Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.mft
File:                     8DpbV31dnm0cX9O-1ADpacC-fDQ.mft (raw, json)
Hash identifier:          s6nO6bP4/pqv/bcDbEchAwsDRchwbRXz1+vX+xy678g=
Subject key identifier:   7F:A7:F5:09:97:29:11:98:14:B4:D1:DC:BE:F1:87:56:13:DD:7E:C0
Authority key identifier: F0:3A:5B:57:7D:5D:9E:6D:1C:5F:D3:BE:D4:00:E9:69:C0:BE:7C:34
Certificate issuer:       /CN=f03a5b577d5d9e6d1c5fd3bed400e969c0be7c34
Certificate serial:       01974779E8E510AD940FBC0A42531368337E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8DpbV31dnm0cX9O-1ADpacC-fDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.mft
Manifest number:          1576
Signing time:             Fri 06 Jun 2025 23:01:01 +0000
Manifest this update:     Fri 06 Jun 2025 23:01:01 +0000
Manifest next update:     Sat 07 Jun 2025 23:01:01 +0000
Files and hashes:         1: 8DpbV31dnm0cX9O-1ADpacC-fDQ.crl (hash: xiF0BfncLiG7XnjwYhV9uiJobxtBajW5C6X1fSKmzEo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8DpbV31dnm0cX9O-1ADpacC-fDQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:79:e8:e5:10:ad:94:0f:bc:0a:42:53:13:68:33:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f03a5b577d5d9e6d1c5fd3bed400e969c0be7c34
        Validity
            Not Before: Jun  6 23:01:01 2025 GMT
            Not After : Jun  7 23:01:01 2025 GMT
        Subject: CN=7fa7f5099729119814b4d1dcbef1875613dd7ec0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d1:b0:c1:48:3b:c1:9c:d1:fd:04:e9:2b:1e:
                    53:30:03:6e:46:f9:02:d4:51:05:1d:42:f2:71:34:
                    e2:d9:f7:ff:1a:89:e6:5a:cf:2d:eb:d7:6e:50:a9:
                    09:c9:ed:17:b6:ed:87:99:ff:32:19:ee:6a:bf:a7:
                    a2:18:31:f2:7e:3a:34:9f:13:5a:f9:8b:8f:ce:de:
                    d4:13:17:f7:ed:7b:d1:14:59:51:ac:51:c3:aa:6e:
                    09:c3:cd:af:33:38:d9:73:97:b0:68:35:de:1d:05:
                    02:d9:e4:19:a3:1f:0e:3c:64:8b:f3:20:4f:3f:1c:
                    7a:7f:bf:23:df:8b:27:36:73:fe:5e:22:91:34:70:
                    a8:bc:b4:56:46:54:6a:30:25:9b:e4:5d:02:75:a8:
                    90:40:f6:d6:c7:3a:1f:f8:e4:11:89:62:96:bc:20:
                    c6:1e:24:d5:9f:d8:a3:a7:0e:36:8d:e0:70:06:cc:
                    aa:ad:85:92:2c:59:cb:24:e9:2b:3d:c1:b1:95:17:
                    9b:37:6f:ff:da:c6:c0:ae:aa:51:e8:33:2a:e5:2e:
                    ec:a5:54:52:e3:42:65:01:42:f6:81:a7:cf:8d:73:
                    af:51:8f:db:b6:90:59:2f:af:82:c4:be:32:28:69:
                    31:d1:d1:e0:4f:44:22:af:61:39:0d:dd:69:39:1f:
                    13:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:A7:F5:09:97:29:11:98:14:B4:D1:DC:BE:F1:87:56:13:DD:7E:C0
            X509v3 Authority Key Identifier:
                keyid:F0:3A:5B:57:7D:5D:9E:6D:1C:5F:D3:BE:D4:00:E9:69:C0:BE:7C:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DpbV31dnm0cX9O-1ADpacC-fDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:fd:f4:54:e4:c4:98:07:5a:8d:58:75:97:c6:e5:d7:9d:82:
         e2:10:81:bd:ad:a3:46:77:5f:4c:9c:3b:ac:ef:a9:f8:f1:65:
         6f:db:12:ae:c0:2d:b7:9e:6e:d4:0f:ca:56:24:c8:a3:6b:8d:
         84:a6:be:ab:c0:85:8c:65:81:72:19:7b:43:94:cc:d7:d2:63:
         b1:4e:c7:29:c6:23:dd:7e:22:c8:28:ce:0b:74:9e:e2:08:45:
         43:e5:69:25:8c:67:ed:cd:e3:55:3a:ef:1e:80:71:b2:1b:eb:
         25:92:a8:5b:5f:b8:8e:c8:db:52:24:db:9f:ba:13:aa:f3:c1:
         09:1c:1d:ab:9f:0e:e1:32:dd:10:42:29:43:23:12:1b:e9:3f:
         a1:08:48:2c:5b:7a:45:f4:a3:24:b5:8c:1f:59:d0:41:a2:9c:
         f8:5a:6c:5e:23:f1:f1:10:29:49:6e:a0:0f:ea:c9:25:dc:3a:
         80:02:8e:89:35:9f:5d:0d:93:0a:f7:f6:d2:56:1c:72:98:f7:
         4f:a2:05:8a:f6:e3:c5:28:da:43:f2:50:aa:51:ca:51:a1:e9:
         54:83:85:c0:13:65:75:ed:fe:05:0c:55:83:aa:19:52:a7:94:
         ff:4f:7e:d4:93:2b:ff:25:d0:3c:b9:ce:39:83:c5:04:94:23:
         59:99:97:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:05:33 2025 by rpki-client