Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft
File:                     cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft (raw, json)
Hash identifier:          XlF+t38UUDaZUswnfdiSAH29um5pZjmyoacfMeUpiNg=
Subject key identifier:   CD:B6:C5:DA:EE:37:E7:60:0E:13:88:55:F4:1C:7D:98:D6:16:2F:9F
Authority key identifier: 72:E5:88:DA:4A:6C:F0:41:3F:FB:30:16:BE:46:78:EC:99:A9:8D:F9
Certificate issuer:       /CN=72e588da4a6cf0413ffb3016be4678ec99a98df9
Certificate serial:       01976A0614BAB7241A0A1F18023FEA468180
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cuWI2kps8EE_-zAWvkZ47Jmpjfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft
Manifest number:          065E
Signing time:             Fri 13 Jun 2025 16:01:12 +0000
Manifest this update:     Fri 13 Jun 2025 16:01:12 +0000
Manifest next update:     Sat 14 Jun 2025 16:01:12 +0000
Files and hashes:         1: cuWI2kps8EE_-zAWvkZ47Jmpjfk.crl (hash: Hk/dUjBGangXwiJ4QLPZJfD0N4YJ/EFkiTXBU89lAMA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cuWI2kps8EE_-zAWvkZ47Jmpjfk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6a:06:14:ba:b7:24:1a:0a:1f:18:02:3f:ea:46:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72e588da4a6cf0413ffb3016be4678ec99a98df9
        Validity
            Not Before: Jun 13 16:01:12 2025 GMT
            Not After : Jun 14 16:01:12 2025 GMT
        Subject: CN=cdb6c5daee37e7600e138855f41c7d98d6162f9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:80:72:90:3b:76:15:f2:65:fd:c5:59:4b:79:
                    80:e1:60:7d:98:67:0e:11:dd:e5:8a:c6:1d:78:b1:
                    ba:13:79:61:25:88:5d:06:57:d4:fc:d5:b5:06:7f:
                    4d:9e:89:18:b9:63:3e:81:5c:11:f7:e3:d7:aa:ea:
                    0b:8d:55:53:64:17:8f:b6:48:2a:bb:ea:72:d6:80:
                    c5:82:89:99:c8:65:50:03:2c:d2:75:22:69:6e:ac:
                    8a:96:e5:0d:0a:0d:3b:4f:60:23:be:18:68:57:8f:
                    7c:92:7c:0f:d7:2d:8d:84:80:97:53:45:97:82:9c:
                    97:62:52:4d:06:c6:08:ab:02:bf:ab:00:f3:f8:c0:
                    e6:f7:f4:40:f2:b4:fb:9b:8e:67:72:de:97:8a:d4:
                    73:98:33:e7:67:d8:07:51:a2:1b:c7:a0:84:77:70:
                    e3:bc:3d:1f:bf:31:62:a4:37:cd:79:95:a4:f5:8d:
                    98:5a:73:92:0c:f9:54:75:4a:20:47:5d:e2:b2:c6:
                    75:49:cc:46:57:e3:cc:6b:32:36:c7:40:56:01:5a:
                    02:78:2e:ee:16:06:e8:14:21:74:c2:cb:57:63:96:
                    0b:c6:91:62:fc:15:29:17:2b:7a:6e:85:54:d1:c1:
                    81:75:a2:36:4e:c2:c9:2c:28:51:a1:1b:14:a3:dc:
                    d3:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:B6:C5:DA:EE:37:E7:60:0E:13:88:55:F4:1C:7D:98:D6:16:2F:9F
            X509v3 Authority Key Identifier:
                keyid:72:E5:88:DA:4A:6C:F0:41:3F:FB:30:16:BE:46:78:EC:99:A9:8D:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuWI2kps8EE_-zAWvkZ47Jmpjfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:40:d8:b9:da:3a:58:81:55:b4:29:22:b8:da:b5:eb:b2:68:
         e2:15:d5:14:2a:75:bc:93:d6:40:70:3b:e6:c0:01:a9:2d:1b:
         4a:33:39:6b:aa:cb:7b:f6:70:5c:43:87:e4:dd:80:6e:b7:a5:
         ba:82:d7:53:7e:9c:a9:e3:90:0a:7b:52:f2:44:56:c9:53:cd:
         a4:d7:5b:e1:ae:2b:2a:af:32:e8:58:a7:3e:72:f8:2d:89:67:
         1b:c4:89:8e:25:44:ad:8e:08:86:eb:10:a5:fc:68:65:ac:af:
         d0:71:4f:3b:e8:89:a4:d8:f4:03:87:f2:34:14:82:e2:ec:17:
         ec:39:06:38:2d:f2:c0:ba:63:85:96:75:b2:42:71:60:5c:30:
         0f:05:a1:b9:94:6a:47:bf:bb:72:80:9f:9d:61:33:6b:0c:3a:
         e9:6a:ab:9e:e2:f2:0e:ec:8b:dd:ba:21:53:b8:2d:45:fd:3b:
         b4:ae:85:46:9a:dc:4e:33:64:ae:b2:1a:cc:93:1e:09:fc:ea:
         41:1d:94:56:11:1f:43:96:21:ff:41:2b:f6:8d:a1:62:eb:a3:
         e5:90:45:1a:31:3d:71:dc:32:dd:bd:2a:9f:46:33:ba:b4:39:
         ba:f2:4c:30:57:94:e7:54:ee:02:e1:9c:de:c7:d2:24:aa:10:
         0e:6a:bd:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:40:36 2025 by rpki-client