jj2zVh3WKIw9orzBkfR3ug662keyEnCG5CrOFE/o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a4PZKBp6UIq_xJUwSumcmMBCxhE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:bf:99:fc:76:11:06:9f:a0:04:3d:eb:80:70:e9:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b83d9281a7a508abfc495304ae99c98c042c611
        Validity
            Not Before: Jun 15 04:01:11 2025 GMT
            Not After : Jun 16 04:01:11 2025 GMT
        Subject: CN=7e2227032fbaa58b8d722c6940f3bbcbdf893b21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7c:ff:a9:2c:ab:35:93:1a:87:ad:42:12:e0:
                    de:d2:19:cc:e5:8e:75:c9:39:65:87:25:4b:6d:02:
                    a3:db:fe:0a:fb:07:ab:16:cd:e1:4f:a8:60:51:8c:
                    48:0d:15:79:ca:1c:d4:95:2c:98:c4:10:c2:01:86:
                    cd:64:41:c2:73:f1:ff:0e:5d:52:01:f9:57:b7:2d:
                    cf:d4:0a:64:79:32:36:5d:e6:3b:0f:62:05:57:34:
                    10:3a:04:68:3b:90:94:94:c2:33:70:6e:2f:42:e4:
                    75:de:60:7f:9f:75:be:4d:07:79:6a:1a:5e:df:60:
                    88:d0:35:6e:aa:ab:54:d0:22:45:df:e1:ff:b8:9f:
                    79:0c:8b:50:3d:e0:d2:c6:b1:77:2e:67:9b:53:c0:
                    f6:6a:3a:3c:7e:d8:44:19:dd:32:fc:08:bd:86:29:
                    3b:9c:f4:13:dd:5a:8a:19:48:f9:89:34:56:e3:5d:
                    6b:a1:43:7a:98:58:e9:a2:27:a0:d1:47:61:8a:25:
                    85:e1:96:3c:15:5d:18:da:9b:dd:1f:98:01:45:4a:
                    a8:60:6c:13:c4:05:2e:04:86:b1:f9:cc:b6:c0:d8:
                    ef:c0:5d:a2:e1:8f:4d:21:20:77:47:e5:86:43:cf:
                    65:fc:3d:0a:5e:ec:de:7c:aa:aa:20:bf:6d:12:98:
                    a4:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:22:27:03:2F:BA:A5:8B:8D:72:2C:69:40:F3:BB:CB:DF:89:3B:21
            X509v3 Authority Key Identifier:
                keyid:6B:83:D9:28:1A:7A:50:8A:BF:C4:95:30:4A:E9:9C:98:C0:42:C6:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4PZKBp6UIq_xJUwSumcmMBCxhE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:cd:71:b8:f5:d2:e0:05:a0:7d:22:d3:ac:f6:9c:2f:e2:a3:
         19:30:07:14:51:7e:b9:2c:16:ec:a8:0a:8a:2f:28:07:d7:ba:
         36:f3:2e:2e:61:ed:fb:58:5d:6f:35:98:23:3b:d3:73:c5:67:
         9b:82:73:ef:5f:d5:b6:17:49:2f:77:20:7a:64:50:93:02:1a:
         73:c4:f7:52:ee:78:0b:54:42:bd:df:a2:b1:5c:63:2f:bb:42:
         68:0b:76:38:3e:e8:25:36:90:f7:af:31:8e:70:68:b6:92:af:
         7d:e9:21:34:e8:b7:39:67:63:36:e1:dc:36:45:e0:a4:ed:db:
         d3:fa:3a:28:4a:36:79:6f:14:4f:c8:2a:eb:5e:4d:9a:8b:5e:
         ec:55:cd:5d:49:a9:14:14:fb:aa:20:d4:0d:eb:88:26:83:85:
         ff:22:e7:0d:6a:22:0f:70:86:de:18:c5:7e:a7:60:c1:c1:01:
         20:79:7b:40:81:12:2c:07:e4:2b:ed:d0:46:ca:8e:ff:e4:00:
         14:a4:de:0b:20:ba:a9:d5:71:9e:00:43:fd:64:ba:b5:de:41:
         07:34:63:12:e4:a9:6a:89:ff:18:2a:9c:05:96:d2:f4:c0:32:
         4b:b1:29:40:58:8a:0d:30:ba:88:50:58:57:c6:90:37:db:9f:
         10:19:8b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:08:37 2025 by rpki-client