Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.mft
File:                     X6Yl3DmMtwD3L6jqb0MTvzM1pTs.mft (raw, json)
Hash identifier:          Gy5ftMId//nMvcI7hMlQdfp4I33hLa/yAz9v2Yc4SqQ=
Subject key identifier:   C1:ED:81:E3:11:F6:8C:07:B4:F0:E2:94:58:BD:1B:68:5B:FE:14:19
Authority key identifier: 5F:A6:25:DC:39:8C:B7:00:F7:2F:A8:EA:6F:43:13:BF:33:35:A5:3B
Certificate issuer:       /CN=5fa625dc398cb700f72fa8ea6f4313bf3335a53b
Certificate serial:       0197488CF7CDF56C45A1BFA4A99D73B14F0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.mft
Manifest number:          1055
Signing time:             Sat 07 Jun 2025 04:01:27 +0000
Manifest this update:     Sat 07 Jun 2025 04:01:27 +0000
Manifest next update:     Sun 08 Jun 2025 04:01:27 +0000
Files and hashes:         1: X6Yl3DmMtwD3L6jqb0MTvzM1pTs.crl (hash: s4ei5zA3JZMxs3L2jmWE2ZvFpPdFd7gNsKfYYamc+5o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:8c:f7:cd:f5:6c:45:a1:bf:a4:a9:9d:73:b1:4f:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fa625dc398cb700f72fa8ea6f4313bf3335a53b
        Validity
            Not Before: Jun  7 04:01:27 2025 GMT
            Not After : Jun  8 04:01:27 2025 GMT
        Subject: CN=c1ed81e311f68c07b4f0e29458bd1b685bfe1419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b5:d5:3e:74:b5:42:24:2a:95:d2:7f:2a:8d:
                    62:53:8c:d0:75:c2:43:ea:d6:3e:3a:bc:e0:07:e4:
                    36:6d:38:6c:94:bf:01:c9:ae:70:27:c8:cd:ac:0b:
                    48:10:f9:b0:1e:80:c9:ca:a7:85:b0:0f:08:94:de:
                    b2:f2:9e:8e:f1:34:bd:fb:c2:84:4a:9a:ed:b7:9c:
                    09:72:67:81:a4:2a:84:75:98:65:d6:97:22:c1:8a:
                    ea:a0:c6:a8:f2:97:56:70:b7:fc:7e:57:8c:a9:47:
                    c9:95:c6:64:48:5b:36:37:71:50:4f:ff:7e:f3:45:
                    04:e1:53:d4:e4:08:9d:80:53:11:8f:b2:ec:ab:61:
                    11:f7:34:f8:70:fd:f0:5d:df:80:dd:fa:c1:91:b3:
                    11:0a:be:eb:b1:6e:b2:79:20:86:18:ad:ec:e3:36:
                    64:38:6c:ef:91:ed:17:52:87:fe:9e:38:7a:ec:ef:
                    81:f5:aa:5b:4d:a7:33:b4:04:b9:5a:4b:2f:d6:e3:
                    8f:36:c8:1b:93:10:f2:87:7d:f9:0a:71:51:0d:7d:
                    df:1b:a8:82:2f:98:f5:8a:97:83:ed:f8:69:1f:bc:
                    ca:8d:da:1e:c8:ff:46:c5:db:ec:2d:bc:73:77:94:
                    bd:65:93:19:b7:d8:47:66:51:28:d6:fb:46:be:cb:
                    87:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:ED:81:E3:11:F6:8C:07:B4:F0:E2:94:58:BD:1B:68:5B:FE:14:19
            X509v3 Authority Key Identifier:
                keyid:5F:A6:25:DC:39:8C:B7:00:F7:2F:A8:EA:6F:43:13:BF:33:35:A5:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:4a:30:89:95:47:86:2b:4f:e4:38:23:20:33:8b:15:64:5d:
         a6:d8:b9:47:4f:3f:d7:c8:8b:d3:00:fa:2b:c4:54:d0:06:0c:
         d1:d7:0d:a8:d6:0f:39:c4:53:05:60:2b:33:11:65:95:90:6d:
         d3:f5:c4:85:c5:d3:79:5e:ac:ee:96:21:35:60:2b:5f:a9:a4:
         71:59:79:41:79:83:a5:c2:b7:7f:6b:ee:7b:a2:65:e4:d5:d0:
         b7:9d:b6:70:90:da:ce:04:b0:02:b2:b4:53:07:f4:fc:cd:d4:
         d8:27:4c:1f:29:0f:59:bc:01:c8:2c:0f:57:6d:9f:c1:fc:f6:
         fd:ef:bd:c5:39:b7:2d:49:a0:da:b9:7f:42:a9:c9:de:e3:bc:
         6d:98:1c:1e:d8:da:c4:3b:7c:9e:a6:dd:24:b4:a0:3a:a4:86:
         20:b5:8f:2b:08:00:05:9f:e3:48:7a:b6:46:9b:ec:79:0d:f5:
         b3:de:8a:1d:73:ac:39:48:f1:37:e8:1a:ba:a5:da:3a:4b:0d:
         6f:c8:b5:59:9a:46:93:32:e6:13:21:c2:b7:97:a0:09:71:9b:
         fe:45:26:78:09:4f:59:39:5e:ea:6a:ac:43:68:ee:0b:5b:7a:
         69:b9:f5:08:fc:e5:f3:e7:d2:24:ac:b2:78:47:19:c4:fa:85:
         94:11:f1:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:06:34 2025 by rpki-client