Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/53d100-9976-494b-ae21-0b851038a5de/1/3EviU3WUInayZECX3D1ah1r7ivE.mft
File:                     3EviU3WUInayZECX3D1ah1r7ivE.mft (raw, json)
Hash identifier:          a93W6fBrWFvvUJgrCgt3DjwJeCusjvvG+mPJJKvZko4=
Subject key identifier:   FA:20:25:4A:CF:E3:3B:9A:DA:C8:F7:A1:B1:2C:20:55:1B:DF:2D:12
Authority key identifier: DC:4B:E2:53:75:94:22:76:B2:64:40:97:DC:3D:5A:87:5A:FB:8A:F1
Certificate issuer:       /CN=dc4be25375942276b2644097dc3d5a875afb8af1
Certificate serial:       019773090DF87F89A8A174C2CE4EF1C97CC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3EviU3WUInayZECX3D1ah1r7ivE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/53d100-9976-494b-ae21-0b851038a5de/1/3EviU3WUInayZECX3D1ah1r7ivE.mft
Manifest number:          0846
Signing time:             Sun 15 Jun 2025 10:01:02 +0000
Manifest this update:     Sun 15 Jun 2025 10:01:02 +0000
Manifest next update:     Mon 16 Jun 2025 10:01:02 +0000
Files and hashes:         1: 3EviU3WUInayZECX3D1ah1r7ivE.crl (hash: qv49pgzpf5rdP/gocwtV0QLvUVaMTlNlp16dYi3Oiao=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/53d100-9976-494b-ae21-0b851038a5de/1/3EviU3WUInayZECX3D1ah1r7ivE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/53d100-9976-494b-ae21-0b851038a5de/1/3EviU3WUInayZECX3D1ah1r7ivE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3EviU3WUInayZECX3D1ah1r7ivE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 10:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:73:09:0d:f8:7f:89:a8:a1:74:c2:ce:4e:f1:c9:7c:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc4be25375942276b2644097dc3d5a875afb8af1
        Validity
            Not Before: Jun 15 10:01:02 2025 GMT
            Not After : Jun 16 10:01:02 2025 GMT
        Subject: CN=fa20254acfe33b9adac8f7a1b12c20551bdf2d12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:a8:69:40:31:f2:0d:7a:c3:bd:bc:91:06:c3:
                    f4:f2:b4:fb:92:03:9f:ff:45:48:b6:d9:ea:5e:cc:
                    79:ae:8b:74:71:90:72:ec:5f:0e:71:f7:a1:9e:78:
                    39:65:6b:f4:af:0b:4f:3f:b7:20:ff:65:f2:47:a5:
                    b8:b6:ca:ff:06:82:4d:a1:7a:ce:14:c4:83:00:7a:
                    25:5c:31:b9:b7:ff:db:9c:df:20:10:48:76:f6:84:
                    6f:76:80:09:f8:89:c6:4b:61:dc:b3:53:17:2e:94:
                    eb:58:8b:3a:f7:b1:66:d2:78:6b:b5:6b:75:bd:4d:
                    8d:16:b4:92:bf:53:8b:2a:a8:d1:9a:37:a3:88:0a:
                    03:8b:68:d1:50:05:b6:a2:c0:93:f2:ef:7f:c3:b8:
                    2a:54:c6:b1:72:22:40:4b:23:df:84:cb:3f:14:a3:
                    0a:4b:c8:54:c5:1b:c5:06:f8:4d:e1:92:f4:5d:05:
                    53:56:b8:80:83:8c:d6:6f:54:01:d1:da:09:9e:02:
                    f1:d8:04:f7:81:26:dc:15:35:09:b6:7c:6c:12:f9:
                    66:3f:cf:a9:65:88:62:ac:58:4e:01:4f:22:5c:1e:
                    dc:f2:ad:8e:89:e7:9c:a4:25:72:a1:4e:c4:35:13:
                    82:c7:fd:f1:a9:0d:0a:f7:d2:f7:4e:2d:91:1f:83:
                    6c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:20:25:4A:CF:E3:3B:9A:DA:C8:F7:A1:B1:2C:20:55:1B:DF:2D:12
            X509v3 Authority Key Identifier:
                keyid:DC:4B:E2:53:75:94:22:76:B2:64:40:97:DC:3D:5A:87:5A:FB:8A:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EviU3WUInayZECX3D1ah1r7ivE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/53d100-9976-494b-ae21-0b851038a5de/1/3EviU3WUInayZECX3D1ah1r7ivE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/53d100-9976-494b-ae21-0b851038a5de/1/3EviU3WUInayZECX3D1ah1r7ivE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:d8:98:2d:03:e6:38:95:99:e5:48:e8:c6:f4:08:c7:4b:0b:
         32:c0:04:fc:db:c5:6c:40:a5:8e:b7:4c:70:3a:99:5f:3d:3a:
         a4:f8:51:a9:02:07:0f:03:83:85:10:51:b5:41:bd:6c:60:ab:
         23:e5:7c:fc:74:09:0e:e8:f1:35:de:c8:af:e9:2b:f1:25:1f:
         75:5a:f3:05:1a:c7:89:90:fa:12:90:cf:9e:5d:14:d1:c8:20:
         40:61:6b:2b:32:5d:1f:dc:d5:28:ec:e1:4b:a2:5c:04:03:27:
         28:7c:47:fe:97:2b:3d:35:bd:42:e8:67:b1:f4:b6:e7:61:df:
         87:a2:a6:a4:0f:22:78:04:12:5f:b2:10:bf:f4:ed:65:2f:54:
         7c:85:57:a0:5c:52:7e:16:f7:29:74:83:e1:fc:94:7c:5f:61:
         c2:be:6a:bd:14:35:e8:43:01:93:c6:6c:fa:c0:18:de:df:b7:
         2e:b4:9e:98:19:54:b3:83:b6:f6:e3:d5:b8:7d:4b:8e:bd:40:
         dc:0b:14:2a:88:b0:db:4f:a0:d0:bb:d2:f2:22:96:f4:7b:6c:
         08:35:b4:43:f8:98:1a:2b:d6:e7:e3:cf:cb:59:1e:d4:ff:45:
         cc:c1:a2:7c:7f:d9:ff:73:e8:5a:d9:66:e1:4c:0b:82:76:c7:
         62:8a:51:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:06:52 2025 by rpki-client