Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/c92c58-c727-4de0-84a6-7cf4dc67aa70/1/E_-Kk0rrWapFoeVUiOO4i-HgE1s.mft
File:                     E_-Kk0rrWapFoeVUiOO4i-HgE1s.mft (raw, json)
Hash identifier:          SNb9+5xe183d6fuOlp11bkDIePNdbJvKDEuur1RV9oY=
Subject key identifier:   DF:2A:9C:C2:2F:BA:1F:F8:7A:58:2A:C2:EB:F5:6A:CE:A6:3F:F7:B8
Authority key identifier: 13:FF:8A:93:4A:EB:59:AA:45:A1:E5:54:88:E3:B8:8B:E1:E0:13:5B
Certificate issuer:       /CN=13ff8a934aeb59aa45a1e55488e3b88be1e0135b
Certificate serial:       0197B7453626E556F39A5C18E90A6F6EFD3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E_-Kk0rrWapFoeVUiOO4i-HgE1s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/c92c58-c727-4de0-84a6-7cf4dc67aa70/1/E_-Kk0rrWapFoeVUiOO4i-HgE1s.mft
Manifest number:          09D6
Signing time:             Sat 28 Jun 2025 16:00:55 +0000
Manifest this update:     Sat 28 Jun 2025 16:00:55 +0000
Manifest next update:     Sun 29 Jun 2025 16:00:55 +0000
Files and hashes:         1: E_-Kk0rrWapFoeVUiOO4i-HgE1s.crl (hash: JesHPfguKvGU830oLhE9V/GEyuZU9Rkwe8FohSmwVSQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/c92c58-c727-4de0-84a6-7cf4dc67aa70/1/E_-Kk0rrWapFoeVUiOO4i-HgE1s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/c92c58-c727-4de0-84a6-7cf4dc67aa70/1/E_-Kk0rrWapFoeVUiOO4i-HgE1s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E_-Kk0rrWapFoeVUiOO4i-HgE1s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:36:26:e5:56:f3:9a:5c:18:e9:0a:6f:6e:fd:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13ff8a934aeb59aa45a1e55488e3b88be1e0135b
        Validity
            Not Before: Jun 28 16:00:55 2025 GMT
            Not After : Jun 29 16:00:55 2025 GMT
        Subject: CN=df2a9cc22fba1ff87a582ac2ebf56acea63ff7b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0f:96:8a:0b:8a:ba:ac:0f:47:45:04:5e:e5:
                    50:e2:81:5b:d5:e9:2e:40:bc:84:fc:1e:db:84:0f:
                    68:17:67:46:30:88:78:4c:fb:8a:38:68:c7:32:8a:
                    aa:f9:30:38:5a:09:de:47:e0:15:ce:e1:8d:43:39:
                    db:d5:af:fb:4d:48:50:53:a3:85:b1:e6:37:b8:2f:
                    82:83:61:31:32:bd:4f:16:fe:45:e5:e8:70:fb:eb:
                    c1:ee:c3:ab:c5:a2:13:56:0d:0c:68:75:66:d2:90:
                    af:63:70:cf:55:9b:ca:5b:8e:eb:fa:67:51:06:0b:
                    c3:00:1b:52:39:ef:28:e8:a3:f2:c8:9d:31:27:08:
                    cf:96:29:4d:1d:00:40:95:a7:cf:10:65:81:d0:ce:
                    41:1b:a7:b7:44:99:42:47:b5:5a:9f:95:47:99:52:
                    9c:96:2f:bd:cb:88:ba:eb:f1:fb:41:12:f2:61:10:
                    d0:45:21:6c:2a:c1:f6:d7:7f:1b:ec:4a:84:7e:53:
                    fe:0f:76:0f:7f:15:40:0d:16:7a:e3:25:27:63:bc:
                    72:fc:23:e7:2a:07:0a:e2:5d:8d:6b:19:ac:34:2d:
                    4e:ac:02:d0:36:87:04:d4:9c:51:b9:85:60:c1:4f:
                    71:56:e1:2e:a0:d1:62:d5:55:fe:4b:4e:0d:3b:89:
                    b8:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:2A:9C:C2:2F:BA:1F:F8:7A:58:2A:C2:EB:F5:6A:CE:A6:3F:F7:B8
            X509v3 Authority Key Identifier:
                keyid:13:FF:8A:93:4A:EB:59:AA:45:A1:E5:54:88:E3:B8:8B:E1:E0:13:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_-Kk0rrWapFoeVUiOO4i-HgE1s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c92c58-c727-4de0-84a6-7cf4dc67aa70/1/E_-Kk0rrWapFoeVUiOO4i-HgE1s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c92c58-c727-4de0-84a6-7cf4dc67aa70/1/E_-Kk0rrWapFoeVUiOO4i-HgE1s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:c5:ca:7f:c4:64:ae:b5:4a:8c:e3:7b:a2:6b:27:7d:fb:cc:
         f1:ef:72:ad:33:ee:5f:29:0e:07:90:cb:ca:80:05:4f:e8:fd:
         46:6f:fb:1c:23:d5:d9:dd:7c:a8:96:23:2e:4a:6a:0f:40:32:
         5a:83:7a:85:37:db:c2:29:16:2b:26:6b:29:2c:7f:ed:1d:3d:
         1d:e2:9a:e0:e1:00:48:d9:50:66:a1:f7:2a:5c:2f:95:bb:77:
         e0:03:e7:90:3a:2b:16:a9:01:54:05:d3:a6:15:fd:61:f3:a2:
         20:95:53:ea:34:7a:4e:f8:cc:fe:f0:6d:0c:86:0d:c0:0e:57:
         70:18:e2:d5:61:4a:43:69:95:8d:fd:ee:df:fb:45:8f:38:50:
         6e:ff:17:87:3d:ee:85:52:b9:98:7c:d0:a5:9e:ea:07:07:20:
         25:43:91:7c:eb:63:82:8b:5e:db:cf:51:1c:f1:b3:3d:63:65:
         7b:df:8d:1d:6f:38:5c:cc:31:68:6d:9a:6e:e4:2a:15:4e:25:
         37:ba:e2:c5:a2:7c:5b:09:4b:19:89:48:5c:3d:b1:90:0c:e9:
         f0:38:47:79:f7:3b:e8:1c:db:e8:d5:6d:6e:e1:19:00:3c:86:
         b1:64:63:75:5e:a7:85:96:0c:b9:2b:ef:5a:25:8b:9f:07:db:
         96:7a:e9:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:13:58 2025 by rpki-client