Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.mft
File:                     xGtE1wczJKsoQWNn3gQPDkYzSNE.mft (raw, json)
Hash identifier:          uh3WBsHjHsuuvcU/uYtfzYj1N7JfU3L+JfSOm5mRGHk=
Subject key identifier:   9E:68:DB:F0:FE:E2:D6:83:6D:DF:AB:B1:43:E7:74:C7:CD:A7:AE:5F
Authority key identifier: C4:6B:44:D7:07:33:24:AB:28:41:63:67:DE:04:0F:0E:46:33:48:D1
Certificate issuer:       /CN=c46b44d7073324ab28416367de040f0e463348d1
Certificate serial:       01975A5B98C41FD8AD039625AD33E616480F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xGtE1wczJKsoQWNn3gQPDkYzSNE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.mft
Manifest number:          0DAF
Signing time:             Tue 10 Jun 2025 15:00:41 +0000
Manifest this update:     Tue 10 Jun 2025 15:00:41 +0000
Manifest next update:     Wed 11 Jun 2025 15:00:41 +0000
Files and hashes:         1: xGtE1wczJKsoQWNn3gQPDkYzSNE.crl (hash: Rz/C+0gF2kdeijSoFxFRLStXjMNmfQCUBpStxjee5Lo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xGtE1wczJKsoQWNn3gQPDkYzSNE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 14:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5a:5b:98:c4:1f:d8:ad:03:96:25:ad:33:e6:16:48:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c46b44d7073324ab28416367de040f0e463348d1
        Validity
            Not Before: Jun 10 15:00:41 2025 GMT
            Not After : Jun 11 15:00:41 2025 GMT
        Subject: CN=9e68dbf0fee2d6836ddfabb143e774c7cda7ae5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:80:4c:02:a0:57:4b:6c:31:fa:f7:4e:81:61:
                    73:74:e9:3a:ff:68:41:35:b7:4a:14:04:ed:78:ba:
                    85:dc:6f:64:e2:69:12:ba:2e:d9:61:d5:8d:58:98:
                    c8:af:a0:31:a4:40:82:88:85:ba:32:79:87:b4:65:
                    d9:d0:4f:a3:fd:03:40:6d:88:e6:75:4f:c6:15:b9:
                    95:94:01:c9:4b:3a:8d:d4:53:5f:76:b5:49:f5:e8:
                    06:17:21:e5:d6:ee:4e:31:00:b2:1b:3a:2d:37:00:
                    0a:c5:45:40:76:75:57:2f:30:6e:37:d8:38:73:37:
                    d9:fc:90:4c:71:de:4b:63:07:d5:b2:fc:6a:ee:48:
                    71:cc:bc:fa:9f:35:e0:f1:27:d0:5a:46:37:a9:b8:
                    7f:ef:3d:9a:e7:c4:00:d6:3d:78:14:bf:a1:2b:dd:
                    c8:d2:18:6e:07:ca:51:3b:d4:0e:51:2f:ca:c9:ed:
                    2a:5c:c6:0e:d1:9f:f3:41:b9:d3:a0:85:85:68:dd:
                    37:94:96:f7:48:74:8d:51:b0:0c:4c:8e:a2:24:18:
                    3d:59:5d:00:f4:72:57:97:79:45:e0:29:d2:9d:c9:
                    8a:2b:07:87:38:d3:2a:a5:2e:b7:ba:0e:84:98:15:
                    46:55:c4:e0:26:4a:e5:b7:98:ef:60:fb:50:2e:f9:
                    8d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:68:DB:F0:FE:E2:D6:83:6D:DF:AB:B1:43:E7:74:C7:CD:A7:AE:5F
            X509v3 Authority Key Identifier:
                keyid:C4:6B:44:D7:07:33:24:AB:28:41:63:67:DE:04:0F:0E:46:33:48:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGtE1wczJKsoQWNn3gQPDkYzSNE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:60:7b:c9:c1:aa:e9:29:db:4d:52:87:28:dc:09:3d:e9:68:
         fa:12:21:8d:e2:2f:e1:38:c1:a9:82:2f:60:99:3f:f4:8b:98:
         9c:64:89:10:a5:fc:12:89:9c:0c:b2:59:c3:e1:a6:4e:b0:58:
         46:23:28:0d:1f:03:37:d2:0e:82:33:cd:76:31:24:1f:1e:c0:
         c9:02:b9:67:14:32:7e:ca:89:f7:37:f7:f4:8e:99:5d:5b:8f:
         19:a0:51:27:a4:21:d7:2e:11:5d:fd:8a:0b:ff:94:d5:51:8b:
         61:4d:eb:d2:2a:c4:ad:10:56:5f:34:be:e2:9e:ee:5f:f9:5b:
         b8:81:3d:68:37:78:0f:93:32:37:a2:41:1b:47:ec:20:01:20:
         72:7a:1d:0f:fc:53:76:07:a8:58:9d:58:69:60:64:e0:af:32:
         22:b9:c4:6b:eb:56:cc:30:53:df:5f:91:e1:d9:7b:7c:95:d7:
         bb:5e:b6:e9:75:10:29:cd:50:4b:f0:52:04:01:14:5b:3c:13:
         77:ed:84:c0:8d:7f:61:31:21:dd:e4:5a:e6:7e:3e:8c:41:a6:
         7b:ba:ad:5f:d6:12:f4:d7:80:83:ca:ad:cf:d7:09:27:ea:c0:
         bd:7d:8a:4d:e6:30:c6:9a:ba:e8:5a:d7:da:00:e8:86:7d:31:
         1d:7d:ec:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 00:39:34 2025 by rpki-client