Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.mft
File:                     REs6uZ-GRKzV5pqaXzhUbNzG6XQ.mft (raw, json)
Hash identifier:          GzjNh9GCk0YMHYG40oK/T5ChgHiw1IrKkycdrH2icqw=
Subject key identifier:   75:3F:F1:91:A6:49:4C:A1:05:FF:CA:17:32:FE:09:6E:43:A8:02:82
Authority key identifier: 44:4B:3A:B9:9F:86:44:AC:D5:E6:9A:9A:5F:38:54:6C:DC:C6:E9:74
Certificate issuer:       /CN=444b3ab99f8644acd5e69a9a5f38546cdcc6e974
Certificate serial:       0197B6A091DB59EDB964B7FBB0C3693E3A00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.mft
Manifest number:          15B2
Signing time:             Sat 28 Jun 2025 13:01:05 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:05 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:05 +0000
Files and hashes:         1: REs6uZ-GRKzV5pqaXzhUbNzG6XQ.crl (hash: h8eJokdCzVNlQyQHDXfu0VokW4gRbMQWTKAlHK0LCOg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a0:91:db:59:ed:b9:64:b7:fb:b0:c3:69:3e:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=444b3ab99f8644acd5e69a9a5f38546cdcc6e974
        Validity
            Not Before: Jun 28 13:01:05 2025 GMT
            Not After : Jun 29 13:01:05 2025 GMT
        Subject: CN=753ff191a6494ca105ffca1732fe096e43a80282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8d:96:c5:0f:84:42:0d:11:58:0d:4a:0b:5a:
                    fc:ba:bd:26:25:0c:1c:8b:b6:88:8c:ac:3e:2f:1f:
                    2b:1a:e4:c4:cb:05:93:eb:28:6a:55:c8:70:3a:83:
                    5d:3c:6b:42:45:c1:b4:04:f3:58:6b:4f:9a:2a:42:
                    b4:83:17:cd:9b:2a:b6:90:9f:1e:0f:81:7e:f5:0a:
                    9f:54:d6:2e:14:f9:84:32:b0:8a:c7:73:36:8c:54:
                    3d:8e:ae:e9:21:01:b3:57:e2:43:43:0e:d9:80:53:
                    b7:6c:20:9f:2b:27:e6:75:cb:f6:ac:9a:79:b6:ac:
                    7d:0a:75:26:55:47:d1:a0:8e:ce:21:d4:da:3b:d5:
                    0d:33:d1:2a:8c:7f:f4:6d:9e:f1:6e:fe:fd:f3:2a:
                    4d:21:62:88:66:02:23:99:ba:8d:2f:d3:c1:93:22:
                    bd:d6:25:62:55:41:24:e2:b1:98:13:35:73:4d:6b:
                    79:2a:1d:15:52:7e:b9:6b:54:65:71:ca:50:3e:e4:
                    c8:f2:79:e0:39:10:b2:c9:59:88:a2:02:ae:ec:a8:
                    02:1f:3d:79:67:9c:e0:d9:d4:b4:d9:e9:1f:96:23:
                    e1:94:d1:0d:5b:8e:fb:17:74:59:96:45:f4:a8:54:
                    50:96:ed:56:32:e4:35:1e:c5:d9:66:03:48:de:52:
                    6b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:3F:F1:91:A6:49:4C:A1:05:FF:CA:17:32:FE:09:6E:43:A8:02:82
            X509v3 Authority Key Identifier:
                keyid:44:4B:3A:B9:9F:86:44:AC:D5:E6:9A:9A:5F:38:54:6C:DC:C6:E9:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:c8:33:f2:47:b9:0b:9b:b7:a9:e5:52:64:49:cd:5f:52:d9:
         b9:30:33:ac:34:f6:bc:35:c1:3a:e1:bd:c6:ae:9a:c9:6f:27:
         fb:5b:87:88:fb:5c:71:52:e4:fb:b4:4f:17:ea:6d:2d:8f:d8:
         d9:8a:23:26:56:cd:0c:f4:72:6b:cd:e1:b1:a0:c4:41:01:68:
         39:35:63:d8:cc:e4:59:76:ce:c1:58:37:8a:25:ba:86:90:e8:
         9d:c2:32:9c:bf:78:8f:1e:71:48:fb:6b:90:9f:e8:a9:2c:11:
         52:e4:de:ff:f1:ab:bd:53:d6:da:ca:7e:2b:dd:b9:86:3a:b9:
         f2:60:c2:41:05:e5:73:c4:19:25:63:48:5a:ac:d2:76:86:8e:
         0a:06:c7:3c:c0:f0:e9:e7:2a:34:07:ec:17:b1:62:cc:c0:0f:
         a5:54:e2:23:a6:c4:a2:d8:42:40:50:4f:96:0c:74:28:d2:08:
         b8:e3:97:92:55:6a:fc:c0:88:82:b6:4d:01:c1:2e:50:e9:16:
         65:60:41:e7:c7:18:41:07:0a:f7:57:cf:eb:ed:fb:a0:64:05:
         06:d0:1b:61:16:28:27:6c:99:89:f0:4e:53:ef:3c:6f:66:9c:
         2d:f4:22:7d:49:b3:e7:bb:e3:b5:10:75:a7:04:b7:5b:8c:10:
         5f:91:ef:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:11:05 2025 by rpki-client