Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/20dab8-4dd6-40f5-9c22-652646366691/1/se5uwa8-iFV4C1fVDDO2yO4zJKQ.mft
File:                     se5uwa8-iFV4C1fVDDO2yO4zJKQ.mft (raw, json)
Hash identifier:          RO/0JZGLr75GACaFP2fXDaym1C232s5xx4aihyUmbSs=
Subject key identifier:   16:5D:1E:86:0E:BC:C8:53:47:EE:50:BA:7C:71:A9:F0:F7:72:66:3B
Authority key identifier: B1:EE:6E:C1:AF:3E:88:55:78:0B:57:D5:0C:33:B6:C8:EE:33:24:A4
Certificate issuer:       /CN=b1ee6ec1af3e8855780b57d50c33b6c8ee3324a4
Certificate serial:       0197BA7F012D36C720356D346BA8319F33BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/se5uwa8-iFV4C1fVDDO2yO4zJKQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/20dab8-4dd6-40f5-9c22-652646366691/1/se5uwa8-iFV4C1fVDDO2yO4zJKQ.mft
Manifest number:          0F35
Signing time:             Sun 29 Jun 2025 07:02:54 +0000
Manifest this update:     Sun 29 Jun 2025 07:02:54 +0000
Manifest next update:     Mon 30 Jun 2025 07:02:54 +0000
Files and hashes:         1: se5uwa8-iFV4C1fVDDO2yO4zJKQ.crl (hash: EUGDp5XN3l07PcKmaUtbAQuDZY55yGOAL5NEhSkPZ1c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/20dab8-4dd6-40f5-9c22-652646366691/1/se5uwa8-iFV4C1fVDDO2yO4zJKQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/20dab8-4dd6-40f5-9c22-652646366691/1/se5uwa8-iFV4C1fVDDO2yO4zJKQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/se5uwa8-iFV4C1fVDDO2yO4zJKQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 07:02:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:ba:7f:01:2d:36:c7:20:35:6d:34:6b:a8:31:9f:33:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1ee6ec1af3e8855780b57d50c33b6c8ee3324a4
        Validity
            Not Before: Jun 29 07:02:54 2025 GMT
            Not After : Jun 30 07:02:54 2025 GMT
        Subject: CN=165d1e860ebcc85347ee50ba7c71a9f0f772663b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c2:9f:5c:91:98:e5:89:73:84:d2:32:d2:68:
                    4d:7d:a3:3d:b5:c9:50:99:55:65:e6:3e:9e:59:9a:
                    37:f4:52:6f:22:5b:0d:b0:9c:ee:9c:2b:5a:ce:78:
                    4d:41:f8:71:17:89:82:f0:47:0d:42:f4:a8:1b:b5:
                    72:2e:7b:90:13:ed:57:34:2e:f7:ec:7e:21:32:12:
                    d0:e6:66:3b:70:32:de:ea:da:bb:cb:1c:be:cb:17:
                    cc:c3:01:61:95:16:34:c8:36:de:9f:06:99:b7:0b:
                    97:3f:57:66:9b:d8:ae:5f:2d:26:2a:42:6b:ff:13:
                    4c:7f:b9:88:b7:58:64:ff:bb:04:e8:d6:85:07:1c:
                    1c:de:f5:f1:4e:47:3f:4e:26:c4:4a:f9:95:22:40:
                    45:61:b4:38:ad:32:57:9f:a5:47:9b:6c:03:a5:e7:
                    ec:48:89:8b:99:b7:23:df:f6:29:27:b5:37:2c:b4:
                    e4:b6:23:8c:2d:37:ef:82:c2:20:17:67:25:c1:8c:
                    c6:86:9f:46:06:c5:7a:77:99:96:71:90:71:81:a4:
                    a0:52:1a:7d:e1:a5:f9:83:a9:dd:cc:7a:49:2e:66:
                    c3:4f:40:8e:36:3b:c4:a3:81:37:e4:da:87:ab:27:
                    9c:4e:a7:63:a6:91:29:a7:ca:cf:db:5f:a6:7f:08:
                    a6:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:5D:1E:86:0E:BC:C8:53:47:EE:50:BA:7C:71:A9:F0:F7:72:66:3B
            X509v3 Authority Key Identifier:
                keyid:B1:EE:6E:C1:AF:3E:88:55:78:0B:57:D5:0C:33:B6:C8:EE:33:24:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/se5uwa8-iFV4C1fVDDO2yO4zJKQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/20dab8-4dd6-40f5-9c22-652646366691/1/se5uwa8-iFV4C1fVDDO2yO4zJKQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/20dab8-4dd6-40f5-9c22-652646366691/1/se5uwa8-iFV4C1fVDDO2yO4zJKQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:f5:44:be:56:f2:7b:54:1a:19:e6:bf:1a:90:21:ec:e6:58:
         5a:14:ec:74:4d:8c:7c:c1:7d:f2:21:6c:fd:00:06:f7:5b:97:
         72:34:96:93:a5:67:ba:31:dd:d7:2d:52:98:d1:ca:8e:67:fb:
         45:1c:17:ff:12:24:84:c4:06:80:4f:62:d2:a0:e1:66:ce:12:
         52:e9:bb:2b:67:33:83:e5:e6:10:88:ea:fd:b2:ce:dc:57:67:
         05:11:4b:84:dc:5b:5f:47:6b:eb:21:c6:07:06:e5:25:92:4f:
         52:cf:93:0a:bc:f4:f5:27:82:75:e5:ab:99:5f:e6:19:5d:5b:
         46:b0:16:5d:c0:77:3f:c5:4a:76:97:29:1c:f4:b6:47:95:61:
         37:71:69:d4:09:dc:52:83:68:06:4b:8f:c2:21:de:18:1e:6e:
         6d:00:5a:5e:96:50:1f:e8:9a:e8:6d:62:a8:28:31:8e:cb:3b:
         a9:8e:57:9f:37:30:31:82:5c:2d:9f:ad:75:b9:8a:05:d7:20:
         1f:07:a9:9b:4d:39:27:33:3f:f1:36:49:24:01:fa:c7:ac:64:
         87:d6:5e:88:dd:d4:91:66:27:98:ec:33:16:e5:7c:c0:dc:84:
         c6:75:fd:aa:57:b3:73:fe:b3:48:4d:4e:29:14:ac:c5:36:27:
         b2:cb:30:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:48:36 2025 by rpki-client