Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft
File:                     9WQDvByHTu8JuKE0QVWrw_BXWxU.mft (raw, json)
Hash identifier:          bCWGN73/AaOWa3wIU4o0bjqmFgTePBWpsvHr8+LhoYM=
Subject key identifier:   15:4F:2E:E7:B9:E7:32:F2:FE:EF:73:C8:05:FD:C8:89:9C:A4:71:72
Authority key identifier: F5:64:03:BC:1C:87:4E:EF:09:B8:A1:34:41:55:AB:C3:F0:57:5B:15
Certificate issuer:       /CN=f56403bc1c874eef09b8a1344155abc3f0575b15
Certificate serial:       01975F1438D07D88B618244D36A725312DC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9WQDvByHTu8JuKE0QVWrw_BXWxU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft
Manifest number:          0EFC
Signing time:             Wed 11 Jun 2025 13:00:50 +0000
Manifest this update:     Wed 11 Jun 2025 13:00:50 +0000
Manifest next update:     Thu 12 Jun 2025 13:00:50 +0000
Files and hashes:         1: 9WQDvByHTu8JuKE0QVWrw_BXWxU.crl (hash: g7KOPFADrRuMZ/Bjc2SsaAr3WSE98doX6qdBXZKOnKw=)
                          2: UpxBSWugieKNTh9apeAkjKNDuVI.roa (hash: bk8A6HGGurxjqbD4+xEVgCvr+MLGdlWXb+9IzJcqkAs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9WQDvByHTu8JuKE0QVWrw_BXWxU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 13:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5f:14:38:d0:7d:88:b6:18:24:4d:36:a7:25:31:2d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f56403bc1c874eef09b8a1344155abc3f0575b15
        Validity
            Not Before: Jun 11 13:00:50 2025 GMT
            Not After : Jun 12 13:00:50 2025 GMT
        Subject: CN=154f2ee7b9e732f2feef73c805fdc8899ca47172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a1:a3:e1:02:cf:07:b6:2d:09:f0:24:f2:df:
                    88:68:4c:b5:fe:c4:e9:f9:e2:9f:a0:1b:e5:1a:1d:
                    e4:2d:4f:a3:e0:97:31:06:e5:20:11:ef:07:27:8c:
                    27:00:2d:ff:51:bc:60:f4:85:8f:00:38:41:e4:54:
                    0d:25:41:fd:b4:e8:93:89:6f:66:15:80:9a:da:50:
                    70:b0:a4:15:94:7f:de:e0:bf:75:35:48:63:7d:53:
                    8c:6e:02:fb:4f:da:65:de:3e:4e:65:ba:14:76:9b:
                    19:de:d9:43:6d:9d:68:c3:21:f4:d1:c9:6a:f5:5e:
                    00:cf:5e:0c:c2:e5:02:89:0c:b0:4a:37:a0:f8:1e:
                    75:c3:53:aa:5b:2b:ec:a8:b0:d4:81:54:51:22:04:
                    47:08:5f:ad:36:cf:aa:00:99:12:97:d0:b2:c3:9b:
                    8c:2b:c6:83:c2:fe:ec:58:e2:60:48:7b:f9:21:da:
                    3a:b7:a3:7a:eb:b4:b9:a7:e6:ae:80:3b:af:a6:2c:
                    2c:b4:13:89:51:02:c2:44:23:24:a6:3c:ba:8c:ca:
                    5f:55:e3:61:e6:f1:10:b7:fd:75:a4:ce:77:51:4d:
                    5a:a8:07:ab:d8:a0:89:80:95:3c:1f:b8:ba:50:dd:
                    c6:ac:c1:4e:67:72:eb:33:80:b0:34:46:bf:89:ef:
                    92:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:4F:2E:E7:B9:E7:32:F2:FE:EF:73:C8:05:FD:C8:89:9C:A4:71:72
            X509v3 Authority Key Identifier:
                keyid:F5:64:03:BC:1C:87:4E:EF:09:B8:A1:34:41:55:AB:C3:F0:57:5B:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WQDvByHTu8JuKE0QVWrw_BXWxU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:d0:b6:43:24:b9:71:f0:e0:03:5a:8a:32:99:d3:3d:ff:fb:
         eb:e7:e1:67:69:45:b5:ea:04:63:86:0e:af:10:ec:bb:98:90:
         44:27:0a:74:71:f0:ff:5c:34:2e:7d:e8:c6:55:32:7f:9d:18:
         12:84:4a:8d:03:be:84:1a:9a:9d:93:99:49:ea:b3:ba:13:f4:
         85:ad:4c:fd:7e:dd:70:91:10:6e:99:01:39:77:8e:88:c3:5d:
         1c:15:86:05:13:dd:74:e6:ef:14:23:ed:4e:eb:3f:67:5c:ea:
         6c:41:8d:6b:02:0c:d0:ca:ea:03:54:a8:fb:36:ed:86:ff:1c:
         6b:49:e9:9b:84:35:c0:d6:5b:ca:0e:e5:5e:12:d6:c6:fc:d7:
         ac:7c:7f:17:ba:a9:8e:3b:da:34:3c:ca:ac:5f:8f:69:2a:c1:
         74:3a:e9:c7:ed:3c:84:39:0d:47:72:fd:04:60:80:2e:d6:de:
         11:86:1f:9b:e8:0e:1c:55:27:36:19:1a:16:a9:ae:21:97:dc:
         e5:5b:c3:44:3f:b0:08:2d:a9:89:01:88:1a:ba:b5:af:58:69:
         62:82:6e:3b:b0:76:00:c6:94:7e:95:be:03:ad:eb:33:26:d2:
         fe:45:e8:3b:e8:e0:48:e5:d4:21:1f:f7:52:49:76:52:9c:a6:
         ae:99:9c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 22:19:02 2025 by rpki-client