Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/ebafee-8198-4d10-8936-f1a8881519b1/1/skdjJsizNc1GFWo9VpBcbp0NhbU.mft
File:                     skdjJsizNc1GFWo9VpBcbp0NhbU.mft (raw, json)
Hash identifier:          qXVFkjuXqQ3G6yxiLkYCSI76HpxVQG0Y6sR4dF5D00o=
Subject key identifier:   75:65:A0:B0:A5:DF:4E:76:36:F0:A0:3C:41:0E:09:7E:95:5D:AB:A2
Authority key identifier: B2:47:63:26:C8:B3:35:CD:46:15:6A:3D:56:90:5C:6E:9D:0D:85:B5
Certificate issuer:       /CN=b2476326c8b335cd46156a3d56905c6e9d0d85b5
Certificate serial:       0197C8A702D53EDA46E6C873C4A5A5C1E3F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/skdjJsizNc1GFWo9VpBcbp0NhbU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/ebafee-8198-4d10-8936-f1a8881519b1/1/skdjJsizNc1GFWo9VpBcbp0NhbU.mft
Manifest number:          04B8
Signing time:             Wed 02 Jul 2025 01:01:17 +0000
Manifest this update:     Wed 02 Jul 2025 01:01:17 +0000
Manifest next update:     Thu 03 Jul 2025 01:01:17 +0000
Files and hashes:         1: skdjJsizNc1GFWo9VpBcbp0NhbU.crl (hash: 7q9Qr3DOE6Dzh7jGp6aINmnDa+aaAuA7X7vI63572U0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/ebafee-8198-4d10-8936-f1a8881519b1/1/skdjJsizNc1GFWo9VpBcbp0NhbU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/ebafee-8198-4d10-8936-f1a8881519b1/1/skdjJsizNc1GFWo9VpBcbp0NhbU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/skdjJsizNc1GFWo9VpBcbp0NhbU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 01:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c8:a7:02:d5:3e:da:46:e6:c8:73:c4:a5:a5:c1:e3:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2476326c8b335cd46156a3d56905c6e9d0d85b5
        Validity
            Not Before: Jul  2 01:01:17 2025 GMT
            Not After : Jul  3 01:01:17 2025 GMT
        Subject: CN=7565a0b0a5df4e7636f0a03c410e097e955daba2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:e2:a5:9c:08:18:2a:0d:ef:d4:c4:01:a3:4c:
                    cd:41:75:6d:39:ff:df:94:37:9c:1f:ba:7c:60:a7:
                    d2:d9:6e:02:7a:24:b1:cb:48:53:41:32:4f:05:03:
                    53:f7:ae:5c:4b:93:ed:15:b3:31:47:a4:8f:ad:47:
                    23:7b:b4:71:b0:98:45:95:10:72:ca:a7:4b:72:8b:
                    ab:04:5f:20:46:f5:a4:f3:c0:48:2e:6e:94:e2:cf:
                    07:43:63:3d:5f:37:db:6f:4d:2f:35:6d:2d:fb:00:
                    22:8c:fb:ac:72:38:0a:f2:cf:fe:42:93:21:a7:89:
                    12:f4:7e:02:05:c0:3e:58:60:b7:ea:bc:19:83:5b:
                    13:e3:ef:8b:4c:24:b4:78:39:20:bd:83:f3:92:f6:
                    90:10:48:11:f2:03:6a:87:88:00:70:68:c5:ac:e6:
                    20:1a:d2:02:d6:09:5d:b3:b4:af:e9:f9:73:b6:3e:
                    da:3d:94:bf:ca:f0:5c:22:d6:ca:37:fb:b7:b2:ef:
                    91:4e:0c:72:95:8b:f4:84:e7:9f:28:43:2b:f2:54:
                    e3:e8:3e:97:99:34:87:fc:8b:98:23:18:b6:18:f2:
                    03:87:81:3e:7c:35:22:5e:ae:38:e6:f5:c7:18:b3:
                    69:45:3e:3f:51:c5:3e:45:23:40:c0:67:80:5d:ad:
                    e9:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:65:A0:B0:A5:DF:4E:76:36:F0:A0:3C:41:0E:09:7E:95:5D:AB:A2
            X509v3 Authority Key Identifier:
                keyid:B2:47:63:26:C8:B3:35:CD:46:15:6A:3D:56:90:5C:6E:9D:0D:85:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skdjJsizNc1GFWo9VpBcbp0NhbU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ebafee-8198-4d10-8936-f1a8881519b1/1/skdjJsizNc1GFWo9VpBcbp0NhbU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ebafee-8198-4d10-8936-f1a8881519b1/1/skdjJsizNc1GFWo9VpBcbp0NhbU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:07:cf:91:25:a1:dc:c2:5e:71:16:6a:14:c8:a4:bf:ca:b7:
         62:cd:b8:ad:bb:e6:84:ba:81:93:c6:fa:b0:6b:e6:e7:24:3f:
         12:50:6a:f0:dd:f9:2c:22:09:37:4d:1b:74:d0:b0:9b:43:ff:
         f0:d2:b5:2e:1e:8e:e5:14:b9:30:32:0a:f5:d8:10:1c:55:cc:
         c7:da:6c:c0:d2:30:29:08:f8:bb:a2:62:12:f4:39:69:33:8f:
         de:3e:bd:4c:a0:17:66:84:e4:0b:a5:b0:4f:d7:0a:4f:2b:d9:
         8d:23:e2:78:8c:1c:9e:da:13:6b:3f:6c:43:08:b4:9f:41:04:
         23:67:2b:75:e3:bb:1a:62:a0:a4:9c:21:e2:98:27:f7:a2:6e:
         3e:94:52:91:d8:a2:44:d6:c5:5a:29:81:3e:34:90:b2:8a:c3:
         95:42:07:15:d3:7d:40:62:47:97:dc:58:aa:90:14:6d:b1:03:
         1c:1b:d0:45:48:40:87:00:19:9e:33:02:f1:3d:ce:2d:a6:91:
         7e:86:db:ae:76:e8:4c:a0:5a:f5:ea:63:98:50:a3:6c:be:d5:
         ba:c1:51:69:5e:c4:60:42:25:8d:15:33:07:32:7e:a7:6f:d4:
         aa:a8:03:8f:8c:a9:dc:5f:f0:e8:b6:50:17:a2:9a:7a:a2:07:
         a8:db:5b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 07:04:33 2025 by rpki-client