Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft
File:                     cI7ctL7wrwFvBYdt285M0kx9968.mft (raw, json)
Hash identifier:          mOj3HHWGjs6dyGHP7XrbKfeSVIH9MDwNGZQI7ab85wI=
Subject key identifier:   C0:06:EA:FF:D5:9E:B2:5D:2C:11:56:7C:1E:88:95:76:8C:57:38:97
Authority key identifier: 70:8E:DC:B4:BE:F0:AF:01:6F:05:87:6D:DB:CE:4C:D2:4C:7D:F7:AF
Certificate issuer:       /CN=708edcb4bef0af016f05876ddbce4cd24c7df7af
Certificate serial:       0197CC4D0C0CF9CB5117C2183A5FB18F57A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cI7ctL7wrwFvBYdt285M0kx9968.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft
Manifest number:          03E5
Signing time:             Wed 02 Jul 2025 18:01:30 +0000
Manifest this update:     Wed 02 Jul 2025 18:01:30 +0000
Manifest next update:     Thu 03 Jul 2025 18:01:30 +0000
Files and hashes:         1: cI7ctL7wrwFvBYdt285M0kx9968.crl (hash: fDlrSbzG651znGbTqBnU9S8llfZMdmMpmlFyNiTYWo4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cI7ctL7wrwFvBYdt285M0kx9968.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 11:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:cc:4d:0c:0c:f9:cb:51:17:c2:18:3a:5f:b1:8f:57:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=708edcb4bef0af016f05876ddbce4cd24c7df7af
        Validity
            Not Before: Jul  2 18:01:30 2025 GMT
            Not After : Jul  3 18:01:30 2025 GMT
        Subject: CN=c006eaffd59eb25d2c11567c1e8895768c573897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:9c:80:5b:2d:a7:8a:2b:82:4f:37:63:77:d9:
                    94:26:96:88:4c:93:f4:ba:22:16:be:e2:ff:43:f8:
                    59:69:71:fc:53:8e:79:ad:47:6f:69:b5:e9:dc:af:
                    51:f6:15:15:fe:bd:58:36:24:d0:7d:02:af:c1:ea:
                    04:9a:de:1a:ab:f9:fa:f3:ed:0d:d7:66:94:93:01:
                    03:20:de:1e:a4:38:ed:69:e6:85:56:cd:78:ec:e1:
                    fb:81:47:ce:79:95:fb:82:87:19:e3:51:fb:1f:8a:
                    89:60:8c:b6:d4:b2:3d:c8:d1:93:d7:80:e4:e2:e5:
                    8a:05:da:48:b7:ea:13:be:21:70:55:8c:1e:1e:e3:
                    ec:80:d6:b4:c8:38:b1:a5:25:2d:5b:aa:d3:a4:c4:
                    98:42:00:c2:77:e5:29:86:16:0b:0a:eb:2f:ce:87:
                    2d:ed:82:96:78:c6:55:b5:d2:96:d4:06:8e:d3:2e:
                    ec:83:ff:0f:49:e0:52:48:dc:e1:78:f3:72:cb:71:
                    ea:a6:ac:4d:fe:ed:78:aa:89:d0:ae:f6:b0:80:dd:
                    3f:22:ba:80:d5:eb:40:40:75:52:f3:d6:c7:39:b5:
                    f4:79:77:2d:5c:59:46:40:2d:f7:68:d1:32:aa:7d:
                    ef:ba:b0:00:ab:4f:c9:ef:07:2c:5e:d9:b2:fb:f9:
                    c6:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:06:EA:FF:D5:9E:B2:5D:2C:11:56:7C:1E:88:95:76:8C:57:38:97
            X509v3 Authority Key Identifier:
                keyid:70:8E:DC:B4:BE:F0:AF:01:6F:05:87:6D:DB:CE:4C:D2:4C:7D:F7:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cI7ctL7wrwFvBYdt285M0kx9968.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:d7:46:47:2e:9e:8d:68:eb:1f:15:f6:63:91:04:2e:29:05:
         84:e8:61:c0:1a:af:77:22:b6:93:35:c0:24:13:c0:94:0e:1a:
         5c:34:61:a4:27:d1:4e:d1:62:72:0d:5d:dd:9b:16:be:51:8f:
         38:9e:cb:6d:14:60:79:7c:d3:86:97:82:17:cd:5b:0f:0f:84:
         3a:8b:4b:1c:ba:db:91:e3:31:d5:88:0d:ec:e8:45:a1:0c:de:
         e2:26:66:84:01:32:33:48:90:4e:f1:9a:3b:46:d0:74:7c:18:
         e6:07:c4:c2:1d:ac:ef:b5:32:f9:91:bc:1e:6d:d2:af:66:8e:
         44:c0:16:de:fe:cd:69:03:9e:94:0e:94:f8:48:2c:b9:66:a6:
         09:40:4b:f2:f9:bb:67:b3:2a:42:ae:20:2d:2a:d2:06:c8:f4:
         2a:30:e8:6c:1d:57:a5:c6:bd:9d:67:94:7d:bb:ee:b4:3b:bd:
         bd:fa:d0:c6:21:40:eb:2c:bb:c7:c8:ee:f8:97:3e:6e:eb:44:
         f8:15:71:f6:a1:70:5f:06:b7:30:5a:52:d0:8c:88:b5:4e:9d:
         c5:94:7b:e2:14:73:d3:d4:1c:ee:94:67:d6:db:b6:89:82:a0:
         19:f1:87:f6:7c:d2:d6:0f:b0:80:65:00:88:d3:c2:77:11:86:
         3f:6d:f2:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 20:02:13 2025 by rpki-client