Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/25c947-8534-4341-ad6e-7da8dbaea94a/1/mEL3HQwjZ4gu9HCLIGtLbimjezM.mft
File:                     mEL3HQwjZ4gu9HCLIGtLbimjezM.mft (raw, json)
Hash identifier:          l4Ucb+K1uXqK5ULEBerFE4bHUiOUbXG6NkXcpaHjvzY=
Subject key identifier:   AA:33:30:E3:AD:F8:13:5D:AC:5C:ED:9F:19:09:E6:2A:0C:EC:ED:89
Authority key identifier: 98:42:F7:1D:0C:23:67:88:2E:F4:70:8B:20:6B:4B:6E:29:A3:7B:33
Certificate issuer:       /CN=9842f71d0c2367882ef4708b206b4b6e29a37b33
Certificate serial:       0197C9F12E8F4E03EF21DF7B88314FF1F787
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mEL3HQwjZ4gu9HCLIGtLbimjezM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/25c947-8534-4341-ad6e-7da8dbaea94a/1/mEL3HQwjZ4gu9HCLIGtLbimjezM.mft
Manifest number:          1254
Signing time:             Wed 02 Jul 2025 07:01:55 +0000
Manifest this update:     Wed 02 Jul 2025 07:01:55 +0000
Manifest next update:     Thu 03 Jul 2025 07:01:55 +0000
Files and hashes:         1: mEL3HQwjZ4gu9HCLIGtLbimjezM.crl (hash: yAdM63lUQpem+tnDfsrSctgAV9C1xKvIqqLSNmOsLmE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/25c947-8534-4341-ad6e-7da8dbaea94a/1/mEL3HQwjZ4gu9HCLIGtLbimjezM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/25c947-8534-4341-ad6e-7da8dbaea94a/1/mEL3HQwjZ4gu9HCLIGtLbimjezM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mEL3HQwjZ4gu9HCLIGtLbimjezM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 07:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c9:f1:2e:8f:4e:03:ef:21:df:7b:88:31:4f:f1:f7:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9842f71d0c2367882ef4708b206b4b6e29a37b33
        Validity
            Not Before: Jul  2 07:01:55 2025 GMT
            Not After : Jul  3 07:01:55 2025 GMT
        Subject: CN=aa3330e3adf8135dac5ced9f1909e62a0ceced89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:36:04:94:37:d5:93:ed:f8:f1:23:21:83:b4:
                    65:99:dc:ee:85:7e:c7:c1:54:03:2b:68:b5:0c:61:
                    c4:9e:7d:fe:8e:0b:85:39:99:97:be:26:e6:8d:96:
                    56:bd:4a:6d:29:0f:2e:24:a0:c7:80:6b:ac:28:a8:
                    22:27:4a:6d:ab:a8:7b:39:94:95:29:19:47:c2:03:
                    44:6f:47:e6:55:b3:1d:a3:b9:de:f9:70:8b:da:0e:
                    46:3f:bd:4c:ad:f5:f9:d6:e7:e4:3e:dd:7d:47:b0:
                    55:f3:89:b1:78:43:8a:93:d5:24:07:f4:de:f9:cc:
                    17:81:af:49:42:a6:c3:4d:2f:c7:87:90:7c:d7:b8:
                    a4:a9:b5:45:47:fa:61:3a:78:eb:c6:ba:01:eb:16:
                    43:a1:8e:3c:20:c4:40:5e:a1:95:5d:29:df:a8:00:
                    91:a8:88:7a:ee:ec:a0:11:7a:62:d6:0e:0d:9e:2b:
                    11:b0:41:42:e1:a2:76:80:1f:93:18:4d:97:44:00:
                    e0:43:b8:be:9e:55:89:a7:04:92:88:a7:b1:83:b4:
                    c5:3b:af:3b:bf:0c:a6:66:a0:1c:11:d0:4d:d0:ce:
                    41:63:75:97:fe:18:85:7a:c7:66:20:9c:1f:c0:75:
                    f0:52:59:f9:0d:5b:65:b5:9f:b9:d7:2a:c1:98:b5:
                    7f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:33:30:E3:AD:F8:13:5D:AC:5C:ED:9F:19:09:E6:2A:0C:EC:ED:89
            X509v3 Authority Key Identifier:
                keyid:98:42:F7:1D:0C:23:67:88:2E:F4:70:8B:20:6B:4B:6E:29:A3:7B:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mEL3HQwjZ4gu9HCLIGtLbimjezM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/25c947-8534-4341-ad6e-7da8dbaea94a/1/mEL3HQwjZ4gu9HCLIGtLbimjezM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/25c947-8534-4341-ad6e-7da8dbaea94a/1/mEL3HQwjZ4gu9HCLIGtLbimjezM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:4f:c0:b4:9f:c8:a1:be:7e:38:9d:4b:82:a6:f0:6f:60:9a:
         28:41:c1:f9:f9:f2:dd:9a:7b:a6:3e:5a:5e:60:b0:8b:20:57:
         8c:0e:dc:80:7a:9c:4a:ea:4b:ae:d9:ac:47:80:b1:1c:00:cb:
         39:72:32:dd:35:b0:21:b8:cf:ec:37:c4:7f:0a:76:31:a2:e8:
         3d:b8:f4:23:13:69:00:80:5c:e9:18:3a:c5:4c:aa:1e:21:70:
         84:8c:5c:6d:d2:3b:bf:80:dc:42:25:cf:6d:67:29:50:cb:5f:
         bb:08:85:74:15:d1:41:1a:8a:7f:9d:3f:7f:bd:86:e2:c2:b0:
         bb:40:d0:3e:c8:13:f1:12:33:cb:01:32:cf:b1:0d:9d:cb:b9:
         53:9a:30:4b:16:cd:c8:39:a0:45:67:65:09:08:be:c9:bf:3d:
         06:7b:49:cd:c8:d8:ce:ad:57:46:13:af:78:b9:52:08:78:55:
         cd:ed:a2:92:09:49:4f:5d:59:fa:cd:d8:03:69:e5:3b:11:ec:
         7d:52:9b:d2:b6:53:db:0b:7a:9a:f2:e6:58:f9:69:62:00:db:
         f8:8f:db:c7:08:dd:2b:77:7a:d7:16:f9:16:07:e8:0f:99:5d:
         24:0b:35:07:fd:46:79:c4:f8:fc:e5:6d:cb:36:a2:6b:71:5e:
         f7:68:55:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 12:24:59 2025 by rpki-client