Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.mft
File:                     5llE5PrhnBWib8tfJzL_G6I9NU0.mft (raw, json)
Hash identifier:          6vMJTqRJD3HzMqvN7BabHrtUkzIs4pIR1CT06DrJyEQ=
Subject key identifier:   3C:65:9E:E0:94:4A:46:21:8E:23:BF:34:9C:DF:CC:58:5F:8E:6E:74
Authority key identifier: E6:59:44:E4:FA:E1:9C:15:A2:6F:CB:5F:27:32:FF:1B:A2:3D:35:4D
Certificate issuer:       /CN=e65944e4fae19c15a26fcb5f2732ff1ba23d354d
Certificate serial:       0197B70EB7937A7D1DE5465274A31FC62B72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5llE5PrhnBWib8tfJzL_G6I9NU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.mft
Manifest number:          0274
Signing time:             Sat 28 Jun 2025 15:01:24 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:24 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:24 +0000
Files and hashes:         1: 5llE5PrhnBWib8tfJzL_G6I9NU0.crl (hash: wj+yRjXUu5hYZU6CXa55B9pMsH9yCwCyU20lWen3h0Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5llE5PrhnBWib8tfJzL_G6I9NU0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:b7:93:7a:7d:1d:e5:46:52:74:a3:1f:c6:2b:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e65944e4fae19c15a26fcb5f2732ff1ba23d354d
        Validity
            Not Before: Jun 28 15:01:24 2025 GMT
            Not After : Jun 29 15:01:24 2025 GMT
        Subject: CN=3c659ee0944a46218e23bf349cdfcc585f8e6e74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b5:5f:85:0d:65:ba:6b:09:f7:44:f9:a3:f0:
                    8b:31:bb:8c:b1:c0:17:93:f5:e0:83:20:a2:e0:7d:
                    49:51:6b:5e:4c:c8:c8:df:a8:d5:0a:46:6c:30:bd:
                    28:b8:0f:64:61:40:82:bf:e2:fa:b3:fd:29:87:7f:
                    c7:d3:49:71:d4:67:0e:1e:5f:ae:ae:e9:aa:50:43:
                    c7:c0:5c:9f:7a:0c:03:17:9b:d3:17:0e:6d:93:ce:
                    db:8d:88:ca:ac:a8:66:1f:6f:9d:d3:11:66:20:83:
                    2f:94:ad:0f:f3:a4:96:48:88:70:9d:52:37:48:ee:
                    e1:c1:d0:7e:06:02:12:be:ff:b0:ab:6c:8f:41:8d:
                    06:89:7a:9c:c3:c2:43:d6:b6:d1:dd:84:e4:45:1d:
                    70:e3:16:99:fd:41:84:a6:79:ce:23:8f:3c:d7:cf:
                    4e:61:ac:a6:51:ab:a9:47:9b:95:f6:12:96:78:37:
                    d1:b5:a3:8e:e2:5f:04:85:fc:13:fa:ab:a9:84:d8:
                    d9:11:b7:a5:48:b2:93:07:81:1f:58:13:10:ae:d7:
                    78:16:35:fc:ab:7d:80:b0:db:e1:e5:d3:31:53:2c:
                    7e:b6:81:f3:2b:f8:9d:d4:ec:00:fc:f7:f7:22:90:
                    d9:d7:e4:ec:55:d4:90:6c:44:c3:ef:8f:0b:ba:20:
                    9a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:65:9E:E0:94:4A:46:21:8E:23:BF:34:9C:DF:CC:58:5F:8E:6E:74
            X509v3 Authority Key Identifier:
                keyid:E6:59:44:E4:FA:E1:9C:15:A2:6F:CB:5F:27:32:FF:1B:A2:3D:35:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5llE5PrhnBWib8tfJzL_G6I9NU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:13:1d:c0:f5:32:f8:c1:d4:cf:b2:45:77:e5:3b:e5:22:3e:
         63:1b:78:d6:97:46:9c:94:f0:6b:37:4d:3a:64:d6:82:44:46:
         34:89:77:a1:60:c9:ea:6d:55:92:23:f6:77:09:f8:06:60:c2:
         af:5b:62:c5:b0:38:06:2e:6a:a0:b1:e0:63:ea:ac:ae:2e:84:
         a6:0a:38:ba:c9:e4:66:9d:25:db:69:66:b7:01:11:1e:0e:9c:
         1d:0b:27:f2:b5:c4:b1:42:8c:07:7e:97:58:40:4b:4b:6a:43:
         ff:5e:64:46:fa:55:69:4d:97:89:19:7f:7c:1f:3e:f9:a7:7d:
         0b:3c:27:f0:b8:18:ab:82:85:b5:7e:2b:22:07:96:b5:52:2f:
         1c:c5:cd:11:a9:7d:d1:ee:b3:08:6a:ed:52:d8:45:23:62:2f:
         1b:9c:b8:c7:1b:46:82:b1:2c:c5:f3:a2:4e:c3:2b:de:a8:82:
         a3:35:9b:f4:b4:91:33:37:6c:c1:9d:a3:1c:cb:d2:77:f2:4e:
         a1:ba:17:c8:ef:d9:fa:e4:bc:2b:87:e7:d3:fc:24:a4:e9:ea:
         b7:00:b9:45:a9:c2:0f:40:6c:46:7e:7c:d0:30:7d:53:b6:5f:
         32:6e:93:e0:38:24:78:62:55:d8:39:84:52:a4:f8:b5:71:95:
         1c:7a:9e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:15:39 2025 by rpki-client