Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/931015-a80b-4844-ac37-6e8e98b90c5f/1/X6FRijy1wnSeMNn_Icg3iJHOgSU.mft
File:                     X6FRijy1wnSeMNn_Icg3iJHOgSU.mft (raw, json)
Hash identifier:          EA/SXx84U2+qb/K5PKc8ytwanRNg9bKNIlqdJQsQM1Y=
Subject key identifier:   30:DE:70:A9:92:F3:1C:D2:77:1D:DF:0E:CA:D6:6B:72:7D:7B:0F:90
Authority key identifier: 5F:A1:51:8A:3C:B5:C2:74:9E:30:D9:FF:21:C8:37:88:91:CE:81:25
Certificate issuer:       /CN=5fa1518a3cb5c2749e30d9ff21c8378891ce8125
Certificate serial:       01976961A7B2B60EAAEA76C4D0DF358A8E88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X6FRijy1wnSeMNn_Icg3iJHOgSU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/931015-a80b-4844-ac37-6e8e98b90c5f/1/X6FRijy1wnSeMNn_Icg3iJHOgSU.mft
Manifest number:          07FD
Signing time:             Fri 13 Jun 2025 13:01:36 +0000
Manifest this update:     Fri 13 Jun 2025 13:01:36 +0000
Manifest next update:     Sat 14 Jun 2025 13:01:36 +0000
Files and hashes:         1: X6FRijy1wnSeMNn_Icg3iJHOgSU.crl (hash: mJLOMY+u+AiywGH4jv1xBasUIdloiG+TrEuVN6kLT0A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/931015-a80b-4844-ac37-6e8e98b90c5f/1/X6FRijy1wnSeMNn_Icg3iJHOgSU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/931015-a80b-4844-ac37-6e8e98b90c5f/1/X6FRijy1wnSeMNn_Icg3iJHOgSU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X6FRijy1wnSeMNn_Icg3iJHOgSU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:61:a7:b2:b6:0e:aa:ea:76:c4:d0:df:35:8a:8e:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fa1518a3cb5c2749e30d9ff21c8378891ce8125
        Validity
            Not Before: Jun 13 13:01:36 2025 GMT
            Not After : Jun 14 13:01:36 2025 GMT
        Subject: CN=30de70a992f31cd2771ddf0ecad66b727d7b0f90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:fb:0f:5a:9b:c8:3f:17:95:84:81:00:e0:4d:
                    1e:99:5a:1e:4b:b6:4c:db:76:06:74:b5:dd:fc:52:
                    59:3c:3d:06:8e:05:3f:d9:db:75:1d:b9:63:57:d9:
                    34:b7:0b:03:17:6d:13:4f:e7:11:12:73:cd:fb:8f:
                    2d:fb:ba:57:d7:d4:bb:58:6a:c1:23:fd:16:37:e7:
                    09:e4:d0:5e:66:41:f0:7a:b1:3d:47:f1:a2:d9:5c:
                    6b:d2:f6:22:54:ed:74:18:2e:4c:81:77:b1:02:44:
                    71:98:48:67:30:10:00:56:dd:d2:4f:39:66:ef:68:
                    e1:49:e5:ff:61:1b:43:73:a4:42:2a:e3:fd:eb:a9:
                    81:01:8c:66:da:39:12:93:16:e6:ca:93:eb:b4:d2:
                    bf:40:62:55:5c:fd:49:36:84:cd:5b:f4:4d:a6:46:
                    b1:89:96:c5:b8:62:03:bb:19:7a:27:6b:bd:bc:55:
                    a8:f8:c0:96:b5:56:88:74:e1:1b:e6:d2:fc:ef:9c:
                    d4:7e:03:8a:ab:8b:db:79:7d:49:cf:25:35:2c:78:
                    0e:79:31:15:48:c3:ad:83:09:2a:4f:79:57:54:92:
                    89:85:03:51:1a:4b:c4:03:32:17:bd:e3:ef:92:f4:
                    b2:c2:8c:99:f4:46:02:e6:0a:2d:49:9f:51:ea:92:
                    18:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:DE:70:A9:92:F3:1C:D2:77:1D:DF:0E:CA:D6:6B:72:7D:7B:0F:90
            X509v3 Authority Key Identifier:
                keyid:5F:A1:51:8A:3C:B5:C2:74:9E:30:D9:FF:21:C8:37:88:91:CE:81:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6FRijy1wnSeMNn_Icg3iJHOgSU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/931015-a80b-4844-ac37-6e8e98b90c5f/1/X6FRijy1wnSeMNn_Icg3iJHOgSU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/931015-a80b-4844-ac37-6e8e98b90c5f/1/X6FRijy1wnSeMNn_Icg3iJHOgSU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:7d:1b:d2:97:48:88:e1:cb:59:42:f1:b9:47:88:4a:88:61:
         3a:b8:2e:e9:ea:75:67:66:f7:75:c3:8b:a3:02:dc:c4:01:68:
         c3:95:7e:35:cc:55:00:e0:40:42:28:08:09:45:e8:fe:dd:86:
         55:8f:cb:77:37:4f:1a:58:29:5a:8c:1a:f2:06:80:0e:c2:12:
         ba:15:87:91:8d:cd:82:8e:6b:86:52:c6:53:3d:3d:77:d9:a1:
         48:b4:b0:f3:0c:91:7d:8e:19:3c:31:b6:35:f1:6a:3e:db:28:
         64:75:fd:76:6b:a0:a8:69:96:30:e5:fb:fd:24:af:7f:15:5b:
         94:9b:b9:7e:44:45:a7:09:31:dc:36:b3:bb:8a:21:9a:84:22:
         c0:44:b2:bc:f6:f6:16:d5:81:af:97:3a:f1:a8:f3:82:a1:44:
         4c:e3:40:52:f7:24:49:34:35:b1:62:78:fc:46:01:91:c3:21:
         07:7b:9e:34:cf:bf:91:68:8b:1f:3b:c4:d1:63:b3:bf:bc:5b:
         41:47:9b:58:d6:30:68:04:7b:1e:1d:a6:68:c4:3b:79:e0:f3:
         3c:31:3c:5e:d0:74:26:f5:d9:af:fd:32:2e:7a:f8:72:02:ba:
         d1:35:2d:08:a6:de:30:0c:38:b6:c3:5f:8b:2d:e8:c7:57:32:
         7a:2e:80:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:18:42 2025 by rpki-client