Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/754095-5582-428a-9b11-a8be4fb00121/1/SLQt9x-KKZb70xXQqmF63zQ9WwY.mft
File:                     SLQt9x-KKZb70xXQqmF63zQ9WwY.mft (raw, json)
Hash identifier:          psrHwc18qouG3Fa6VZq/irn3C2dseZSgluvzr4VghTQ=
Subject key identifier:   BC:40:61:BA:DF:22:67:A9:4C:70:4C:C1:44:90:0F:ED:9D:C8:C6:31
Authority key identifier: 48:B4:2D:F7:1F:8A:29:96:FB:D3:15:D0:AA:61:7A:DF:34:3D:5B:06
Certificate issuer:       /CN=48b42df71f8a2996fbd315d0aa617adf343d5b06
Certificate serial:       019754227E494933ECBA8B38C3A3B0484FE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SLQt9x-KKZb70xXQqmF63zQ9WwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/754095-5582-428a-9b11-a8be4fb00121/1/SLQt9x-KKZb70xXQqmF63zQ9WwY.mft
Manifest number:          02F3
Signing time:             Mon 09 Jun 2025 10:00:36 +0000
Manifest this update:     Mon 09 Jun 2025 10:00:36 +0000
Manifest next update:     Tue 10 Jun 2025 10:00:36 +0000
Files and hashes:         1: SLQt9x-KKZb70xXQqmF63zQ9WwY.crl (hash: ePR8I01A0d4m8gJjtEvSUe8Z5d2lxutC56RAOwEBfss=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/754095-5582-428a-9b11-a8be4fb00121/1/SLQt9x-KKZb70xXQqmF63zQ9WwY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/754095-5582-428a-9b11-a8be4fb00121/1/SLQt9x-KKZb70xXQqmF63zQ9WwY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SLQt9x-KKZb70xXQqmF63zQ9WwY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 10:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:54:22:7e:49:49:33:ec:ba:8b:38:c3:a3:b0:48:4f:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48b42df71f8a2996fbd315d0aa617adf343d5b06
        Validity
            Not Before: Jun  9 10:00:36 2025 GMT
            Not After : Jun 10 10:00:36 2025 GMT
        Subject: CN=bc4061badf2267a94c704cc144900fed9dc8c631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d2:c8:bf:28:ea:87:d0:96:42:03:49:eb:9b:
                    2b:da:87:a9:17:02:8e:23:bb:90:ea:ce:8a:b0:c1:
                    c5:d1:22:1e:13:3c:84:ce:6b:fb:b0:4b:5e:92:a3:
                    98:fb:6d:12:95:6b:ac:1c:11:b8:2a:22:63:9f:4c:
                    a2:e3:0c:73:09:a7:f9:75:c4:52:d8:76:98:63:0e:
                    8a:39:89:bb:06:c2:ed:86:46:6d:3f:6c:85:c6:f5:
                    cb:93:8d:c1:c1:97:70:68:d6:44:41:57:ac:ac:e5:
                    98:ec:73:c2:70:d3:88:fd:33:11:e1:07:63:a9:5c:
                    cb:5b:95:8e:6d:cf:1a:30:d7:d7:19:7c:e2:24:45:
                    3c:97:06:10:4b:59:35:07:ea:41:75:c1:32:98:34:
                    9e:cd:a1:0d:b9:df:7d:ba:5d:f7:00:4e:4c:39:7d:
                    a8:62:35:3f:5c:da:90:35:7b:b3:07:04:c1:80:f3:
                    d2:ce:00:cd:b1:7e:92:70:19:d4:bc:18:5f:5b:da:
                    3e:c7:97:74:49:58:8c:e1:2a:4a:54:83:25:96:fc:
                    5f:d1:57:df:02:2c:b3:91:9a:5a:3b:31:0e:48:0f:
                    98:7d:db:49:c3:35:f9:f6:bd:1c:39:18:4e:58:ab:
                    d3:ff:de:40:43:0f:6d:ff:50:31:07:5d:d3:cd:53:
                    1e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:40:61:BA:DF:22:67:A9:4C:70:4C:C1:44:90:0F:ED:9D:C8:C6:31
            X509v3 Authority Key Identifier:
                keyid:48:B4:2D:F7:1F:8A:29:96:FB:D3:15:D0:AA:61:7A:DF:34:3D:5B:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SLQt9x-KKZb70xXQqmF63zQ9WwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/754095-5582-428a-9b11-a8be4fb00121/1/SLQt9x-KKZb70xXQqmF63zQ9WwY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/754095-5582-428a-9b11-a8be4fb00121/1/SLQt9x-KKZb70xXQqmF63zQ9WwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:55:cd:48:ce:91:b5:8c:18:54:25:b9:fa:de:0b:1c:19:b9:
         6a:97:ba:08:da:22:a4:9a:30:d8:87:6c:bb:a7:e3:5f:ef:c9:
         3d:ad:a1:86:b5:d2:2d:e4:80:e3:b1:48:e8:09:3c:ad:04:7e:
         08:5a:82:8a:86:54:a0:07:61:82:e8:0f:05:46:2d:cb:11:d7:
         01:13:df:fc:ee:7c:30:f3:1a:df:3f:69:a3:ca:e5:a2:44:44:
         2d:f4:d6:58:d5:7a:37:02:64:0c:c3:b1:3a:2d:19:2d:29:66:
         8a:4f:79:9c:2f:5d:57:2b:1c:f0:1f:46:be:24:72:5f:01:fe:
         28:63:49:e4:f7:5c:8e:17:fa:c2:b0:fa:c1:18:5c:2b:af:1d:
         b3:a9:72:de:40:dd:58:0a:0f:31:45:9a:d5:93:2f:77:af:41:
         c9:c3:a0:5f:38:f5:3e:c2:24:49:ef:3a:37:b4:cc:36:33:36:
         2e:32:49:7f:9d:e3:1c:c4:c5:ae:78:13:e1:97:67:2c:0c:79:
         5f:3a:83:59:41:33:8a:dc:28:06:26:ed:e3:ed:27:fc:b9:a4:
         5b:8a:ed:7f:03:c8:39:bc:1e:e7:4d:f4:76:07:8f:fd:f8:55:
         4c:fb:35:67:2f:00:96:4d:40:cb:38:56:88:6c:81:b4:d0:94:
         91:99:7a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 19:28:45 2025 by rpki-client