Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/30ba36-834e-4c04-a702-72ec3086f0e8/1/SPEmUDG2es3hHypnONAjRpnRgBc.mft
File:                     SPEmUDG2es3hHypnONAjRpnRgBc.mft (raw, json)
Hash identifier:          y3oAu0uMknqlaxA+1+xOxMBx1yHI86oImp4rlm8DhYk=
Subject key identifier:   EB:09:23:95:D6:4C:93:72:8C:83:BD:92:A2:9A:89:E0:2D:C4:E6:E3
Authority key identifier: 48:F1:26:50:31:B6:7A:CD:E1:1F:2A:67:38:D0:23:46:99:D1:80:17
Certificate issuer:       /CN=48f1265031b67acde11f2a6738d0234699d18017
Certificate serial:       019826A384E19FA08741EDF258B7BE734ACC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SPEmUDG2es3hHypnONAjRpnRgBc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/30ba36-834e-4c04-a702-72ec3086f0e8/1/SPEmUDG2es3hHypnONAjRpnRgBc.mft
Manifest number:          06
Signing time:             Sun 20 Jul 2025 07:01:47 +0000
Manifest this update:     Sun 20 Jul 2025 07:01:47 +0000
Manifest next update:     Mon 21 Jul 2025 07:01:47 +0000
Files and hashes:         1: SPEmUDG2es3hHypnONAjRpnRgBc.crl (hash: /knIIr9qA42ZuNPMy5yBxslRYoh4BEy0QwkeSo1hhSI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/30ba36-834e-4c04-a702-72ec3086f0e8/1/SPEmUDG2es3hHypnONAjRpnRgBc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/30ba36-834e-4c04-a702-72ec3086f0e8/1/SPEmUDG2es3hHypnONAjRpnRgBc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SPEmUDG2es3hHypnONAjRpnRgBc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Jul 2025 07:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:26:a3:84:e1:9f:a0:87:41:ed:f2:58:b7:be:73:4a:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48f1265031b67acde11f2a6738d0234699d18017
        Validity
            Not Before: Jul 20 07:01:47 2025 GMT
            Not After : Jul 21 07:01:47 2025 GMT
        Subject: CN=eb092395d64c93728c83bd92a29a89e02dc4e6e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:96:0b:24:92:ad:7b:7b:36:da:e1:34:c7:b1:
                    a1:39:aa:23:b3:ef:24:e9:77:5b:04:1b:b8:11:5b:
                    72:36:84:7a:d7:91:9f:b0:c7:4f:18:9f:a4:8d:35:
                    f0:71:76:68:25:19:2a:70:b6:2d:4d:08:86:c9:bf:
                    b6:3d:ab:f4:99:c6:21:50:e5:d3:5f:3a:61:2f:7a:
                    df:09:56:c2:66:9f:de:3b:1e:7c:18:87:16:b3:73:
                    c2:43:11:6e:1c:ab:ff:d9:5f:a2:94:af:61:44:d8:
                    82:7c:c0:b5:29:82:e2:4e:32:c7:fe:f1:50:37:47:
                    49:95:7a:b3:18:79:3d:12:a0:fd:5d:6e:8b:91:ff:
                    53:66:0e:21:a9:55:04:33:a5:20:67:3f:f6:62:96:
                    dd:26:31:6e:02:9c:94:44:a7:f5:79:e2:17:2e:d2:
                    23:1f:2b:07:16:60:ca:2c:ff:eb:bf:75:09:36:f9:
                    2f:d4:f8:f5:ea:e5:85:b6:e4:4f:cf:19:af:9f:32:
                    da:1d:06:aa:0a:a5:1f:ca:3d:e2:f3:88:0a:be:61:
                    e0:b9:d4:52:98:16:72:e6:1a:5b:f6:05:b0:d9:b1:
                    84:8c:19:d4:98:ec:f4:3c:a7:e0:cb:59:eb:cf:b5:
                    dd:c2:5f:4f:fb:84:48:01:97:3a:54:98:ae:03:28:
                    61:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:09:23:95:D6:4C:93:72:8C:83:BD:92:A2:9A:89:E0:2D:C4:E6:E3
            X509v3 Authority Key Identifier:
                keyid:48:F1:26:50:31:B6:7A:CD:E1:1F:2A:67:38:D0:23:46:99:D1:80:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SPEmUDG2es3hHypnONAjRpnRgBc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/30ba36-834e-4c04-a702-72ec3086f0e8/1/SPEmUDG2es3hHypnONAjRpnRgBc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/30ba36-834e-4c04-a702-72ec3086f0e8/1/SPEmUDG2es3hHypnONAjRpnRgBc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:e5:9b:7e:aa:7d:96:1c:8b:a9:4b:b8:c9:1f:3e:45:a3:7d:
         76:5c:83:3a:0a:6c:ef:5a:6c:e3:fe:f5:91:f1:e5:8d:9b:ff:
         34:5e:cf:0c:a4:77:80:c0:24:c3:20:d6:d1:00:fe:55:32:75:
         22:4d:39:95:eb:24:1c:e4:94:f5:7d:92:41:2b:62:14:b1:e9:
         30:65:ca:e7:36:24:b4:8a:82:a2:ae:c2:4d:84:f8:55:d5:d9:
         48:39:59:cc:99:84:3c:31:5f:68:41:ee:f4:c4:a5:d5:87:69:
         06:12:11:63:ba:07:dc:8d:e6:47:97:e7:59:c0:62:ca:7b:d1:
         43:5b:84:33:f2:16:2a:f6:04:83:00:c9:39:a2:cf:05:dc:69:
         e2:0a:56:5e:b7:c5:64:94:56:94:ee:df:ce:d5:d9:49:63:26:
         43:bf:a8:cb:18:92:1d:25:73:4c:78:6f:ab:a5:3c:53:71:9a:
         98:b3:f1:e3:8b:c8:f0:5b:6c:89:76:3c:b8:2c:e2:54:be:c8:
         a3:9b:28:c8:fe:d9:f9:96:61:8a:db:31:97:f3:12:40:a1:70:
         88:82:e4:cf:5a:cb:9d:c4:ce:42:d6:4b:3e:5c:54:af:ea:63:
         58:c2:73:80:1f:b2:80:4d:a0:bb:31:92:97:b6:e9:fd:e9:8f:
         a8:0f:ef:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:20:24 2025 by rpki-client