Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.mft
File:                     mrVxtpr4VlCv_tzv5X0qc_1ubKk.mft (raw, json)
Hash identifier:          Oc4L5DEsRUmzctYEh1jQYMpuqsCtvAzzRLmyDT1L0hM=
Subject key identifier:   90:88:52:91:CA:54:98:DD:59:E0:DA:70:06:72:52:15:93:EF:05:B6
Authority key identifier: 9A:B5:71:B6:9A:F8:56:50:AF:FE:DC:EF:E5:7D:2A:73:FD:6E:6C:A9
Certificate issuer:       /CN=9ab571b69af85650affedcefe57d2a73fd6e6ca9
Certificate serial:       0197B8901E07DC09A58A41513A7B9A6C0017
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mrVxtpr4VlCv_tzv5X0qc_1ubKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.mft
Manifest number:          0BA2
Signing time:             Sat 28 Jun 2025 22:02:21 +0000
Manifest this update:     Sat 28 Jun 2025 22:02:21 +0000
Manifest next update:     Sun 29 Jun 2025 22:02:21 +0000
Files and hashes:         1: mrVxtpr4VlCv_tzv5X0qc_1ubKk.crl (hash: 9dkfqhdItl/Fxv4bpVlirVecEJIk27skzVF+i7ZAKiM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mrVxtpr4VlCv_tzv5X0qc_1ubKk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 22:02:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:90:1e:07:dc:09:a5:8a:41:51:3a:7b:9a:6c:00:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab571b69af85650affedcefe57d2a73fd6e6ca9
        Validity
            Not Before: Jun 28 22:02:21 2025 GMT
            Not After : Jun 29 22:02:21 2025 GMT
        Subject: CN=90885291ca5498dd59e0da700672521593ef05b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c3:6b:a5:67:36:83:4c:7f:b8:31:8a:28:2d:
                    44:8c:65:70:95:45:ae:9d:53:24:3c:29:c2:80:8d:
                    2b:4f:b5:34:43:75:61:25:37:5c:ff:85:0d:02:50:
                    91:66:3d:7a:19:25:cb:ae:a9:3f:40:01:b8:b6:f3:
                    43:10:8e:2e:ba:3d:2e:fc:f4:04:af:36:86:c7:83:
                    d3:6e:77:0e:da:c2:a0:21:0a:68:56:26:32:96:fd:
                    52:20:71:19:39:04:a3:e4:f6:f5:ea:1d:0b:9a:18:
                    1b:5f:1d:c1:c0:03:77:fc:e6:cd:9a:17:a0:70:c6:
                    82:0c:26:ff:df:f2:79:65:a1:e6:3a:8f:ca:e9:fa:
                    77:3c:f5:9f:0b:a5:33:e0:f6:28:cb:8c:16:4e:a1:
                    18:74:bb:85:fb:83:a3:79:1a:a7:bc:68:a9:0a:4a:
                    2f:99:bb:72:ba:51:90:b4:ed:39:36:55:e9:21:1b:
                    37:70:b0:06:99:1d:d4:72:aa:ca:29:cf:4f:75:79:
                    3c:3e:5b:39:ff:ed:ef:dc:b8:13:12:7f:c5:3c:8e:
                    d8:84:d4:fe:30:1b:06:09:c6:7b:aa:48:b4:a4:11:
                    c9:6c:ed:07:2e:80:b7:5b:7e:ad:5f:98:1a:23:ec:
                    bf:0d:1a:60:dd:d7:90:59:10:24:54:e0:bd:4a:eb:
                    a5:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:88:52:91:CA:54:98:DD:59:E0:DA:70:06:72:52:15:93:EF:05:B6
            X509v3 Authority Key Identifier:
                keyid:9A:B5:71:B6:9A:F8:56:50:AF:FE:DC:EF:E5:7D:2A:73:FD:6E:6C:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrVxtpr4VlCv_tzv5X0qc_1ubKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:02:45:58:3e:ce:70:9d:40:bc:b7:ff:bb:b4:b6:f9:6c:ed:
         97:af:2c:de:0c:60:f2:be:30:93:98:26:2d:48:a4:40:0c:83:
         6c:9f:7d:2a:c7:b3:58:37:c5:85:28:ac:2c:9c:1a:ee:2f:f7:
         c8:eb:0b:32:8f:c8:1f:c6:72:1f:5b:0c:4b:39:80:07:81:ff:
         8f:91:03:ff:c4:d6:1c:48:89:59:ce:1c:8b:1f:63:35:d6:5b:
         1b:75:85:3c:41:d6:8c:7d:2f:21:ab:1a:18:55:3e:a3:06:fd:
         f9:25:b4:0a:19:d9:59:be:cd:97:0a:a3:6c:65:9e:66:e4:f1:
         e0:5c:70:53:db:62:6f:4f:ba:3b:37:80:54:12:6f:d9:0b:e4:
         c1:4d:6e:5b:3f:0b:d8:52:ea:34:43:7c:1b:87:65:f9:34:00:
         85:c8:29:d9:b6:d6:f2:b7:90:5f:c4:d4:22:43:b2:76:b0:44:
         0b:5a:1a:b2:79:1b:80:d3:ca:85:fe:e0:11:6d:8f:cf:bc:11:
         eb:0e:d8:70:1a:d6:b5:01:ff:a8:02:95:90:6e:62:93:64:35:
         c0:bb:b1:83:ca:a2:2f:58:ba:4e:d3:39:ca:76:a6:a9:ef:5f:
         8b:ef:2e:18:f3:2b:49:cb:80:6e:04:06:18:12:3a:79:60:59:
         62:14:0b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:40:13 2025 by rpki-client