Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/60d338-4b36-4054-b4bc-6473b092aadd/1/RZzMG7ARYGhoBts1qTNRshs-YNw.mft
File:                     RZzMG7ARYGhoBts1qTNRshs-YNw.mft (raw, json)
Hash identifier:          uVAMBMW4TNENC76PV1gAckOM+EFGpgJAWlOWbGOZzDw=
Subject key identifier:   D4:F4:98:EF:B1:25:63:A1:9C:33:10:F2:C0:69:DD:6C:6B:D8:B0:98
Authority key identifier: 45:9C:CC:1B:B0:11:60:68:68:06:DB:35:A9:33:51:B2:1B:3E:60:DC
Certificate issuer:       /CN=459ccc1bb01160686806db35a93351b21b3e60dc
Certificate serial:       019764DF278D713FC48C1F110A742673184A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RZzMG7ARYGhoBts1qTNRshs-YNw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/60d338-4b36-4054-b4bc-6473b092aadd/1/RZzMG7ARYGhoBts1qTNRshs-YNw.mft
Manifest number:          1300
Signing time:             Thu 12 Jun 2025 16:00:35 +0000
Manifest this update:     Thu 12 Jun 2025 16:00:35 +0000
Manifest next update:     Fri 13 Jun 2025 16:00:35 +0000
Files and hashes:         1: RZzMG7ARYGhoBts1qTNRshs-YNw.crl (hash: HGUX7FsZyCMxU/gGB57tHpFJbZ0hjrDUFeZx/GG50fk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/60d338-4b36-4054-b4bc-6473b092aadd/1/RZzMG7ARYGhoBts1qTNRshs-YNw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/60d338-4b36-4054-b4bc-6473b092aadd/1/RZzMG7ARYGhoBts1qTNRshs-YNw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RZzMG7ARYGhoBts1qTNRshs-YNw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 16:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:64:df:27:8d:71:3f:c4:8c:1f:11:0a:74:26:73:18:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=459ccc1bb01160686806db35a93351b21b3e60dc
        Validity
            Not Before: Jun 12 16:00:35 2025 GMT
            Not After : Jun 13 16:00:35 2025 GMT
        Subject: CN=d4f498efb12563a19c3310f2c069dd6c6bd8b098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:cb:8a:91:7f:a6:18:3e:5c:4d:33:5e:aa:f7:
                    2a:9e:67:c8:50:7b:9e:2b:af:35:11:84:57:ea:e6:
                    a6:ae:76:b0:2e:4f:ba:99:2b:a7:6d:f8:37:44:81:
                    93:cd:11:99:20:b8:19:f3:5b:21:5e:b8:c5:eb:73:
                    38:85:e5:4c:3b:51:03:3c:21:bc:e8:32:50:17:b7:
                    95:1d:40:9d:f2:52:08:d4:2f:50:fa:68:07:92:14:
                    bb:c1:fe:34:9f:50:d2:30:40:61:da:ea:c0:5a:13:
                    12:0b:f1:f5:af:eb:f1:d2:54:19:5a:1d:5a:98:76:
                    a9:de:3e:a1:fd:92:a9:d9:ac:a8:e1:07:09:e0:75:
                    a5:de:f9:7b:2e:86:dd:a4:d4:54:4a:cf:f7:43:d6:
                    31:1a:63:58:9f:9e:88:0e:44:8f:52:3c:44:c1:a5:
                    d2:21:92:3f:a1:51:55:b4:bb:6b:6a:30:4e:3e:2b:
                    38:94:fa:4b:ef:57:aa:3a:3f:16:c3:58:f4:57:93:
                    84:a1:67:a9:62:11:fa:c3:63:d4:c7:84:90:1c:e0:
                    d7:91:13:0b:71:28:1a:b9:f2:10:a0:3e:ce:3c:4a:
                    6b:8c:b9:aa:63:90:af:81:2b:2a:ef:5e:00:b1:30:
                    b4:ad:39:7c:85:77:a8:d3:51:b3:f6:56:12:85:f4:
                    b9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:F4:98:EF:B1:25:63:A1:9C:33:10:F2:C0:69:DD:6C:6B:D8:B0:98
            X509v3 Authority Key Identifier:
                keyid:45:9C:CC:1B:B0:11:60:68:68:06:DB:35:A9:33:51:B2:1B:3E:60:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZzMG7ARYGhoBts1qTNRshs-YNw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/60d338-4b36-4054-b4bc-6473b092aadd/1/RZzMG7ARYGhoBts1qTNRshs-YNw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/60d338-4b36-4054-b4bc-6473b092aadd/1/RZzMG7ARYGhoBts1qTNRshs-YNw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:0a:41:90:1f:71:6f:fd:20:1f:97:cb:7c:85:6e:87:f3:7c:
         88:11:cc:be:c0:97:a5:4e:58:37:85:bc:b0:c3:65:24:11:48:
         51:84:92:3f:65:c2:10:e4:7c:1c:b0:60:78:e5:fc:33:c8:24:
         81:f5:09:49:d6:2f:d7:9b:19:f6:fe:30:b5:00:20:11:4f:f2:
         28:d0:b8:29:15:14:f1:b3:70:ae:c5:f9:80:c0:02:65:49:d4:
         81:4e:e0:17:6f:c7:0b:34:ce:7d:33:93:37:19:7d:08:45:1f:
         8c:10:13:6a:8e:f4:db:67:e7:e2:98:1e:b2:19:b2:58:47:17:
         01:c0:7c:c3:e5:01:a1:71:d0:96:bb:60:f6:39:bb:4d:7f:c9:
         46:81:5a:d8:d2:b6:53:89:da:4b:2d:b1:ab:14:27:f3:e1:ee:
         4a:17:d6:8a:75:c3:c4:0d:f0:94:ca:d1:03:81:2c:95:b4:af:
         76:b8:ac:dd:02:ea:23:bc:65:3f:91:03:f1:65:0e:e2:44:88:
         93:e8:11:d7:6f:5b:43:a4:d3:91:57:dd:5c:bf:90:11:f8:6c:
         05:43:a2:3b:0a:59:41:9c:94:af:6d:6b:7f:99:30:e1:20:b6:
         00:db:b2:8b:e9:69:5d:e2:69:df:82:fa:82:80:3d:91:21:36:
         05:32:fc:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 02:02:05 2025 by rpki-client