Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
File:                     5zhsF7RWELWLvgnNMMqfsMGWH9M.mft (raw, json)
Hash identifier:          C+YHIbw2bnrLCUm1G+h6TBXQsE8nU0PFdFsxcossPpo=
Subject key identifier:   4D:F1:55:CC:C0:0D:62:6E:2C:BB:02:AE:AE:F4:41:74:85:0D:45:8C
Authority key identifier: E7:38:6C:17:B4:56:10:B5:8B:BE:09:CD:30:CA:9F:B0:C1:96:1F:D3
Certificate issuer:       /CN=e7386c17b45610b58bbe09cd30ca9fb0c1961fd3
Certificate serial:       0197B7EAD504C12903567D4669AF227D61C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5zhsF7RWELWLvgnNMMqfsMGWH9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
Manifest number:          0711
Signing time:             Sat 28 Jun 2025 19:01:49 +0000
Manifest this update:     Sat 28 Jun 2025 19:01:49 +0000
Manifest next update:     Sun 29 Jun 2025 19:01:49 +0000
Files and hashes:         1: 5zhsF7RWELWLvgnNMMqfsMGWH9M.crl (hash: Wvaaz9wW2poVOsBJHKocWbqnAQlPsg/GVgMFYzk5Kiw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5zhsF7RWELWLvgnNMMqfsMGWH9M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:ea:d5:04:c1:29:03:56:7d:46:69:af:22:7d:61:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7386c17b45610b58bbe09cd30ca9fb0c1961fd3
        Validity
            Not Before: Jun 28 19:01:49 2025 GMT
            Not After : Jun 29 19:01:49 2025 GMT
        Subject: CN=4df155ccc00d626e2cbb02aeaef44174850d458c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fb:c7:6e:00:73:f8:bd:50:03:6b:a2:11:00:
                    4d:83:e3:40:9e:83:e4:bb:81:f9:5e:fb:3d:7d:14:
                    59:81:19:f2:36:84:55:79:b9:b9:86:b9:68:2f:2b:
                    c2:f5:05:7d:2c:f7:04:69:d0:5c:be:ed:44:98:f6:
                    53:f9:01:c7:38:fb:cc:6f:ad:23:d2:e0:4b:2e:bf:
                    16:b6:ae:8e:f2:45:f9:48:36:79:97:d0:90:91:5b:
                    cd:ea:d2:5c:63:66:17:50:a5:d5:8b:a9:2b:0f:f8:
                    da:5e:a0:8b:47:91:b9:05:7c:03:55:f6:de:aa:1c:
                    65:4a:07:49:0f:12:bc:22:fe:52:42:52:2a:29:12:
                    fd:13:ad:e3:e6:3a:a0:2e:57:8a:a1:f5:a6:9a:4b:
                    19:07:f8:6b:35:d9:35:e6:b5:a5:3c:63:24:10:d2:
                    d3:ad:fe:b5:7e:b3:af:22:7d:7d:e3:80:bb:40:a5:
                    59:4e:59:94:62:d1:79:0e:1d:f6:45:0f:9c:5e:19:
                    af:90:9a:fa:9a:f7:7e:3d:ab:82:eb:a0:f9:6e:93:
                    e0:64:46:f8:a5:dd:35:42:d7:c4:19:81:b5:47:e2:
                    e5:5e:e9:01:9a:3f:26:d2:3d:8d:8e:b5:9e:26:1b:
                    8a:fb:65:cb:89:79:dc:0a:63:be:a1:56:bd:92:bc:
                    a8:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:F1:55:CC:C0:0D:62:6E:2C:BB:02:AE:AE:F4:41:74:85:0D:45:8C
            X509v3 Authority Key Identifier:
                keyid:E7:38:6C:17:B4:56:10:B5:8B:BE:09:CD:30:CA:9F:B0:C1:96:1F:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zhsF7RWELWLvgnNMMqfsMGWH9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:6e:1a:12:33:9f:ce:82:3d:09:91:b2:dd:6e:c3:a6:6d:db:
         33:53:ef:09:c8:80:83:94:ca:ca:27:40:39:55:35:4b:52:b8:
         c1:14:1c:67:84:6d:bd:46:69:fb:44:27:3f:a3:84:c6:c1:56:
         b3:59:1b:f1:b9:e2:30:a9:de:3b:3a:42:18:30:d2:c4:1c:f3:
         37:3d:80:81:fe:19:ac:d0:25:13:fb:67:de:70:0a:49:f5:a6:
         a6:43:56:42:52:df:10:4a:03:69:16:86:f0:52:1b:fa:8c:74:
         b6:43:5e:52:a7:10:ec:20:b6:24:18:9c:f1:9c:19:61:a2:98:
         e4:ef:4e:64:a2:43:cf:6a:75:11:e1:01:e3:56:36:e0:30:3c:
         f7:a0:1a:d8:50:e4:c3:46:70:f5:7c:04:fe:cb:a5:da:f4:b7:
         b8:92:d7:01:57:4f:21:90:6b:c3:1c:fb:a8:a2:48:3a:0a:8b:
         d6:d8:72:e0:eb:23:7b:26:47:59:80:93:6b:c1:c7:6d:5e:a1:
         43:f4:81:6e:1b:95:94:5c:f8:cf:71:76:e5:b9:e7:08:7a:6a:
         01:88:f7:c6:82:e9:14:32:db:43:e0:95:8a:52:b2:72:c0:c9:
         70:52:1c:d0:52:d9:ce:e6:99:44:a7:39:e7:ae:90:bb:81:3a:
         fc:73:2d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:21:09 2025 by rpki-client