Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.mft
File:                     sxU2q-49e1S4MDubxpqKq76XAOQ.mft (raw, json)
Hash identifier:          xSEhlfgzDJDpsAzBLwASjfHGL+CntofhUXZmzmuK0UM=
Subject key identifier:   C6:6A:BE:7F:23:5A:F9:0C:C6:D7:62:02:D3:99:7C:19:D8:B1:EF:A1
Authority key identifier: B3:15:36:AB:EE:3D:7B:54:B8:30:3B:9B:C6:9A:8A:AB:BE:97:00:E4
Certificate issuer:       /CN=b31536abee3d7b54b8303b9bc69a8aabbe9700e4
Certificate serial:       01975BDCE1A2744EE9A7BE01F86510A79EF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sxU2q-49e1S4MDubxpqKq76XAOQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.mft
Manifest number:          079B
Signing time:             Tue 10 Jun 2025 22:01:31 +0000
Manifest this update:     Tue 10 Jun 2025 22:01:31 +0000
Manifest next update:     Wed 11 Jun 2025 22:01:31 +0000
Files and hashes:         1: sxU2q-49e1S4MDubxpqKq76XAOQ.crl (hash: HC9aJk8eg5PXpR77gNPtFgRCyTiaSO49SaqVNdGsWRA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sxU2q-49e1S4MDubxpqKq76XAOQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 20:45:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5b:dc:e1:a2:74:4e:e9:a7:be:01:f8:65:10:a7:9e:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b31536abee3d7b54b8303b9bc69a8aabbe9700e4
        Validity
            Not Before: Jun 10 22:01:31 2025 GMT
            Not After : Jun 11 22:01:31 2025 GMT
        Subject: CN=c66abe7f235af90cc6d76202d3997c19d8b1efa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0b:cc:b7:0b:5c:46:2e:07:ae:2a:f6:68:b0:
                    e3:67:05:0c:53:36:eb:59:db:68:3b:fc:38:1c:af:
                    06:e0:1e:6e:a4:5c:45:25:eb:b4:31:bc:85:79:78:
                    1c:7f:5b:a1:f5:b8:2d:c5:1a:ba:98:7f:af:6c:c2:
                    e0:7f:04:ef:dc:89:71:68:89:7d:c7:93:fd:47:d7:
                    59:d4:30:02:e2:5b:73:d9:82:e9:bc:c0:fe:5f:09:
                    37:da:35:f1:cb:d8:2e:29:87:db:08:64:01:c2:b8:
                    bd:c8:dd:d9:c3:1d:eb:83:e6:2c:11:dc:f8:0d:b8:
                    d4:ca:95:b1:cb:5a:58:c5:fb:87:af:9b:87:cb:68:
                    ba:0f:bd:74:3f:b5:32:0f:0a:51:da:59:45:80:5c:
                    19:d9:70:ee:b8:8b:65:28:32:a2:65:fc:c5:b2:eb:
                    1f:0d:f9:72:ab:28:bc:03:d5:98:21:84:79:17:cf:
                    92:a1:02:bf:eb:06:c6:4b:b2:7b:3e:76:81:d1:65:
                    9f:e7:61:57:3e:f4:73:09:30:c3:ba:b7:61:27:33:
                    3a:35:18:e6:c1:c5:93:b6:1d:fb:3d:c2:b4:72:fa:
                    5d:38:8f:18:d7:9e:79:87:05:6b:c2:5a:89:a1:b2:
                    8e:55:15:f1:34:bf:ec:11:74:ce:b7:31:03:06:fa:
                    6e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:6A:BE:7F:23:5A:F9:0C:C6:D7:62:02:D3:99:7C:19:D8:B1:EF:A1
            X509v3 Authority Key Identifier:
                keyid:B3:15:36:AB:EE:3D:7B:54:B8:30:3B:9B:C6:9A:8A:AB:BE:97:00:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxU2q-49e1S4MDubxpqKq76XAOQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:3b:70:67:0e:b1:47:a8:90:b1:8f:9d:fb:df:ec:f0:90:58:
         b2:76:15:ac:84:3b:e8:cb:8d:b7:ee:cd:c7:8e:cc:9f:79:61:
         71:24:a4:3d:4c:df:6f:68:cb:65:1b:69:46:f2:85:81:e9:94:
         4a:8c:d9:56:50:34:6a:5a:4a:12:89:e9:d1:d9:cc:9c:b2:89:
         29:a3:97:2a:75:70:4b:b4:fc:10:f5:2e:02:61:cb:e2:3f:e9:
         8f:f3:2e:e0:7d:aa:83:a5:4f:05:a5:7c:94:cd:f1:8d:ad:f9:
         d3:17:71:e6:49:75:ec:bf:f4:08:b0:c0:9b:ce:f9:d1:52:4c:
         22:8c:b1:6d:b5:4e:79:67:d9:0b:79:a3:29:4f:cf:1c:4c:a7:
         52:1a:b3:20:fe:7c:bc:ad:d0:66:95:92:be:fb:46:2e:fc:69:
         9f:c7:b2:47:1c:1a:c9:76:e7:97:0c:dc:9d:ca:ca:f5:b9:ec:
         d1:82:45:4b:17:f4:9e:e5:12:a6:8f:38:69:a0:36:30:89:f7:
         25:73:b6:d7:ba:65:9f:54:69:1f:80:db:65:3a:88:56:1a:7e:
         41:6f:f5:44:fa:2c:a5:6a:b2:c7:ac:f8:9c:0a:3e:4c:17:97:
         05:89:a7:c6:0b:9f:b1:51:63:af:60:9d:16:bd:06:fc:e6:99:
         a0:da:20:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 06:50:28 2025 by rpki-client