Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.mft
File:                     L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.mft (raw, json)
Hash identifier:          IIi0m2wY0J9LXAw1uWf07GMS4GsDOS5CRF83hz1S09o=
Subject key identifier:   9E:32:F9:96:66:42:01:B3:3F:AE:80:C9:8D:C8:E6:88:DE:03:C6:F5
Authority key identifier: 2F:E0:AA:7B:FA:E1:24:74:02:AB:B6:C8:9B:75:BB:23:F0:F0:F1:20
Certificate issuer:       /CN=2fe0aa7bfae1247402abb6c89b75bb23f0f0f120
Certificate serial:       01975045FD78DFB5E180EA38609068DBD6B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.mft
Manifest number:          157B
Signing time:             Sun 08 Jun 2025 16:00:53 +0000
Manifest this update:     Sun 08 Jun 2025 16:00:53 +0000
Manifest next update:     Mon 09 Jun 2025 16:00:53 +0000
Files and hashes:         1: L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.crl (hash: hbfKL4pe1NVoA5VLA6NBor91k0PQsVb5qV9Sd8N6mYQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 16:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:50:45:fd:78:df:b5:e1:80:ea:38:60:90:68:db:d6:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fe0aa7bfae1247402abb6c89b75bb23f0f0f120
        Validity
            Not Before: Jun  8 16:00:53 2025 GMT
            Not After : Jun  9 16:00:53 2025 GMT
        Subject: CN=9e32f996664201b33fae80c98dc8e688de03c6f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d1:da:aa:ba:ae:89:44:14:d4:ca:57:34:c5:
                    7d:aa:b1:13:59:20:e7:b0:2f:d1:8c:9c:41:71:4f:
                    89:05:64:ba:0b:11:a5:09:a0:8d:47:14:e2:25:26:
                    ac:dd:5f:a6:50:ff:ce:9c:cb:cc:bd:27:0a:ef:89:
                    dc:8b:24:2f:05:cc:01:3e:7d:c4:98:ff:69:f8:ea:
                    eb:42:8c:dd:ec:d8:f7:c1:cd:46:bd:5c:a8:6c:f3:
                    ba:13:1f:f6:2a:6b:10:a6:eb:a4:a5:cd:1f:de:bc:
                    7e:77:c5:37:e4:5a:65:5d:87:1c:de:ba:7d:7f:c8:
                    c2:e0:3d:ab:1a:68:72:48:79:48:fa:ed:dd:ee:c5:
                    9e:32:ed:1c:32:90:64:49:92:02:12:31:09:94:f5:
                    70:cd:ac:2a:6a:b2:f6:b7:a0:da:87:9c:ac:66:bc:
                    cf:45:c2:62:0a:fb:23:76:a0:f8:9d:d6:a4:bd:75:
                    ad:2d:59:63:58:0d:7d:1b:bc:3a:57:f5:ad:a7:09:
                    66:21:5f:76:dd:65:75:91:75:c6:cf:5f:07:99:b9:
                    23:03:24:cd:35:bb:7a:2d:28:c9:e5:12:19:1d:a6:
                    cf:42:27:7c:66:03:37:37:aa:cb:d0:bb:ec:1f:9f:
                    d8:cf:58:29:12:1d:42:0c:75:11:2e:fa:30:5e:08:
                    47:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:32:F9:96:66:42:01:B3:3F:AE:80:C9:8D:C8:E6:88:DE:03:C6:F5
            X509v3 Authority Key Identifier:
                keyid:2F:E0:AA:7B:FA:E1:24:74:02:AB:B6:C8:9B:75:BB:23:F0:F0:F1:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:e8:aa:06:f5:0f:29:b6:dd:52:ac:78:02:62:d4:6b:33:55:
         a6:b4:b8:cd:89:58:0f:ef:da:bc:e1:23:f9:74:41:2d:06:15:
         f2:94:1c:d3:a5:8c:da:e1:7c:8a:c3:e9:11:72:3c:99:0a:ee:
         93:33:90:51:74:4e:4b:50:1b:a0:f7:f1:e0:ce:69:34:b2:84:
         c5:bc:94:37:1d:a9:bd:80:ed:9e:cd:d7:48:00:3c:ae:36:84:
         74:25:d4:bc:0f:a4:19:13:38:90:52:ba:06:c6:6b:f7:a9:52:
         a9:b5:a7:9c:b5:bf:a6:b1:87:ad:1e:0b:5c:25:5f:73:cb:b6:
         17:7e:05:dc:b5:60:f0:00:a5:00:11:62:91:56:33:70:36:70:
         46:69:c3:4f:76:9c:df:42:99:23:bb:a4:64:b4:a5:43:0d:51:
         2f:0b:82:14:e8:ce:b5:2f:ca:6f:b2:18:be:a1:b3:dc:ba:36:
         3b:39:16:50:a3:52:a1:b3:29:a9:b4:94:10:f9:2d:75:4e:4c:
         0d:a4:53:cd:1b:51:d5:5f:ab:fd:8d:de:e7:1f:3b:e1:22:7c:
         90:de:fb:79:6d:dc:46:b0:72:ce:17:8b:31:96:7c:96:c2:dd:
         d1:2d:f4:32:b4:fe:c9:68:61:ac:b1:db:f5:b4:87:87:37:1e:
         8e:81:77:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:41:33 2025 by rpki-client