Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.mft
File:                     tt41SvltyILzXBLU9fpnUHY6tyA.mft (raw, json)
Hash identifier:          uaBCz73i60Pa7ZmeSKJFqj8Dyfrxsby/S+X5UMssdzQ=
Subject key identifier:   B1:D6:48:1E:A0:E2:DE:6C:9E:B0:E6:55:BA:AC:42:03:BA:D1:67:7D
Authority key identifier: B6:DE:35:4A:F9:6D:C8:82:F3:5C:12:D4:F5:FA:67:50:76:3A:B7:20
Certificate issuer:       /CN=b6de354af96dc882f35c12d4f5fa6750763ab720
Certificate serial:       0197C4264DB36642845259A3DAD440D3B739
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tt41SvltyILzXBLU9fpnUHY6tyA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.mft
Manifest number:          0CE2
Signing time:             Tue 01 Jul 2025 04:02:13 +0000
Manifest this update:     Tue 01 Jul 2025 04:02:13 +0000
Manifest next update:     Wed 02 Jul 2025 04:02:13 +0000
Files and hashes:         1: tt41SvltyILzXBLU9fpnUHY6tyA.crl (hash: n4W5MEu3NIh/c0UVYux42OfZ0Q8csKi9Gx40880yYJs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tt41SvltyILzXBLU9fpnUHY6tyA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 01 Jul 2025 23:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c4:26:4d:b3:66:42:84:52:59:a3:da:d4:40:d3:b7:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6de354af96dc882f35c12d4f5fa6750763ab720
        Validity
            Not Before: Jul  1 04:02:13 2025 GMT
            Not After : Jul  2 04:02:13 2025 GMT
        Subject: CN=b1d6481ea0e2de6c9eb0e655baac4203bad1677d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d9:5f:de:4a:c6:fa:13:0a:e6:79:a4:4a:1e:
                    45:58:71:17:ea:98:24:0d:4b:6f:31:17:3a:be:ef:
                    73:34:fb:36:4a:c6:58:7c:90:1c:ec:aa:42:9b:1d:
                    30:04:c7:76:b7:92:5a:cf:67:0f:80:16:ff:fe:e1:
                    06:54:6d:a8:9c:33:6c:dd:f2:b0:b9:d1:7a:93:6c:
                    2a:04:06:6b:5b:79:4d:7e:83:6b:af:db:33:9f:45:
                    aa:d4:ac:54:13:d3:01:6f:55:9b:7b:3a:ef:e5:79:
                    39:28:8b:54:31:7d:0d:fb:f7:37:08:3e:f9:d4:ff:
                    db:6a:e2:6e:a5:94:2b:07:14:2f:df:52:14:df:a4:
                    3c:06:58:a0:e5:8f:b9:74:cd:84:16:bd:56:95:d6:
                    2a:19:1b:7b:d0:54:0d:7b:31:11:bd:06:dd:4d:f4:
                    e0:8d:82:22:ee:4f:a0:94:84:72:9c:b7:aa:bf:de:
                    80:21:5b:a4:4b:2c:ab:76:2b:a1:c8:be:20:3c:eb:
                    55:57:ec:a6:ac:e1:da:74:da:b8:be:73:fa:61:1a:
                    e2:02:76:01:2f:97:7b:d6:c2:23:72:3b:69:71:d3:
                    65:e5:ff:9d:b1:fe:f4:a0:f8:65:0d:93:6b:0d:9e:
                    a3:7f:f0:3e:98:7d:54:58:c2:69:31:c6:54:b7:87:
                    80:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:D6:48:1E:A0:E2:DE:6C:9E:B0:E6:55:BA:AC:42:03:BA:D1:67:7D
            X509v3 Authority Key Identifier:
                keyid:B6:DE:35:4A:F9:6D:C8:82:F3:5C:12:D4:F5:FA:67:50:76:3A:B7:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tt41SvltyILzXBLU9fpnUHY6tyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:36:42:eb:b5:43:c9:24:fd:75:e5:4a:24:71:3f:60:e2:da:
         f9:3d:41:e9:45:cf:67:bd:18:d5:a7:55:38:2a:ce:ab:88:5b:
         99:53:5c:e4:c4:60:0b:70:13:6a:ce:fe:f9:34:8f:fc:83:4d:
         01:09:0f:4f:91:56:77:aa:e3:a2:a2:fc:97:2e:de:92:3b:88:
         aa:66:6c:0f:ef:6b:0c:17:ab:ab:85:e2:dc:36:2e:b8:9c:76:
         c3:da:d5:c0:e9:90:37:4d:d2:74:72:61:9b:7f:f5:16:62:ef:
         d4:b1:ba:1b:72:bc:00:0d:89:5f:99:1b:75:00:73:ac:29:35:
         d9:1c:ff:66:65:17:51:79:5c:5f:7f:23:a7:20:ab:15:ee:55:
         6e:e4:aa:8a:24:5a:d6:60:fb:04:ff:17:92:f9:8c:b4:b9:45:
         46:23:30:05:5e:e0:8e:9d:dc:f4:c9:30:f4:7b:81:57:19:1b:
         bf:3e:1c:13:d0:b6:80:9b:e9:13:80:31:1c:b3:d2:59:7a:e9:
         9d:80:e5:0a:97:85:64:27:04:ab:20:98:04:65:f7:38:d9:b8:
         7d:6c:a7:55:9f:41:49:ee:ac:a2:18:f3:27:5d:46:c8:8c:eb:
         0a:d2:24:de:5c:35:05:85:6d:d0:4c:1b:e3:18:45:7f:0e:0d:
         9f:ae:6a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 07:04:42 2025 by rpki-client