Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/46615c-a7df-425b-9590-d21e143f75b2/1/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.mft
File:                     MwvI_ZSeZR2TKFzLwdoTOTt4MwU.mft (raw, json)
Hash identifier:          Er+pj7B959ZdktKO1lr7qCAseQyqK0cu4FRA5QAC0PQ=
Subject key identifier:   F6:E7:1D:D3:C7:8C:92:C7:AE:48:79:B8:68:8A:3A:5C:38:6B:09:B6
Authority key identifier: 33:0B:C8:FD:94:9E:65:1D:93:28:5C:CB:C1:DA:13:39:3B:78:33:05
Certificate issuer:       /CN=330bc8fd949e651d93285ccbc1da13393b783305
Certificate serial:       0197B7B330AFC2C2BE7E835C5A228815E503
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/46615c-a7df-425b-9590-d21e143f75b2/1/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.mft
Manifest number:          0FAD
Signing time:             Sat 28 Jun 2025 18:01:03 +0000
Manifest this update:     Sat 28 Jun 2025 18:01:03 +0000
Manifest next update:     Sun 29 Jun 2025 18:01:03 +0000
Files and hashes:         1: MwvI_ZSeZR2TKFzLwdoTOTt4MwU.crl (hash: LBIUsUD7ySfh8h+AiH6M2rxw3g7ClpVYuFGpsOFPC2U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/46615c-a7df-425b-9590-d21e143f75b2/1/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/46615c-a7df-425b-9590-d21e143f75b2/1/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:b3:30:af:c2:c2:be:7e:83:5c:5a:22:88:15:e5:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=330bc8fd949e651d93285ccbc1da13393b783305
        Validity
            Not Before: Jun 28 18:01:03 2025 GMT
            Not After : Jun 29 18:01:03 2025 GMT
        Subject: CN=f6e71dd3c78c92c7ae4879b8688a3a5c386b09b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f1:b2:e3:c3:ab:6b:bb:54:33:80:5a:23:8d:
                    0b:11:78:81:be:c0:80:1c:73:48:40:0f:56:08:40:
                    ab:37:49:84:5d:02:0c:5f:4b:4d:55:ce:d5:85:23:
                    f7:f8:ca:58:3e:6f:5f:12:86:fb:a0:9f:65:93:51:
                    c7:b5:91:3a:6f:4c:73:6f:75:75:79:ee:64:c8:18:
                    39:41:81:30:de:bb:a9:84:24:de:d2:b2:1f:cc:25:
                    17:7c:ce:ad:e2:43:c1:87:e9:c1:0a:dc:fb:9f:1a:
                    73:0c:5c:72:31:04:6c:69:bd:bb:cf:6a:0b:fe:ce:
                    f0:50:fa:3c:aa:5e:bc:0b:80:64:c1:ca:f2:d2:39:
                    f5:5c:b8:03:6c:be:74:95:b4:9d:19:dc:18:be:e9:
                    9f:ae:5c:08:97:19:24:a5:7b:02:0b:72:7c:35:b0:
                    08:2a:ea:49:08:74:67:19:d1:dc:a8:32:bb:6c:95:
                    8b:ae:9a:c9:e4:17:dd:24:b3:c7:7f:34:c4:e2:f3:
                    95:61:51:7e:a7:ac:c9:ba:ee:99:bf:33:8c:bb:a9:
                    ce:62:f6:f9:48:fc:19:cb:fa:e2:34:94:c4:9a:a7:
                    db:f7:48:e5:8a:21:dc:77:f9:20:bc:1c:fd:16:71:
                    3e:f6:b8:3c:eb:77:a5:68:bb:7d:bb:59:ff:6c:79:
                    c6:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:E7:1D:D3:C7:8C:92:C7:AE:48:79:B8:68:8A:3A:5C:38:6B:09:B6
            X509v3 Authority Key Identifier:
                keyid:33:0B:C8:FD:94:9E:65:1D:93:28:5C:CB:C1:DA:13:39:3B:78:33:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/46615c-a7df-425b-9590-d21e143f75b2/1/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/46615c-a7df-425b-9590-d21e143f75b2/1/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:11:30:ac:47:5b:48:5a:ca:b0:f1:12:2f:d7:ea:b5:3f:2c:
         19:f1:f0:a4:c3:11:37:21:c7:b1:22:af:99:77:45:61:96:bc:
         72:2f:86:6a:b9:f9:39:7f:b7:72:58:a6:49:0b:83:3c:01:62:
         0c:04:18:c3:b5:18:c1:11:0d:2a:d7:c2:4c:cd:fc:e0:62:bd:
         0d:c3:32:cb:41:d3:93:41:04:22:b8:12:20:93:c5:e7:4c:4b:
         2a:72:64:97:14:9e:bd:8b:6f:22:68:39:77:e3:cf:11:50:6c:
         9c:11:18:28:da:0d:55:1e:7b:cf:44:c8:59:f6:d9:09:69:4d:
         5a:29:80:d7:54:92:59:90:3e:5f:f8:74:66:0a:27:e8:14:2d:
         c1:c1:57:92:24:c3:94:8f:a7:15:35:28:a6:ee:a9:9c:82:34:
         bb:ae:fa:64:b6:4c:fd:b5:9e:dc:0c:3a:75:7e:06:ea:04:d6:
         c1:3f:b9:74:f2:7c:58:d3:cd:7b:6c:00:66:6f:75:7c:58:72:
         c1:96:08:03:3a:be:88:0a:55:68:4d:39:6c:e9:63:42:84:c3:
         dc:82:83:7b:9d:e1:b4:a7:fc:aa:bb:63:c5:ad:d9:50:5a:84:
         15:6c:e4:f6:6a:02:7b:27:4a:7d:58:cc:20:a1:52:64:92:af:
         c1:cf:58:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:55:47 2025 by rpki-client