Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/fd001c-3338-40a7-af1f-361eba30355e/1/E3ueCmc-FAe_PmWfLqYlN462Mng.mft
File:                     E3ueCmc-FAe_PmWfLqYlN462Mng.mft (raw, json)
Hash identifier:          DzUA7DBzb4mj2oTdM9qpEs/eHz26B4D/bf0zWLrZK8M=
Subject key identifier:   53:4B:78:CE:5E:6E:38:F8:9D:DD:51:85:BF:92:0D:3E:46:FB:84:52
Authority key identifier: 13:7B:9E:0A:67:3E:14:07:BF:3E:65:9F:2E:A6:25:37:8E:B6:32:78
Certificate issuer:       /CN=137b9e0a673e1407bf3e659f2ea625378eb63278
Certificate serial:       0197B74529690F636F3C77902466DF9797BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E3ueCmc-FAe_PmWfLqYlN462Mng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/fd001c-3338-40a7-af1f-361eba30355e/1/E3ueCmc-FAe_PmWfLqYlN462Mng.mft
Manifest number:          0682
Signing time:             Sat 28 Jun 2025 16:00:52 +0000
Manifest this update:     Sat 28 Jun 2025 16:00:52 +0000
Manifest next update:     Sun 29 Jun 2025 16:00:52 +0000
Files and hashes:         1: E3ueCmc-FAe_PmWfLqYlN462Mng.crl (hash: i/27xd5RlN0BCwtBUZI43rwtEMC85R2SecRc1ecTsl8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/fd001c-3338-40a7-af1f-361eba30355e/1/E3ueCmc-FAe_PmWfLqYlN462Mng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/fd001c-3338-40a7-af1f-361eba30355e/1/E3ueCmc-FAe_PmWfLqYlN462Mng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E3ueCmc-FAe_PmWfLqYlN462Mng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:29:69:0f:63:6f:3c:77:90:24:66:df:97:97:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137b9e0a673e1407bf3e659f2ea625378eb63278
        Validity
            Not Before: Jun 28 16:00:52 2025 GMT
            Not After : Jun 29 16:00:52 2025 GMT
        Subject: CN=534b78ce5e6e38f89ddd5185bf920d3e46fb8452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:71:ad:73:56:9a:b0:9f:b0:70:ae:8f:bf:8c:
                    41:e0:3d:ee:17:21:63:9e:d1:e3:b2:ba:38:e0:2a:
                    cd:b0:10:30:17:de:c7:04:f1:f0:91:bf:fc:37:ba:
                    39:6d:cf:7b:3e:46:7f:f6:c4:f3:0c:70:a3:0e:ed:
                    2a:c9:19:4c:43:9c:af:c9:06:4c:a3:8b:fc:f4:c7:
                    d6:ff:38:9d:63:85:43:dc:ac:e4:f7:d6:9f:55:75:
                    a3:ff:1f:27:f9:69:c1:4b:ab:18:88:14:e8:64:e8:
                    b6:6a:ec:ab:0d:91:7c:8d:99:4c:53:45:2c:3a:e9:
                    29:b3:3d:63:ae:f8:61:c7:ac:ba:5e:71:fd:4a:26:
                    51:a9:c7:00:92:a7:07:77:2d:3a:7b:bf:83:f7:2a:
                    5f:c1:30:33:99:0a:f9:82:5c:b6:0e:68:a1:c2:47:
                    75:90:fb:a0:1d:ef:10:13:e6:68:83:d4:b8:b1:e3:
                    80:34:88:82:f7:f6:95:3f:d7:3c:57:a5:fe:3e:a6:
                    5e:36:83:2e:46:b9:80:fd:57:4b:10:66:ba:d9:20:
                    d0:ef:de:6a:38:7a:56:b2:8d:c9:33:a3:92:73:10:
                    69:c1:09:ab:ac:3e:e7:e3:56:b6:f2:1d:1a:02:4c:
                    56:a9:72:76:45:bc:39:23:99:73:90:f9:eb:f2:a2:
                    0f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:4B:78:CE:5E:6E:38:F8:9D:DD:51:85:BF:92:0D:3E:46:FB:84:52
            X509v3 Authority Key Identifier:
                keyid:13:7B:9E:0A:67:3E:14:07:BF:3E:65:9F:2E:A6:25:37:8E:B6:32:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3ueCmc-FAe_PmWfLqYlN462Mng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fd001c-3338-40a7-af1f-361eba30355e/1/E3ueCmc-FAe_PmWfLqYlN462Mng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fd001c-3338-40a7-af1f-361eba30355e/1/E3ueCmc-FAe_PmWfLqYlN462Mng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:cf:9c:dd:77:0c:3c:6a:1a:57:02:a3:45:35:f4:a9:0b:1b:
         2e:a8:2c:d7:c0:97:a6:c9:75:4e:5e:0d:b1:b6:66:0c:95:f2:
         c8:f5:e9:08:55:8b:e3:b4:85:e2:2c:e6:49:15:64:02:5b:59:
         0d:e0:63:46:a8:09:12:8e:86:58:af:63:47:09:54:41:4d:ad:
         47:df:5d:55:f6:a0:07:f7:ae:ec:e4:2e:b7:43:eb:e1:2f:ef:
         5c:0c:0a:2c:3f:75:db:9c:29:3f:3c:01:46:b5:56:97:c1:a2:
         3b:80:65:f1:f8:98:51:36:31:e7:f5:fa:19:b8:1c:3f:e8:dd:
         d9:97:9e:f7:b6:9d:08:f7:e9:98:09:33:99:42:ce:d1:36:3c:
         c4:b1:26:30:53:10:1f:94:3b:5b:eb:f8:8b:93:2e:c5:4b:ed:
         d8:0c:d5:ee:d0:40:1b:55:6f:28:3c:20:ee:1d:98:cc:c3:f8:
         ab:80:c3:53:a9:27:4f:41:81:08:86:e1:5c:8a:c1:ad:51:1a:
         c1:98:1c:e3:ce:e8:9e:c5:a1:15:f9:fc:81:4a:da:24:db:9a:
         0e:a1:67:0f:65:dd:cd:67:99:3e:6b:7b:0b:b2:f8:e0:5f:98:
         1e:74:a0:28:18:02:9a:e6:e7:2a:95:5a:7a:38:d2:e8:e4:40:
         e2:85:e6:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:24:59 2025 by rpki-client