Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/cb159f-995c-4974-a764-3bcc52f94ca0/1/RX6_qZz102gBj6f-DBEjQfXTZcA.mft
File:                     RX6_qZz102gBj6f-DBEjQfXTZcA.mft (raw, json)
Hash identifier:          maoz9lsEf4xO/Z0weK8ZXyxTjcirCQldIPKGFuwJLKw=
Subject key identifier:   7C:41:C6:16:D1:5C:E2:CC:BE:BB:55:E8:1B:15:AA:96:70:F2:6E:49
Authority key identifier: 45:7E:BF:A9:9C:F5:D3:68:01:8F:A7:FE:0C:11:23:41:F5:D3:65:C0
Certificate issuer:       /CN=457ebfa99cf5d368018fa7fe0c112341f5d365c0
Certificate serial:       0197B58E65BDF79648DCFD576E33A5717B71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RX6_qZz102gBj6f-DBEjQfXTZcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/cb159f-995c-4974-a764-3bcc52f94ca0/1/RX6_qZz102gBj6f-DBEjQfXTZcA.mft
Manifest number:          0369
Signing time:             Sat 28 Jun 2025 08:01:37 +0000
Manifest this update:     Sat 28 Jun 2025 08:01:37 +0000
Manifest next update:     Sun 29 Jun 2025 08:01:37 +0000
Files and hashes:         1: RX6_qZz102gBj6f-DBEjQfXTZcA.crl (hash: Fh+7bKjfSKZvtgtSj1OBz9QMbMb95B626/M7BIxSC3s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/cb159f-995c-4974-a764-3bcc52f94ca0/1/RX6_qZz102gBj6f-DBEjQfXTZcA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/cb159f-995c-4974-a764-3bcc52f94ca0/1/RX6_qZz102gBj6f-DBEjQfXTZcA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RX6_qZz102gBj6f-DBEjQfXTZcA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 08:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b5:8e:65:bd:f7:96:48:dc:fd:57:6e:33:a5:71:7b:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=457ebfa99cf5d368018fa7fe0c112341f5d365c0
        Validity
            Not Before: Jun 28 08:01:37 2025 GMT
            Not After : Jun 29 08:01:37 2025 GMT
        Subject: CN=7c41c616d15ce2ccbebb55e81b15aa9670f26e49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d1:97:9d:b9:8f:1a:f6:2a:5c:00:8b:06:0e:
                    13:69:26:5a:2d:6d:6d:d6:cd:7b:28:14:ab:a4:59:
                    69:f8:0d:5d:b0:f2:a6:0b:c9:32:8d:68:b0:2d:3c:
                    a7:88:b8:99:9c:22:07:1a:7b:c5:d8:b0:94:54:59:
                    aa:9b:31:44:b7:70:51:1f:0f:39:cf:27:98:56:56:
                    7f:d9:d9:e3:9f:5d:71:9e:7e:fa:50:70:00:8f:bf:
                    6a:d8:91:97:bf:cd:77:6c:35:94:84:ae:44:d5:d2:
                    f5:85:9e:5c:55:87:99:25:3e:5e:30:5b:f4:b7:69:
                    39:fd:d4:ce:f4:9c:2a:22:7b:88:06:12:48:4e:15:
                    7c:13:99:f2:a9:3d:7a:a9:15:04:f6:f3:2f:70:49:
                    af:a2:a4:ee:b4:1c:85:03:d2:05:af:a0:85:d0:91:
                    98:e7:3f:ae:ed:e1:37:13:d9:36:b7:c4:ca:73:d1:
                    c5:cf:72:31:5b:b6:4f:d6:6d:4e:c0:87:c5:71:fc:
                    7b:ed:91:99:07:e2:fa:c1:36:fc:f9:0e:16:92:02:
                    de:af:45:1e:f8:aa:fa:e2:eb:e3:85:9e:88:95:03:
                    8c:4e:64:22:db:3f:72:e8:46:13:fb:e9:7a:73:60:
                    93:f8:b8:66:8e:3d:55:61:79:6d:6a:19:37:dd:bd:
                    a5:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:41:C6:16:D1:5C:E2:CC:BE:BB:55:E8:1B:15:AA:96:70:F2:6E:49
            X509v3 Authority Key Identifier:
                keyid:45:7E:BF:A9:9C:F5:D3:68:01:8F:A7:FE:0C:11:23:41:F5:D3:65:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RX6_qZz102gBj6f-DBEjQfXTZcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/cb159f-995c-4974-a764-3bcc52f94ca0/1/RX6_qZz102gBj6f-DBEjQfXTZcA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/cb159f-995c-4974-a764-3bcc52f94ca0/1/RX6_qZz102gBj6f-DBEjQfXTZcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:dc:78:c1:d3:e9:fe:96:18:26:34:a4:f8:ae:48:0e:50:8d:
         fa:71:5f:60:38:5b:f3:1c:c5:96:0b:26:0a:81:2d:5e:57:2e:
         84:fa:23:03:d8:c1:88:91:17:e1:a2:d9:99:b7:eb:75:b0:ba:
         6f:0d:28:71:f9:04:85:5d:e0:6a:64:b6:14:f3:63:68:0b:e5:
         85:49:d7:72:82:48:29:c9:af:b8:09:db:2b:12:0a:fd:4a:15:
         7c:24:b6:e8:24:da:06:c7:c0:83:b2:bd:b7:bd:c8:11:24:ad:
         19:6e:61:44:69:38:cb:a5:93:e4:1c:56:5d:93:35:9c:c5:fd:
         20:e2:fd:ba:bd:1d:a7:bd:73:7d:b1:a3:cb:69:b6:ac:4e:90:
         75:45:1d:61:31:9a:98:b6:cc:c1:44:bb:32:ea:78:96:15:bc:
         d6:32:77:b2:9d:82:45:60:39:09:9d:ef:9e:9b:3a:52:aa:1a:
         c0:41:5c:c9:28:d8:0c:f1:2a:fe:c2:8a:4d:89:1b:2e:dd:d1:
         04:5b:f5:77:58:72:a1:60:40:fa:da:9b:b5:8a:2e:e6:db:db:
         0a:2b:5a:d1:6d:bd:12:21:99:fa:c4:84:49:e3:be:d7:94:0c:
         72:bb:de:1f:6e:39:88:b5:f4:2d:e3:a6:00:c8:65:21:9c:16:
         79:4e:51:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:55:59 2025 by rpki-client