Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/eda8ef-36d3-45d4-911e-5fa90c13e1b7/1/1-M_cDl7bHMMj-TRP4oJ8eT6VrG8.mft
File:                     1-M_cDl7bHMMj-TRP4oJ8eT6VrG8.mft (raw, json)
Hash identifier:          wN5p3JdeD4Dg6mAloVeO+t+YMI48kh6UxJ1CtDaFFK8=
Subject key identifier:   91:EF:DF:86:E8:98:3F:26:C5:E8:77:FE:7F:93:86:8A:2E:5A:41:08
Authority key identifier: F8:CF:DC:0E:5E:DB:1C:C3:23:F9:34:4F:E2:82:7C:79:3E:95:AC:6F
Certificate issuer:       /CN=f8cfdc0e5edb1cc323f9344fe2827c793e95ac6f
Certificate serial:       0197B7455410E7F7017CBCF46EA00D706647
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-M_cDl7bHMMj-TRP4oJ8eT6VrG8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/eda8ef-36d3-45d4-911e-5fa90c13e1b7/1/1-M_cDl7bHMMj-TRP4oJ8eT6VrG8.mft
Manifest number:          10E2
Signing time:             Sat 28 Jun 2025 16:01:03 +0000
Manifest this update:     Sat 28 Jun 2025 16:01:03 +0000
Manifest next update:     Sun 29 Jun 2025 16:01:03 +0000
Files and hashes:         1: 1-M_cDl7bHMMj-TRP4oJ8eT6VrG8.crl (hash: 6adFynvbYiSW60q7m25ay8d1KfznYw70yuh9tDVf0HQ=)
                          2: 7AjGLQsJj7KXSqBNNqiLp45yitU.roa (hash: z05Ju9vFqoh0JjoPd8SpAqwh3plkGnHfuFRv3k0ibgU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/eda8ef-36d3-45d4-911e-5fa90c13e1b7/1/1-M_cDl7bHMMj-TRP4oJ8eT6VrG8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/eda8ef-36d3-45d4-911e-5fa90c13e1b7/1/1-M_cDl7bHMMj-TRP4oJ8eT6VrG8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-M_cDl7bHMMj-TRP4oJ8eT6VrG8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:54:10:e7:f7:01:7c:bc:f4:6e:a0:0d:70:66:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8cfdc0e5edb1cc323f9344fe2827c793e95ac6f
        Validity
            Not Before: Jun 28 16:01:03 2025 GMT
            Not After : Jun 29 16:01:03 2025 GMT
        Subject: CN=91efdf86e8983f26c5e877fe7f93868a2e5a4108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:dc:45:96:39:55:54:da:ac:18:ae:cd:42:c6:
                    e8:fc:d0:c4:66:50:71:77:ce:d4:a2:9e:34:ad:97:
                    5b:98:8a:92:0c:9c:ae:9f:c3:69:d6:b0:d8:c8:3d:
                    12:fd:65:14:5b:d9:9f:0a:d4:75:56:b3:f9:96:95:
                    26:43:88:dd:49:c0:73:a9:65:6f:11:69:06:23:50:
                    2f:1d:0c:d8:48:b3:2b:38:06:94:c4:8c:45:97:5b:
                    d3:29:de:a7:44:19:63:30:cb:af:45:04:c2:d3:ce:
                    9f:15:db:44:5a:b9:cc:4d:ab:e9:ed:22:ac:39:52:
                    55:13:95:3e:f0:88:4e:23:75:28:ab:90:2a:dd:3f:
                    3f:dd:83:68:f4:27:9a:93:c9:a1:b0:23:2b:e7:57:
                    0a:b5:47:ea:1d:02:65:96:ba:98:53:f5:86:c3:b7:
                    85:eb:54:3c:23:e4:6d:51:71:7f:fb:bc:8d:02:f6:
                    fa:f0:2b:b1:47:92:d9:c7:d0:74:09:57:0f:6f:05:
                    2e:6d:5e:11:50:af:6c:6d:e5:6c:00:50:53:75:1f:
                    8a:6b:4a:2c:51:de:97:04:de:a6:9b:71:68:72:37:
                    21:ce:d0:e6:07:d6:09:86:c6:a1:dc:94:db:5f:be:
                    ac:bb:27:3d:ce:87:18:2f:18:03:4b:8b:f6:a2:0d:
                    db:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:EF:DF:86:E8:98:3F:26:C5:E8:77:FE:7F:93:86:8A:2E:5A:41:08
            X509v3 Authority Key Identifier:
                keyid:F8:CF:DC:0E:5E:DB:1C:C3:23:F9:34:4F:E2:82:7C:79:3E:95:AC:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-M_cDl7bHMMj-TRP4oJ8eT6VrG8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/eda8ef-36d3-45d4-911e-5fa90c13e1b7/1/1-M_cDl7bHMMj-TRP4oJ8eT6VrG8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/eda8ef-36d3-45d4-911e-5fa90c13e1b7/1/1-M_cDl7bHMMj-TRP4oJ8eT6VrG8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:9c:54:ee:fb:e9:c5:50:5c:95:e3:f2:fc:ff:8f:ba:8e:0f:
         98:a6:5c:86:c2:be:fb:f0:ed:56:8b:3e:6d:95:e5:cb:a5:b5:
         7b:20:b4:d9:3c:33:1d:ed:6c:fc:7b:f6:7e:c3:cd:b5:ba:97:
         0e:66:d4:61:81:61:64:68:5a:c1:ac:c1:fb:ba:0a:b1:c7:a2:
         da:99:ca:8a:3e:52:fe:25:3c:da:d3:1a:c3:46:e3:82:25:18:
         ca:1d:81:a4:72:29:ce:34:c4:b2:51:b5:04:4e:0c:23:ba:4b:
         fa:b5:d3:c8:47:3b:cc:d5:de:e3:82:35:08:d4:2f:cb:50:f6:
         45:ff:b5:84:9f:1e:4c:77:10:a2:7b:67:37:fd:77:14:a2:10:
         8e:3e:20:a2:3c:72:5f:c7:4a:16:39:7b:b5:5e:5c:d0:d7:db:
         e8:12:1a:79:66:6c:36:1d:26:f5:68:35:73:f3:ee:47:80:e2:
         69:a2:dc:8c:f2:df:fe:30:a8:c8:be:72:ed:61:54:b9:99:be:
         44:fd:7b:d5:05:a2:c6:fd:2c:e1:c4:f2:45:eb:61:21:3c:06:
         bb:08:5c:d4:63:9c:43:ee:d1:11:1c:7a:a9:d6:e9:fe:51:8f:
         22:20:c8:3f:7e:d5:62:25:89:36:17:ec:f0:63:77:44:60:f3:
         89:93:73:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:08:27 2025 by rpki-client