Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/ed7371-dde3-4c15-8be0-58a11bb893cd/1/_v9e0ddTW8-gPh8oisLHdWobEWA.mft
File:                     _v9e0ddTW8-gPh8oisLHdWobEWA.mft (raw, json)
Hash identifier:          2HsR59cEBS/4EudJfcams+CjYA+eeU4JT8Avi4yNfsk=
Subject key identifier:   CB:B8:67:88:C9:1B:70:CF:10:1A:A7:DA:60:8C:7E:0D:16:EA:64:97
Authority key identifier: FE:FF:5E:D1:D7:53:5B:CF:A0:3E:1F:28:8A:C2:C7:75:6A:1B:11:60
Certificate issuer:       /CN=feff5ed1d7535bcfa03e1f288ac2c7756a1b1160
Certificate serial:       01976EBE1193FED72D76496DB440CD79A4C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_v9e0ddTW8-gPh8oisLHdWobEWA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/ed7371-dde3-4c15-8be0-58a11bb893cd/1/_v9e0ddTW8-gPh8oisLHdWobEWA.mft
Manifest number:          44
Signing time:             Sat 14 Jun 2025 14:00:39 +0000
Manifest this update:     Sat 14 Jun 2025 14:00:39 +0000
Manifest next update:     Sun 15 Jun 2025 14:00:39 +0000
Files and hashes:         1: _v9e0ddTW8-gPh8oisLHdWobEWA.crl (hash: TRa2S18vijij4bjP5692nXcquBMFQJJqHvBIkPK/370=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/ed7371-dde3-4c15-8be0-58a11bb893cd/1/_v9e0ddTW8-gPh8oisLHdWobEWA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/ed7371-dde3-4c15-8be0-58a11bb893cd/1/_v9e0ddTW8-gPh8oisLHdWobEWA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_v9e0ddTW8-gPh8oisLHdWobEWA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:be:11:93:fe:d7:2d:76:49:6d:b4:40:cd:79:a4:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=feff5ed1d7535bcfa03e1f288ac2c7756a1b1160
        Validity
            Not Before: Jun 14 14:00:39 2025 GMT
            Not After : Jun 15 14:00:39 2025 GMT
        Subject: CN=cbb86788c91b70cf101aa7da608c7e0d16ea6497
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b0:b1:a4:4e:bb:12:25:cc:53:94:75:06:df:
                    67:9c:4e:cb:6b:df:62:7e:2c:5e:b8:d4:44:bf:a4:
                    9f:65:c2:bb:11:c0:a6:ae:f2:60:b5:5f:4c:1f:f3:
                    a9:94:a0:e3:8c:68:a2:30:81:29:b4:5c:b3:4e:20:
                    80:1a:42:77:4e:bf:5d:64:f0:00:14:90:40:99:ac:
                    52:40:a7:fe:7a:fd:44:52:7a:e9:c2:99:d0:e5:f2:
                    bf:d7:15:34:9b:18:19:4b:b8:65:7e:55:d6:81:8d:
                    21:04:cf:c8:f9:c3:90:2d:a2:00:0c:a3:b4:c4:bf:
                    ca:c5:d5:d2:62:65:6a:9c:50:69:13:75:5e:bc:f9:
                    c9:33:a4:18:3c:d7:09:22:5b:1f:6d:b2:05:ca:e7:
                    50:f2:a1:79:23:7a:e7:ea:a4:12:b5:ce:22:0a:27:
                    78:73:53:07:6c:f3:2b:59:a8:ab:07:32:80:9e:b6:
                    eb:73:49:d4:87:a0:e2:08:ce:c8:8f:2a:9f:90:7f:
                    5f:43:2d:7a:39:96:00:5c:c5:91:0b:e6:a3:c0:40:
                    48:19:89:6a:a0:62:ae:b5:32:e2:b6:f3:3c:3b:73:
                    81:48:bd:9f:7c:2c:d7:9a:2d:cf:70:2e:e1:23:3b:
                    6e:aa:86:c1:de:8b:35:1d:ea:53:dd:83:00:12:f2:
                    8a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:B8:67:88:C9:1B:70:CF:10:1A:A7:DA:60:8C:7E:0D:16:EA:64:97
            X509v3 Authority Key Identifier:
                keyid:FE:FF:5E:D1:D7:53:5B:CF:A0:3E:1F:28:8A:C2:C7:75:6A:1B:11:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_v9e0ddTW8-gPh8oisLHdWobEWA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ed7371-dde3-4c15-8be0-58a11bb893cd/1/_v9e0ddTW8-gPh8oisLHdWobEWA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ed7371-dde3-4c15-8be0-58a11bb893cd/1/_v9e0ddTW8-gPh8oisLHdWobEWA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:c6:d2:dd:75:3a:1d:cf:52:7d:71:f9:ca:cc:85:25:6a:24:
         70:10:90:0b:31:fc:bd:a6:3b:a5:fa:27:f9:ba:df:b6:e0:1a:
         01:e6:35:17:ac:1e:8f:0c:9b:5c:fc:79:df:b7:31:2c:ea:14:
         17:e7:ae:20:14:64:2c:2e:3d:ca:3f:b6:75:55:4c:44:97:f7:
         98:7e:d7:89:db:2a:ec:37:21:af:d5:dd:71:03:77:b0:cf:b6:
         ad:14:31:56:69:b6:a4:94:64:8a:b6:8d:2d:d9:17:be:f2:3a:
         83:c5:b2:22:69:01:15:91:4d:11:98:57:7a:28:a1:db:55:ea:
         92:18:76:db:3d:b1:db:28:ce:2d:3a:c9:e8:35:39:5b:24:2c:
         f1:11:9d:9f:9c:94:08:5d:55:26:97:eb:7b:03:0b:02:99:94:
         8a:02:fa:0c:b7:c0:9b:e4:fd:e4:85:f8:94:71:ef:c5:f2:4d:
         2a:94:c3:4f:ef:5d:2a:3a:12:d8:6e:ff:a3:dc:20:e8:35:eb:
         7c:92:4c:8a:3d:82:c2:32:9a:a7:ad:53:30:33:74:d2:c5:53:
         aa:f9:6e:06:2d:35:0e:d5:18:94:b2:55:ff:e9:ef:e6:3a:85:
         7a:8e:62:a3:c9:3f:f0:b3:b6:da:a9:ad:7d:2f:f5:74:2c:53:
         e7:4e:26:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:12:47 2025 by rpki-client