Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft
File:                     fM2Lj3l51soXEsHVCkDU5VXJThM.mft (raw, json)
Hash identifier:          hucVu7IAakPdHAi/rL8bAsYa296wpyBk2rsIEa8y/MA=
Subject key identifier:   E4:E8:07:39:FB:99:74:F5:E3:F1:7E:B4:27:CA:A7:BC:CB:9D:DB:C2
Authority key identifier: 7C:CD:8B:8F:79:79:D6:CA:17:12:C1:D5:0A:40:D4:E5:55:C9:4E:13
Certificate issuer:       /CN=7ccd8b8f7979d6ca1712c1d50a40d4e555c94e13
Certificate serial:       0197B70EAA7B86527B406602579C6BB51DAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fM2Lj3l51soXEsHVCkDU5VXJThM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft
Manifest number:          0948
Signing time:             Sat 28 Jun 2025 15:01:21 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:21 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:21 +0000
Files and hashes:         1: fM2Lj3l51soXEsHVCkDU5VXJThM.crl (hash: RUq1ip8qG4cdI/7Va0Ne8jIiVq3KVSMZ7Rfjbw2P0ec=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fM2Lj3l51soXEsHVCkDU5VXJThM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:aa:7b:86:52:7b:40:66:02:57:9c:6b:b5:1d:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ccd8b8f7979d6ca1712c1d50a40d4e555c94e13
        Validity
            Not Before: Jun 28 15:01:21 2025 GMT
            Not After : Jun 29 15:01:21 2025 GMT
        Subject: CN=e4e80739fb9974f5e3f17eb427caa7bccb9ddbc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:31:3e:f6:09:80:b8:ee:b8:8c:4b:80:b1:b6:
                    50:f1:b8:f8:31:0c:5e:43:40:bc:60:1b:c5:5d:93:
                    4e:f8:33:01:01:9a:49:6c:d3:a6:f2:39:16:46:1b:
                    ad:6b:9e:af:f2:92:b5:dc:80:72:05:70:6c:b0:cc:
                    5e:26:d7:d8:4d:9a:88:ce:52:1d:d0:bf:50:8c:c4:
                    08:53:af:c0:7f:ea:3b:f0:b0:e6:1f:6e:de:2d:46:
                    d2:90:cf:37:42:50:6f:0d:95:1c:c1:87:38:74:8e:
                    86:fd:4d:6f:5e:a1:f9:66:31:d6:d6:c5:91:74:8f:
                    93:83:2a:ab:5b:5c:76:79:be:aa:6d:e7:c5:6f:b2:
                    2f:3e:19:45:34:45:a8:c9:fd:09:2b:0d:83:27:d1:
                    89:c7:7c:57:8b:c7:9a:52:fe:b4:b7:09:fc:00:1b:
                    5d:25:57:09:f7:21:9e:8d:dd:36:b8:a3:4b:4d:20:
                    a1:df:66:8f:8f:3b:23:a1:10:47:a9:7a:0f:c7:e1:
                    4e:ed:78:53:73:0b:db:69:3e:67:6e:9d:79:31:0d:
                    a4:ee:6a:3a:a8:31:51:5b:02:0a:7b:01:ed:c7:82:
                    9e:24:d1:45:d1:61:e5:45:40:8f:e6:5d:32:e7:21:
                    8c:d3:15:dc:7c:8c:83:5e:b8:31:e5:7d:11:52:45:
                    79:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:E8:07:39:FB:99:74:F5:E3:F1:7E:B4:27:CA:A7:BC:CB:9D:DB:C2
            X509v3 Authority Key Identifier:
                keyid:7C:CD:8B:8F:79:79:D6:CA:17:12:C1:D5:0A:40:D4:E5:55:C9:4E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fM2Lj3l51soXEsHVCkDU5VXJThM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:05:79:03:00:25:88:7c:2e:46:22:99:83:59:f7:dc:0b:cb:
         19:74:86:4b:97:9a:fe:9b:c3:62:4b:85:fd:89:9f:2f:7a:be:
         4e:be:71:6f:c1:be:72:7f:6c:56:cf:86:27:a1:b0:ca:cb:f0:
         b1:c2:c5:bd:d3:72:1e:c1:06:68:32:06:62:f2:a0:66:97:49:
         06:3c:68:de:3e:ca:e0:b6:98:38:44:7a:c3:36:c4:48:ce:ab:
         d0:aa:88:6a:da:c9:53:e2:73:10:32:8e:f2:18:ef:db:fe:a1:
         65:43:ac:f4:5b:2c:d6:79:c2:75:63:0c:d2:25:00:25:20:38:
         3c:71:b4:5b:fe:83:e0:5b:58:ca:07:43:f7:97:7a:c7:5d:0c:
         0d:d4:7d:b6:69:9d:64:0a:e8:47:9e:93:03:35:83:35:fd:40:
         1b:56:99:cd:54:ca:4c:aa:2d:75:cf:fa:33:c6:22:68:d1:f3:
         3a:4c:32:2f:53:c8:be:92:c8:86:89:fb:bf:e8:d3:3f:de:a3:
         8a:2b:44:f7:9f:49:ee:e0:bf:d3:62:de:8c:86:be:35:27:3a:
         90:4a:93:89:f2:c6:1b:82:63:f2:1d:b9:63:89:17:77:23:3b:
         84:2f:9c:91:43:20:27:68:b6:8a:da:07:04:7a:fe:48:e3:d7:
         89:f9:65:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:28:49 2025 by rpki-client