Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/9d1c8f-c634-46aa-aff8-7c2b21ff6ceb/1/ardZKec1zmWma9gtyotlHZhWzSw.mft
File:                     ardZKec1zmWma9gtyotlHZhWzSw.mft (raw, json)
Hash identifier:          KKrJMMvv+9Ttvq1cy0iHkH1DTVDOCuE4INhrcq73Ao4=
Subject key identifier:   6D:10:22:5A:5B:2D:8A:F3:C4:8C:CD:96:9F:F7:51:68:40:4B:22:E2
Authority key identifier: 6A:B7:59:29:E7:35:CE:65:A6:6B:D8:2D:CA:8B:65:1D:98:56:CD:2C
Certificate issuer:       /CN=6ab75929e735ce65a66bd82dca8b651d9856cd2c
Certificate serial:       01984A4142D00FAAC2ADC45CAA88E1D6AE9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ardZKec1zmWma9gtyotlHZhWzSw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/9d1c8f-c634-46aa-aff8-7c2b21ff6ceb/1/ardZKec1zmWma9gtyotlHZhWzSw.mft
Manifest number:          124F
Signing time:             Sun 27 Jul 2025 05:00:47 +0000
Manifest this update:     Sun 27 Jul 2025 05:00:47 +0000
Manifest next update:     Mon 28 Jul 2025 05:00:47 +0000
Files and hashes:         1: ardZKec1zmWma9gtyotlHZhWzSw.crl (hash: 4pjsOpAE1cGcIU3YYlC4ASj5LXmIO1FTTWiPDWDqfZQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/9d1c8f-c634-46aa-aff8-7c2b21ff6ceb/1/ardZKec1zmWma9gtyotlHZhWzSw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/9d1c8f-c634-46aa-aff8-7c2b21ff6ceb/1/ardZKec1zmWma9gtyotlHZhWzSw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ardZKec1zmWma9gtyotlHZhWzSw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:41:42:d0:0f:aa:c2:ad:c4:5c:aa:88:e1:d6:ae:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ab75929e735ce65a66bd82dca8b651d9856cd2c
        Validity
            Not Before: Jul 27 05:00:47 2025 GMT
            Not After : Jul 28 05:00:47 2025 GMT
        Subject: CN=6d10225a5b2d8af3c48ccd969ff75168404b22e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:6b:44:d5:01:37:fb:67:c2:50:63:e3:c5:35:
                    56:ec:1b:fe:ff:8d:2f:18:f2:3b:3f:6e:29:87:f3:
                    55:2a:dc:bd:b1:09:5c:00:8f:f9:bc:b8:da:a8:0d:
                    0d:73:54:dd:2f:80:9d:1b:c5:62:c8:d6:2d:05:a0:
                    48:58:93:cb:8c:36:9e:20:b6:28:26:e4:b6:64:a6:
                    e0:2d:4d:5c:0b:e1:b1:0f:cc:45:19:d4:ec:02:83:
                    96:04:41:2b:b7:b2:36:0e:ab:a7:38:fd:e9:30:61:
                    62:98:42:27:2e:0b:1c:df:16:e4:f4:4d:be:47:fa:
                    5e:93:89:56:58:15:22:95:a3:5a:69:2c:5b:34:4d:
                    32:4c:88:c1:1c:3e:f5:45:ec:8e:f3:ed:50:c9:21:
                    3a:3c:1e:6e:38:fc:da:46:b4:2e:03:e4:5b:c8:e7:
                    05:fb:57:20:11:b1:a8:69:31:b7:e0:85:a9:60:49:
                    9f:51:68:74:bc:07:57:35:0a:bc:04:65:6f:44:2d:
                    93:4f:52:ce:5a:9f:8d:af:6c:a0:87:6d:d8:56:75:
                    a9:e0:34:a7:eb:4e:51:d5:2d:4b:03:e9:78:0e:1b:
                    4e:6c:31:40:64:67:03:99:65:98:66:11:03:b1:89:
                    24:54:a6:9a:94:1f:ec:11:54:87:21:b9:55:b8:53:
                    d1:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:10:22:5A:5B:2D:8A:F3:C4:8C:CD:96:9F:F7:51:68:40:4B:22:E2
            X509v3 Authority Key Identifier:
                keyid:6A:B7:59:29:E7:35:CE:65:A6:6B:D8:2D:CA:8B:65:1D:98:56:CD:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ardZKec1zmWma9gtyotlHZhWzSw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9d1c8f-c634-46aa-aff8-7c2b21ff6ceb/1/ardZKec1zmWma9gtyotlHZhWzSw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9d1c8f-c634-46aa-aff8-7c2b21ff6ceb/1/ardZKec1zmWma9gtyotlHZhWzSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:11:91:3d:a4:46:c5:52:53:8a:4b:6e:c4:4d:22:e7:71:ca:
         f5:ad:c0:b3:94:06:dd:ba:4b:6e:29:4d:cd:c5:ca:85:9e:b6:
         90:fe:63:3f:f6:8a:c9:bb:6f:3a:81:1c:0b:33:73:e1:78:0d:
         75:33:4e:0e:03:f8:b2:b1:20:7a:73:fd:c7:a8:78:17:f4:cf:
         68:cd:ba:e1:f4:38:f5:06:e4:63:b2:b8:0f:45:42:1c:4d:5b:
         57:75:e9:77:cd:44:7f:fc:b9:f8:5c:7f:20:4a:e3:64:35:25:
         49:ce:3b:bd:61:5b:eb:9b:a1:a0:1e:64:d2:80:5d:db:a5:73:
         64:e9:08:b6:58:eb:b2:24:86:4b:4b:c6:28:40:6f:09:a3:bd:
         4d:82:c6:7d:7c:7a:bc:2e:c9:b2:d0:4c:0b:03:2d:40:0b:b4:
         ba:44:bb:b2:d0:86:67:32:43:dc:37:9c:7d:29:1d:46:b2:70:
         5e:8b:c6:b3:48:a1:b5:55:12:80:2e:ba:6f:db:96:de:16:dd:
         0d:5b:0a:bc:54:28:68:fe:3e:af:79:61:db:92:8f:50:4d:ef:
         86:c9:1c:d9:18:7f:8d:b9:a7:aa:f6:91:7c:54:6e:13:0f:41:
         dd:5d:c2:df:6e:2d:54:53:3b:b9:9a:f0:a0:eb:05:dd:f4:a2:
         be:02:7c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 15:19:27 2025 by rpki-client