Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/9e5de4-f650-44d7-bd30-7ec213cb115f/1/coe8FdmVjihdWllYuOZJfl_OkfU.mft
File:                     coe8FdmVjihdWllYuOZJfl_OkfU.mft (raw, json)
Hash identifier:          jFMggVDpEvlwmqUZoXYpvtntKtUYWjUUlaB+WvkTTYo=
Subject key identifier:   59:30:00:41:D1:0C:BA:8B:1F:BD:D4:24:C3:C4:0F:D0:39:50:E1:C8
Authority key identifier: 72:87:BC:15:D9:95:8E:28:5D:5A:59:58:B8:E6:49:7E:5F:CE:91:F5
Certificate issuer:       /CN=7287bc15d9958e285d5a5958b8e6497e5fce91f5
Certificate serial:       0196A2E507C1F2AC87D7198303B20F69E43A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/coe8FdmVjihdWllYuOZJfl_OkfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/9e5de4-f650-44d7-bd30-7ec213cb115f/1/coe8FdmVjihdWllYuOZJfl_OkfU.mft
Manifest number:          0A06
Signing time:             Tue 06 May 2025 00:00:40 +0000
Manifest this update:     Tue 06 May 2025 00:00:40 +0000
Manifest next update:     Wed 07 May 2025 00:00:40 +0000
Files and hashes:         1: coe8FdmVjihdWllYuOZJfl_OkfU.crl (hash: l70l3bqwgp33RZS7dPHy2NrsIc9mnypE1t/QGPAlhAg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/9e5de4-f650-44d7-bd30-7ec213cb115f/1/coe8FdmVjihdWllYuOZJfl_OkfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/9e5de4-f650-44d7-bd30-7ec213cb115f/1/coe8FdmVjihdWllYuOZJfl_OkfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/coe8FdmVjihdWllYuOZJfl_OkfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 00:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a2:e5:07:c1:f2:ac:87:d7:19:83:03:b2:0f:69:e4:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7287bc15d9958e285d5a5958b8e6497e5fce91f5
        Validity
            Not Before: May  6 00:00:40 2025 GMT
            Not After : May  7 00:00:40 2025 GMT
        Subject: CN=59300041d10cba8b1fbdd424c3c40fd03950e1c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:74:6b:ad:5d:b7:6a:a4:61:5c:a5:6c:73:af:
                    0f:9b:45:b8:3e:5d:ca:6a:ed:37:cc:6a:76:b1:82:
                    40:56:04:fd:aa:d2:30:ea:f9:63:a4:05:19:c0:57:
                    1f:3f:1f:26:ce:3f:73:48:f6:13:31:84:03:fa:f6:
                    53:9d:76:98:c4:ca:81:b2:54:bb:d5:fa:b9:87:ae:
                    bf:9e:00:c0:c0:11:bf:bf:ff:42:af:9d:94:30:5d:
                    3b:2d:1d:02:12:ad:60:fb:28:e9:d6:5f:47:26:64:
                    e1:e6:8c:51:fd:0a:ab:b1:bf:b9:0f:53:19:38:53:
                    8e:76:0d:e3:86:fd:a0:ec:41:9a:5e:4e:32:31:0c:
                    54:9c:5c:7d:e0:a3:3e:a1:d7:92:39:73:77:2c:28:
                    bf:24:f4:28:42:f5:10:36:cf:79:a0:d5:fa:fc:c1:
                    1a:93:a3:7f:1e:54:b9:d2:1e:92:4d:87:05:94:11:
                    6b:a9:00:74:cb:4d:3f:8b:1d:f8:6e:d1:21:93:54:
                    c9:78:4c:7d:c0:75:c9:1e:cb:6e:e2:b2:33:e3:29:
                    07:49:a8:33:79:c1:90:42:19:ac:28:b8:9d:79:a3:
                    0a:af:b3:b5:6b:aa:b5:76:19:22:73:6d:d2:1d:5c:
                    ac:81:91:2a:2a:c4:26:51:23:57:03:ab:7f:60:59:
                    f4:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:30:00:41:D1:0C:BA:8B:1F:BD:D4:24:C3:C4:0F:D0:39:50:E1:C8
            X509v3 Authority Key Identifier:
                keyid:72:87:BC:15:D9:95:8E:28:5D:5A:59:58:B8:E6:49:7E:5F:CE:91:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/coe8FdmVjihdWllYuOZJfl_OkfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9e5de4-f650-44d7-bd30-7ec213cb115f/1/coe8FdmVjihdWllYuOZJfl_OkfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9e5de4-f650-44d7-bd30-7ec213cb115f/1/coe8FdmVjihdWllYuOZJfl_OkfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:86:0c:f3:4d:c6:1d:ab:0a:50:c4:fa:1d:59:46:23:91:77:
         86:5a:b2:84:a2:b8:f1:8b:0e:a5:c5:27:23:40:d9:45:7b:2a:
         bc:e1:80:4b:ff:32:94:00:5f:02:31:d1:1d:c4:b4:05:10:f4:
         7c:cf:fb:8f:26:1d:bf:9a:bf:40:93:e5:a1:4e:1c:5e:f6:76:
         e6:3c:ed:c5:0e:4b:20:19:79:6f:cb:9e:66:39:13:f0:95:6f:
         78:f2:da:04:bb:ce:f9:20:de:e7:fa:8a:56:31:57:21:2a:35:
         90:ff:dd:ad:4e:5b:f9:9f:06:7a:71:1c:e8:89:ce:d4:92:8b:
         89:71:25:cc:62:a8:3d:fe:10:20:c7:32:14:6f:48:9d:c7:f8:
         dc:9e:24:28:a9:35:df:15:1c:ed:65:f6:23:c3:95:bf:a4:90:
         26:3d:10:b9:ef:e3:37:23:2f:a6:84:41:61:ef:65:5f:7d:ff:
         46:cf:b8:6c:81:cc:88:f1:85:96:79:67:e9:76:5b:be:46:68:
         9e:ff:3c:99:18:68:8e:bc:df:78:82:f8:31:2c:f2:a5:5a:9e:
         e9:5f:d3:d4:57:dc:ca:85:67:54:a9:ab:88:9d:8c:9d:9b:59:
         f6:a3:3f:3c:20:e6:60:da:e3:b9:b2:fb:86:d2:31:8e:ef:a5:
         6e:db:a4:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 10:16:59 2025 by rpki-client