Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/13df3e-bc22-402f-afbc-fc9ead8256ac/1/fuKac7j6u65GDnkk_nZoR13LmmM.mft
File:                     fuKac7j6u65GDnkk_nZoR13LmmM.mft (raw, json)
Hash identifier:          oce7wOYmKV9K9hVRe+z4EaH5cfKQdvGf+MCcPOyzUCk=
Subject key identifier:   79:E5:BC:2C:9D:88:24:1B:31:05:62:16:6F:B7:29:F8:46:1A:64:F9
Authority key identifier: 7E:E2:9A:73:B8:FA:BB:AE:46:0E:79:24:FE:76:68:47:5D:CB:9A:63
Certificate issuer:       /CN=7ee29a73b8fabbae460e7924fe7668475dcb9a63
Certificate serial:       0197C61388F8C0D952DFAADC59D8766C370F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fuKac7j6u65GDnkk_nZoR13LmmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/13df3e-bc22-402f-afbc-fc9ead8256ac/1/fuKac7j6u65GDnkk_nZoR13LmmM.mft
Manifest number:          0537
Signing time:             Tue 01 Jul 2025 13:00:58 +0000
Manifest this update:     Tue 01 Jul 2025 13:00:58 +0000
Manifest next update:     Wed 02 Jul 2025 13:00:58 +0000
Files and hashes:         1: fuKac7j6u65GDnkk_nZoR13LmmM.crl (hash: vBpGrD6pHlMyYRwEQrn8F3S0WOtgaZC5405akQqNhdg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/13df3e-bc22-402f-afbc-fc9ead8256ac/1/fuKac7j6u65GDnkk_nZoR13LmmM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/13df3e-bc22-402f-afbc-fc9ead8256ac/1/fuKac7j6u65GDnkk_nZoR13LmmM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fuKac7j6u65GDnkk_nZoR13LmmM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 02 Jul 2025 13:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c6:13:88:f8:c0:d9:52:df:aa:dc:59:d8:76:6c:37:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ee29a73b8fabbae460e7924fe7668475dcb9a63
        Validity
            Not Before: Jul  1 13:00:58 2025 GMT
            Not After : Jul  2 13:00:58 2025 GMT
        Subject: CN=79e5bc2c9d88241b310562166fb729f8461a64f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:79:cf:a9:86:84:0a:c7:39:e6:e3:74:aa:f0:
                    0f:aa:e5:58:a9:69:64:2e:dd:c2:30:62:48:7d:a5:
                    2d:d3:fb:53:9f:7a:6c:ad:14:ba:ee:58:b8:51:10:
                    1a:55:ff:af:f5:3b:fe:3b:ce:70:b6:48:07:1d:84:
                    3f:a2:be:e2:24:62:df:d6:d7:01:37:30:20:3a:48:
                    ff:41:0e:af:a8:39:9f:91:3d:15:a6:03:b9:0a:99:
                    21:9d:f7:6c:fe:60:0c:86:25:b2:76:00:d5:5a:7c:
                    26:75:70:3b:8e:96:04:e9:2f:e0:0f:30:4c:1a:33:
                    9b:08:66:d3:b8:e2:df:7e:95:8d:fb:9f:8c:67:ee:
                    e8:3c:23:98:ab:7d:5e:14:b4:43:60:6f:4c:ed:7f:
                    f0:5c:2d:f7:75:67:7a:bb:53:b4:d9:79:9f:ed:79:
                    45:92:81:31:de:a6:03:51:b6:12:8f:1d:e9:21:6a:
                    58:93:24:05:9f:37:f7:19:f4:a9:53:4e:12:56:78:
                    1e:e2:98:d6:f8:81:11:4e:e4:0d:74:d7:ab:f7:c9:
                    8c:6b:9b:a5:af:d6:d0:57:ce:24:95:9b:0e:59:29:
                    c5:8b:1e:f3:8f:dd:dc:b1:ca:cd:63:f4:2f:f9:e2:
                    09:98:af:a7:69:ed:e9:75:0d:24:6e:63:59:42:21:
                    ca:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:E5:BC:2C:9D:88:24:1B:31:05:62:16:6F:B7:29:F8:46:1A:64:F9
            X509v3 Authority Key Identifier:
                keyid:7E:E2:9A:73:B8:FA:BB:AE:46:0E:79:24:FE:76:68:47:5D:CB:9A:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuKac7j6u65GDnkk_nZoR13LmmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/13df3e-bc22-402f-afbc-fc9ead8256ac/1/fuKac7j6u65GDnkk_nZoR13LmmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/13df3e-bc22-402f-afbc-fc9ead8256ac/1/fuKac7j6u65GDnkk_nZoR13LmmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:98:c1:eb:75:9f:3c:cd:35:19:ce:e8:fa:d4:d0:f9:c5:3f:
         f1:17:fd:bb:02:19:58:b8:47:a3:85:3b:a7:d0:da:13:a3:aa:
         93:14:93:77:15:86:02:49:36:98:1d:b3:f3:eb:d0:90:68:18:
         77:6a:af:b2:22:bd:78:0c:c0:bc:7d:c0:6d:87:76:6c:7b:b8:
         9c:cf:28:11:19:f1:19:15:95:06:aa:a4:22:dc:e8:b2:f2:01:
         3d:a0:73:5d:c2:dc:a2:30:36:24:28:e1:45:54:97:5d:0a:ea:
         e2:5b:da:08:70:7c:7e:04:12:41:2d:b2:ff:ce:3a:1d:54:fb:
         50:c6:7f:1d:6b:b5:9b:ab:c4:a1:1f:1e:0a:f1:fb:db:4c:19:
         37:aa:95:8b:6a:da:2c:cd:bb:d6:dc:b6:b2:3e:76:c3:6f:9d:
         82:63:c1:13:1e:3f:d4:4d:7d:bb:85:3d:5d:16:c5:17:a2:6a:
         15:84:80:43:47:3a:33:7a:f2:00:0f:17:b7:ae:74:f3:98:65:
         b7:e5:7f:59:5d:70:1c:b5:ed:7c:a7:03:de:be:08:17:c5:05:
         3e:3a:5e:7c:b9:b9:4a:21:6e:ab:e4:8e:eb:c3:75:c9:d9:a5:
         97:a0:0e:e6:8b:84:08:d8:7f:bc:7c:b2:ed:8d:c7:a4:0f:e4:
         07:04:9b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 22:27:54 2025 by rpki-client