Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/7ff4a3-d191-4c6b-835a-b8050622aa96/1/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.mft
File:                     RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.mft (raw, json)
Hash identifier:          e1Gv8IoWA26u6hLkc51KMVnqsJ/hc2qgkDxWUpIMIf8=
Subject key identifier:   F4:28:35:3C:4A:A3:6F:E4:62:FF:C9:7C:36:2B:FC:9B:19:E6:10:8B
Authority key identifier: 46:54:F3:E6:92:7E:C4:C7:C9:7D:0F:23:6A:8C:24:53:4A:7F:CD:D4
Certificate issuer:       /CN=4654f3e6927ec4c7c97d0f236a8c24534a7fcdd4
Certificate serial:       01976094759ECABEA004C6031799D7725785
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/7ff4a3-d191-4c6b-835a-b8050622aa96/1/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.mft
Manifest number:          06CF
Signing time:             Wed 11 Jun 2025 20:00:31 +0000
Manifest this update:     Wed 11 Jun 2025 20:00:31 +0000
Manifest next update:     Thu 12 Jun 2025 20:00:31 +0000
Files and hashes:         1: RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.crl (hash: RxPNWQ6XMz3z+uPvDOc1ftLMd5wpFoRV1+q99nxh0aY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/7ff4a3-d191-4c6b-835a-b8050622aa96/1/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/7ff4a3-d191-4c6b-835a-b8050622aa96/1/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 20:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:60:94:75:9e:ca:be:a0:04:c6:03:17:99:d7:72:57:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4654f3e6927ec4c7c97d0f236a8c24534a7fcdd4
        Validity
            Not Before: Jun 11 20:00:31 2025 GMT
            Not After : Jun 12 20:00:31 2025 GMT
        Subject: CN=f428353c4aa36fe462ffc97c362bfc9b19e6108b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d8:91:f4:90:0e:ce:11:2c:94:5f:cd:7b:e8:
                    73:54:c7:de:35:d0:e6:dc:98:f4:8e:02:60:f0:13:
                    8e:74:82:39:32:0a:99:81:b2:15:13:13:af:a1:af:
                    01:69:b0:bd:af:35:64:c0:9c:16:c5:17:4a:4c:20:
                    e9:dd:94:2f:d0:d8:17:d1:19:91:de:69:b0:14:d6:
                    50:9c:81:09:36:e2:c0:2e:6f:fa:d6:8d:0a:fc:c3:
                    64:3f:48:3d:b2:f6:29:17:5f:05:6f:04:67:9c:18:
                    2c:d5:53:85:11:56:d4:95:38:32:05:83:9e:60:54:
                    04:0a:10:78:ad:ee:32:04:0d:e0:41:39:93:c9:4c:
                    17:af:5d:3e:1c:7f:3b:22:4c:7b:d7:7e:26:79:b9:
                    6b:54:35:3d:f6:50:9b:0c:32:fb:6c:91:87:2f:3a:
                    2a:c2:8e:ab:c0:50:10:a1:53:66:75:7a:0c:e8:d1:
                    3f:60:14:a7:de:65:24:ce:1c:8f:36:2d:e6:dd:78:
                    c0:83:d9:2c:e7:1e:5b:f3:41:11:4c:89:c4:37:9a:
                    a7:0b:c2:fd:9b:25:17:fe:5c:e1:f9:9e:43:63:6a:
                    32:09:6a:b7:91:b5:83:e4:f9:27:ba:fa:ef:df:f8:
                    a6:20:32:55:e1:03:67:a2:35:e5:48:0c:fe:b0:44:
                    23:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:28:35:3C:4A:A3:6F:E4:62:FF:C9:7C:36:2B:FC:9B:19:E6:10:8B
            X509v3 Authority Key Identifier:
                keyid:46:54:F3:E6:92:7E:C4:C7:C9:7D:0F:23:6A:8C:24:53:4A:7F:CD:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7ff4a3-d191-4c6b-835a-b8050622aa96/1/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7ff4a3-d191-4c6b-835a-b8050622aa96/1/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:4d:e7:2d:b9:a3:d8:d1:94:52:22:81:28:b2:05:31:19:f3:
         63:2d:7b:87:c6:3e:08:73:34:24:e0:22:13:e6:e4:e0:45:63:
         17:90:cf:a8:1d:ce:92:2a:40:1e:7a:4f:bd:d7:03:03:aa:b6:
         a1:e1:a9:d1:d4:31:d5:b3:ab:ee:8d:af:62:d4:b0:4a:9b:e1:
         6e:55:0f:15:68:c4:f0:6f:9c:7f:78:55:e5:17:4d:74:a2:4c:
         fe:c5:90:b7:6e:19:3d:19:f6:fc:ef:63:b7:a0:df:0b:4b:9f:
         b2:ef:e2:e4:bd:47:82:23:98:5d:c3:e6:95:f3:e5:83:a0:b4:
         76:52:0d:bd:fa:0d:4a:09:c8:01:e5:db:34:9f:9d:92:30:51:
         db:0a:c8:13:d5:f0:0c:17:4f:b9:83:0a:74:4f:bf:70:5b:a4:
         ba:cf:84:e2:fa:11:ce:1c:e4:c0:f3:2e:0b:3d:6f:9f:88:21:
         60:82:f0:02:3e:2e:90:10:8d:b5:f3:5a:bc:14:9b:50:dd:88:
         7d:55:cd:c9:43:35:a8:aa:ca:12:1b:fd:7f:ac:06:ef:c1:5e:
         b8:4a:8e:b0:52:36:87:79:4b:84:d3:15:8d:1d:c1:fd:2d:bc:
         71:ed:83:67:58:10:2c:6f:78:dd:64:e8:3a:7b:79:f8:66:17:
         93:46:ad:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 02:57:22 2025 by rpki-client