Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/85cf2e-c9da-4010-a093-e4446f2c12ec/1/718cQVLEpGBV9yy-hmqI1QDfmD8.mft
File:                     718cQVLEpGBV9yy-hmqI1QDfmD8.mft (raw, json)
Hash identifier:          q/jjQXWc9qfRj1/3jzWmpVHwT5RwACkS/cb/DBICI0w=
Subject key identifier:   EF:0C:AD:70:9A:51:42:B2:92:98:01:EE:85:59:7C:C9:5A:A9:CB:40
Authority key identifier: EF:5F:1C:41:52:C4:A4:60:55:F7:2C:BE:86:6A:88:D5:00:DF:98:3F
Certificate issuer:       /CN=ef5f1c4152c4a46055f72cbe866a88d500df983f
Certificate serial:       0197B6A1553C2DFF05C85FF0DEFBE627CF26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/718cQVLEpGBV9yy-hmqI1QDfmD8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/85cf2e-c9da-4010-a093-e4446f2c12ec/1/718cQVLEpGBV9yy-hmqI1QDfmD8.mft
Manifest number:          0FAD
Signing time:             Sat 28 Jun 2025 13:01:55 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:55 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:55 +0000
Files and hashes:         1: 718cQVLEpGBV9yy-hmqI1QDfmD8.crl (hash: uCOWNy+0MZArR8QibSkbLICS9CM4NW1u/wrtwpGaf3Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/85cf2e-c9da-4010-a093-e4446f2c12ec/1/718cQVLEpGBV9yy-hmqI1QDfmD8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/85cf2e-c9da-4010-a093-e4446f2c12ec/1/718cQVLEpGBV9yy-hmqI1QDfmD8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/718cQVLEpGBV9yy-hmqI1QDfmD8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:55:3c:2d:ff:05:c8:5f:f0:de:fb:e6:27:cf:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef5f1c4152c4a46055f72cbe866a88d500df983f
        Validity
            Not Before: Jun 28 13:01:55 2025 GMT
            Not After : Jun 29 13:01:55 2025 GMT
        Subject: CN=ef0cad709a5142b2929801ee85597cc95aa9cb40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:50:c1:7d:16:e5:e2:60:66:7d:96:65:66:bb:
                    bf:60:30:11:3d:52:fe:93:64:3d:69:2b:88:ab:90:
                    ca:d9:4b:ae:fa:1b:3b:3c:71:25:e9:42:d5:69:e2:
                    e7:52:19:46:96:fd:dc:2f:df:14:04:c6:8e:49:de:
                    25:58:ea:85:3d:15:cf:fe:06:e7:e1:b3:82:b1:33:
                    f3:11:80:8c:45:86:a4:94:fc:e4:d3:3a:d1:26:f6:
                    60:fe:4a:74:dc:b4:0c:7b:3f:a5:ce:aa:a5:ef:81:
                    cb:a3:1d:b9:9c:5d:f5:82:a5:f6:23:a1:d4:33:21:
                    94:30:c4:a6:64:9c:ff:15:71:44:6d:b9:51:b4:ff:
                    3c:35:79:ee:5d:12:87:d3:96:4b:a3:0d:4e:7e:7f:
                    6a:45:79:25:af:e4:36:61:27:bd:a1:35:fe:72:56:
                    ac:27:81:1f:8b:63:10:ca:2d:77:ab:ce:a2:e0:05:
                    a3:b8:21:5b:97:87:02:8f:4b:6c:0b:a2:03:f4:48:
                    d2:c5:40:32:64:d3:aa:f5:bd:15:50:f1:b1:22:e7:
                    02:e8:e1:71:3a:d0:4b:84:82:03:74:ba:d1:26:34:
                    61:33:eb:cb:40:9b:82:49:fa:66:b0:f1:d4:2d:60:
                    05:2a:9f:72:54:e4:ac:52:6e:bc:89:fd:2c:d3:4c:
                    64:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:0C:AD:70:9A:51:42:B2:92:98:01:EE:85:59:7C:C9:5A:A9:CB:40
            X509v3 Authority Key Identifier:
                keyid:EF:5F:1C:41:52:C4:A4:60:55:F7:2C:BE:86:6A:88:D5:00:DF:98:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/718cQVLEpGBV9yy-hmqI1QDfmD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/85cf2e-c9da-4010-a093-e4446f2c12ec/1/718cQVLEpGBV9yy-hmqI1QDfmD8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/85cf2e-c9da-4010-a093-e4446f2c12ec/1/718cQVLEpGBV9yy-hmqI1QDfmD8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:fa:30:de:6e:3d:4d:2e:43:01:86:2d:0a:06:a8:15:bd:8b:
         3b:21:97:7e:b9:30:ee:96:cf:07:47:27:13:74:a6:47:f9:ab:
         8e:23:93:87:37:b0:7b:ac:51:32:92:85:8f:91:c4:ba:f8:46:
         24:71:55:cc:07:ac:18:91:3d:a1:15:30:38:0e:56:06:f0:94:
         5b:a7:f7:dc:75:2c:5a:9c:ad:b5:62:f1:9c:a1:e6:0b:f8:ff:
         12:a7:3b:13:d0:7a:22:16:75:a7:bd:06:fd:a0:ce:cb:a8:5f:
         45:83:04:7a:25:2f:56:ed:e2:1a:e2:2f:4a:d7:45:0e:b8:2f:
         e0:1c:a0:58:ba:de:53:14:17:f0:89:9e:ab:aa:84:ee:58:c8:
         13:16:f1:1d:b4:19:c3:86:2c:d4:87:0f:65:e4:b6:0c:ff:75:
         fa:27:5e:07:ca:8b:b0:b2:8c:ec:22:dc:99:ce:0c:40:12:58:
         f2:87:47:f8:bd:49:3b:68:c2:42:44:08:37:b0:2d:a2:64:7c:
         f5:e7:ca:36:b1:25:68:b4:17:3a:b0:3f:35:36:11:8c:74:31:
         3a:a7:08:98:4d:28:ef:1f:d3:12:aa:d4:72:4b:c2:de:3d:3d:
         53:4a:a3:7d:ce:51:db:c8:16:78:91:5c:25:7e:8c:9c:57:e6:
         f5:65:2f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:33:52 2025 by rpki-client