Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/8d2113-3ec0-4445-8dfe-7adb40dca7bd/1/V25aWVM8ptDwtIgH0Md-FWhgTl4.mft
File:                     V25aWVM8ptDwtIgH0Md-FWhgTl4.mft (raw, json)
Hash identifier:          G7P+sEhUKopsvUsNyq1/BtXCOhdRKSLUkxKQzUXx9KE=
Subject key identifier:   94:A3:83:B2:82:8F:AD:DA:AB:79:F3:A4:67:A6:29:8D:C0:C5:EC:80
Authority key identifier: 57:6E:5A:59:53:3C:A6:D0:F0:B4:88:07:D0:C7:7E:15:68:60:4E:5E
Certificate issuer:       /CN=576e5a59533ca6d0f0b48807d0c77e1568604e5e
Certificate serial:       0197B70F00F130097EFE7E1F7AC581F3494D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V25aWVM8ptDwtIgH0Md-FWhgTl4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/8d2113-3ec0-4445-8dfe-7adb40dca7bd/1/V25aWVM8ptDwtIgH0Md-FWhgTl4.mft
Manifest number:          05F6
Signing time:             Sat 28 Jun 2025 15:01:43 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:43 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:43 +0000
Files and hashes:         1: V25aWVM8ptDwtIgH0Md-FWhgTl4.crl (hash: JuliKOCwSuXYk5auIALJ470t+jhytEk7AAL/7tZBZjo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/8d2113-3ec0-4445-8dfe-7adb40dca7bd/1/V25aWVM8ptDwtIgH0Md-FWhgTl4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/8d2113-3ec0-4445-8dfe-7adb40dca7bd/1/V25aWVM8ptDwtIgH0Md-FWhgTl4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V25aWVM8ptDwtIgH0Md-FWhgTl4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0f:00:f1:30:09:7e:fe:7e:1f:7a:c5:81:f3:49:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=576e5a59533ca6d0f0b48807d0c77e1568604e5e
        Validity
            Not Before: Jun 28 15:01:43 2025 GMT
            Not After : Jun 29 15:01:43 2025 GMT
        Subject: CN=94a383b2828faddaab79f3a467a6298dc0c5ec80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:af:c9:65:34:a0:3d:e6:34:eb:e2:95:d3:91:
                    c4:ba:5b:0e:f4:98:d6:01:72:38:41:3c:10:f4:bf:
                    71:ab:b0:22:f8:5f:e7:9d:a9:11:56:32:3b:a4:95:
                    82:17:5f:72:3d:cb:24:9e:fb:d5:40:bd:73:52:63:
                    e1:3c:9c:1a:5e:b0:d4:16:42:a0:64:db:aa:58:0a:
                    0c:69:5b:34:cc:46:89:06:72:43:0e:4f:34:6a:46:
                    da:bf:59:00:b8:7f:75:cb:97:64:fd:d2:8d:6f:d0:
                    7c:94:cb:f9:93:8c:b5:f5:23:d3:cd:1f:df:d4:61:
                    62:ec:91:18:45:be:f7:2b:76:f9:c0:b1:f0:60:de:
                    2b:d9:1c:df:e1:4e:42:3d:fa:af:d0:78:2d:a1:df:
                    50:0d:22:97:18:6a:d3:9a:ea:c6:55:22:0a:41:0f:
                    90:45:b1:ac:20:96:e0:84:41:5b:ba:14:9d:00:0b:
                    d3:54:81:2c:3a:7a:86:e0:42:e5:71:6d:93:3e:80:
                    0f:8b:fa:0e:8d:76:82:eb:02:73:ae:72:39:20:13:
                    80:de:33:af:cd:57:6e:07:d0:10:93:9d:fd:c8:9c:
                    d1:3a:dd:d0:d7:c9:24:48:1f:ab:d5:2c:ec:79:41:
                    60:7d:3a:c2:45:0b:f8:4c:93:ad:42:d3:db:29:42:
                    e1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:A3:83:B2:82:8F:AD:DA:AB:79:F3:A4:67:A6:29:8D:C0:C5:EC:80
            X509v3 Authority Key Identifier:
                keyid:57:6E:5A:59:53:3C:A6:D0:F0:B4:88:07:D0:C7:7E:15:68:60:4E:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V25aWVM8ptDwtIgH0Md-FWhgTl4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8d2113-3ec0-4445-8dfe-7adb40dca7bd/1/V25aWVM8ptDwtIgH0Md-FWhgTl4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8d2113-3ec0-4445-8dfe-7adb40dca7bd/1/V25aWVM8ptDwtIgH0Md-FWhgTl4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:e1:f5:2a:6e:30:01:83:9c:c9:ac:6d:7f:e7:5d:92:82:76:
         36:3d:d1:97:1f:e4:35:f6:98:57:58:b9:6f:c0:ab:aa:19:c1:
         fa:06:f0:86:53:62:45:2a:49:18:f9:6f:c2:d2:74:13:a2:15:
         c9:3a:73:57:c9:e0:fa:a5:c7:62:f8:01:f2:f9:47:5f:e6:20:
         9b:d4:17:eb:b8:8b:78:b4:8a:54:78:15:d0:3f:a6:8e:ff:71:
         c5:de:79:89:43:81:7c:1c:6f:de:ee:bf:e3:8a:ca:62:b0:55:
         88:7a:46:e1:5a:77:36:e8:6a:bc:b7:51:ab:4e:5f:85:a3:49:
         25:54:e7:28:3c:80:68:fc:03:79:b5:df:f7:ac:a2:3f:66:ae:
         5c:bf:64:34:e2:b4:e5:3f:8d:ea:a3:e6:8b:5a:08:45:4d:43:
         64:12:e6:79:3f:75:1b:f1:59:23:db:84:fc:a8:b5:80:84:8e:
         34:c0:eb:28:a5:20:83:ec:eb:6c:96:28:10:63:70:7b:7d:5e:
         57:78:01:9a:d3:a2:68:95:d8:69:64:94:88:65:32:0d:87:ab:
         85:8a:b5:5b:7d:94:8a:8a:8e:d9:f1:89:3c:85:1c:91:45:86:
         42:20:67:30:83:d9:e2:ef:a7:b2:92:90:cb:cc:ba:91:a9:62:
         ec:55:b5:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:53:42 2025 by rpki-client