Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a6f608-3203-47f7-bbca-0a75749f7148/1/0PeTlppshIPMNmeTRFD2Z4_Rl1g.mft
File:                     0PeTlppshIPMNmeTRFD2Z4_Rl1g.mft (raw, json)
Hash identifier:          9md+k3QgsvlGVtFiA//5z4LiK8anbcoOapKL9r8o7uI=
Subject key identifier:   A7:97:93:82:02:10:3B:DA:3D:CA:8D:13:B0:AC:4A:2F:4E:6B:A5:51
Authority key identifier: D0:F7:93:96:9A:6C:84:83:CC:36:67:93:44:50:F6:67:8F:D1:97:58
Certificate issuer:       /CN=d0f793969a6c8483cc3667934450f6678fd19758
Certificate serial:       0197B77C59A937E75C0486FD6AC4EF23D5ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0PeTlppshIPMNmeTRFD2Z4_Rl1g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/a6f608-3203-47f7-bbca-0a75749f7148/1/0PeTlppshIPMNmeTRFD2Z4_Rl1g.mft
Manifest number:          05E1
Signing time:             Sat 28 Jun 2025 17:01:09 +0000
Manifest this update:     Sat 28 Jun 2025 17:01:09 +0000
Manifest next update:     Sun 29 Jun 2025 17:01:09 +0000
Files and hashes:         1: 0PeTlppshIPMNmeTRFD2Z4_Rl1g.crl (hash: Mm/S240wQlVhLwI32BdgbEFNbIp/Lb3Ip2pGS1b2z9A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/a6f608-3203-47f7-bbca-0a75749f7148/1/0PeTlppshIPMNmeTRFD2Z4_Rl1g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/a6f608-3203-47f7-bbca-0a75749f7148/1/0PeTlppshIPMNmeTRFD2Z4_Rl1g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0PeTlppshIPMNmeTRFD2Z4_Rl1g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:59:a9:37:e7:5c:04:86:fd:6a:c4:ef:23:d5:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0f793969a6c8483cc3667934450f6678fd19758
        Validity
            Not Before: Jun 28 17:01:09 2025 GMT
            Not After : Jun 29 17:01:09 2025 GMT
        Subject: CN=a797938202103bda3dca8d13b0ac4a2f4e6ba551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f1:96:f6:88:5f:4d:a0:f6:7f:4e:24:48:5f:
                    7a:25:a3:07:e0:de:b5:e0:fa:80:4d:56:3d:0a:24:
                    07:d0:ca:41:98:fc:b5:ec:59:1d:82:be:ff:96:0a:
                    41:ea:8a:47:63:53:f7:76:ec:9f:86:b7:15:e2:37:
                    90:28:35:95:2c:eb:58:40:16:36:0e:6b:85:0c:0f:
                    5a:38:78:2b:42:dd:41:26:0b:ef:50:7b:00:55:5c:
                    38:36:0d:7f:e7:d8:80:54:0a:31:7b:7d:25:83:82:
                    a0:18:c9:00:94:a9:5d:de:db:ff:ee:b4:90:1c:a0:
                    4a:46:d0:b8:6f:d5:25:bc:34:44:1c:1a:5d:a8:73:
                    4e:c6:d0:9a:a8:99:e8:49:bc:1c:26:da:40:6c:4b:
                    c0:2c:7a:25:aa:b6:ab:70:a6:03:a0:dd:21:c0:30:
                    c7:87:a1:11:50:48:92:a8:c6:59:bc:d6:6b:51:34:
                    a3:a0:c1:7a:23:b6:f6:87:ca:6c:a5:2f:53:04:e0:
                    97:d8:32:dc:d9:64:bc:85:a4:66:51:18:c7:c2:42:
                    99:52:80:81:93:8c:51:59:11:7c:77:13:5e:2a:1c:
                    e4:9c:9f:6b:d3:b2:e9:80:c1:2e:41:21:84:43:db:
                    28:d1:53:67:1d:e3:78:88:db:57:d6:4b:14:48:0c:
                    76:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:97:93:82:02:10:3B:DA:3D:CA:8D:13:B0:AC:4A:2F:4E:6B:A5:51
            X509v3 Authority Key Identifier:
                keyid:D0:F7:93:96:9A:6C:84:83:CC:36:67:93:44:50:F6:67:8F:D1:97:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PeTlppshIPMNmeTRFD2Z4_Rl1g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a6f608-3203-47f7-bbca-0a75749f7148/1/0PeTlppshIPMNmeTRFD2Z4_Rl1g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a6f608-3203-47f7-bbca-0a75749f7148/1/0PeTlppshIPMNmeTRFD2Z4_Rl1g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:08:78:ca:f4:1d:ca:43:b8:1f:d3:71:b1:bc:0b:fa:b8:e1:
         46:88:86:8d:32:e8:10:e6:c0:fb:ec:fb:e0:2c:c8:13:fa:5b:
         f3:b0:93:7a:a0:1b:80:bd:35:75:62:f1:b9:07:8d:17:7c:f6:
         c0:13:6a:70:26:fe:65:3f:da:b0:74:97:d6:63:bc:4d:fd:ca:
         4c:16:63:a9:33:c0:4f:8d:8c:c1:d2:01:b7:9d:73:fe:6e:72:
         00:65:a4:73:da:79:c2:a6:5e:f5:47:b5:f2:54:23:e9:4d:65:
         6b:db:29:80:a9:a5:3e:97:2c:77:50:d6:dc:f7:a8:74:9e:88:
         64:1c:e6:46:fc:02:fc:48:09:c1:94:bb:fb:71:b6:f8:68:ac:
         c2:fa:e5:36:fb:dc:cc:50:9b:f5:1c:1f:63:c0:0a:d0:15:ae:
         ff:ae:62:81:b1:27:38:86:f7:39:c9:2e:96:b4:8d:46:25:03:
         2e:a5:35:39:75:a4:07:c9:14:d0:5c:c1:4d:09:05:07:99:ba:
         80:1d:60:04:63:6c:69:7c:87:10:77:59:f0:10:11:df:cc:24:
         ab:82:52:f0:60:81:48:27:ac:79:e6:c8:f3:45:2f:e4:39:52:
         c4:bc:1e:9a:b7:9b:39:05:c8:bd:57:bf:6d:0f:8f:5f:71:04:
         8f:bb:4c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:00:49 2025 by rpki-client