Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.mft
File:                     MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.mft (raw, json)
Hash identifier:          OkFHad4YbJm3shAzgKwfQLltbPOsxko/Fp8J3Vxu6Do=
Subject key identifier:   99:FC:C6:2E:5F:96:E3:5A:7F:43:42:02:FE:74:A4:08:33:69:35:7E
Authority key identifier: 31:F1:24:BD:8F:14:BB:98:A4:88:49:C5:20:58:37:32:3B:FC:F8:4C
Certificate issuer:       /CN=31f124bd8f14bb98a48849c5205837323bfcf84c
Certificate serial:       0197B77BF21DE507CCA2B94373BD9CFEDA63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.mft
Manifest number:          03D6
Signing time:             Sat 28 Jun 2025 17:00:42 +0000
Manifest this update:     Sat 28 Jun 2025 17:00:42 +0000
Manifest next update:     Sun 29 Jun 2025 17:00:42 +0000
Files and hashes:         1: MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.crl (hash: 6uXcTEK7XNuyKr4L1So97UXhcQDe4eHfwC3AriULF3Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7b:f2:1d:e5:07:cc:a2:b9:43:73:bd:9c:fe:da:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31f124bd8f14bb98a48849c5205837323bfcf84c
        Validity
            Not Before: Jun 28 17:00:42 2025 GMT
            Not After : Jun 29 17:00:42 2025 GMT
        Subject: CN=99fcc62e5f96e35a7f434202fe74a4083369357e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:32:39:59:92:ff:4c:bd:df:0b:6c:06:92:3e:
                    9a:c8:3a:c5:22:64:89:bc:7d:e6:45:22:f3:ee:99:
                    96:83:8e:20:b7:77:85:bd:c8:5a:81:9a:1f:bf:83:
                    0d:48:a6:b3:e4:04:b9:9a:d8:cb:2f:da:d7:26:1d:
                    5b:97:47:0a:33:b4:e3:32:26:14:bf:8c:56:16:e9:
                    aa:66:b0:16:eb:28:23:26:ec:1e:a8:4f:d1:fd:93:
                    6c:f7:9b:fc:13:52:37:23:a2:46:d5:91:cc:a6:5f:
                    ff:aa:b5:17:98:a8:43:76:6e:26:fc:2a:53:d1:b7:
                    9f:40:01:0a:ce:37:28:6d:8c:76:c6:43:a0:b0:ca:
                    e0:da:2b:cf:e6:00:c0:02:4b:e4:5a:aa:8f:0c:d2:
                    60:a8:70:18:b8:86:12:13:0a:fd:4a:ae:cd:80:28:
                    93:dd:34:42:cb:4f:06:7e:c5:b8:50:ef:90:1b:39:
                    c2:03:09:f7:44:1d:05:39:0c:0f:d0:b0:f3:b9:21:
                    8d:1f:3a:97:50:fa:93:1a:e8:c2:98:5b:30:36:86:
                    13:8a:32:50:15:c3:30:a4:10:86:de:9e:ca:5d:53:
                    05:2b:1b:6d:69:9e:6d:15:60:86:b0:34:7b:13:81:
                    b2:ae:8f:72:ca:48:44:a0:fd:68:02:ca:0a:b0:e5:
                    d1:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:FC:C6:2E:5F:96:E3:5A:7F:43:42:02:FE:74:A4:08:33:69:35:7E
            X509v3 Authority Key Identifier:
                keyid:31:F1:24:BD:8F:14:BB:98:A4:88:49:C5:20:58:37:32:3B:FC:F8:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:52:11:6e:15:09:4f:36:82:00:8f:1f:78:e4:51:6d:76:5e:
         03:68:3d:ec:c4:64:f9:37:3a:03:da:d8:8a:b0:1a:69:5b:06:
         4a:6d:45:4b:ba:41:54:ff:56:0c:6d:09:29:6e:13:09:8e:1d:
         eb:17:a4:13:54:5b:cb:05:b7:d0:b2:55:3d:75:f9:ba:d1:ef:
         e6:9c:14:a9:4e:b3:54:9e:dd:2c:66:6f:12:be:20:6c:3f:09:
         16:96:89:c2:e8:78:94:65:a1:af:80:3a:ee:60:fd:bc:a7:a8:
         a5:7e:91:da:c0:59:bf:7f:ee:e7:cc:c8:b6:98:db:06:6a:67:
         97:7b:a5:f4:5e:32:c0:d7:08:48:46:a2:80:a1:da:b5:d8:3c:
         3a:95:dd:f8:00:67:6d:0d:0f:44:31:34:6a:48:28:a6:a8:a0:
         77:d6:93:7d:aa:07:e5:e2:22:1f:b6:7e:fe:e2:64:f2:94:7b:
         78:0f:e5:d1:75:15:99:ca:b0:17:61:8f:5f:8d:ed:e7:ae:3f:
         f2:02:5b:f8:bc:cb:73:ac:f8:19:a0:4c:4e:b4:49:e7:db:d7:
         3b:3b:3a:84:ae:a4:05:fb:8f:c8:ba:c8:36:79:79:41:9f:a2:
         4b:cf:39:65:d2:9a:2c:86:54:fe:47:a9:63:43:df:72:78:7f:
         78:d1:23:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:13:01 2025 by rpki-client