Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/578faa-0a03-46ac-bb5c-9bdbb626b595/1/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.mft
File:                     Rvbuv4C9ZN_1qxASuQpVaGWoSNs.mft (raw, json)
Hash identifier:          58BgbohIUm5eQThrEuKcswVXefK/yvajIVSUfkZO7Xk=
Subject key identifier:   48:91:8C:F7:08:EE:20:8F:43:EA:74:D6:52:2B:D1:3C:5C:1A:10:B6
Authority key identifier: 46:F6:EE:BF:80:BD:64:DF:F5:AB:10:12:B9:0A:55:68:65:A8:48:DB
Certificate issuer:       /CN=46f6eebf80bd64dff5ab1012b90a556865a848db
Certificate serial:       01974CA017AB0AC880A05055C0F92605F5AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/578faa-0a03-46ac-bb5c-9bdbb626b595/1/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.mft
Manifest number:          0420
Signing time:             Sat 07 Jun 2025 23:00:49 +0000
Manifest this update:     Sat 07 Jun 2025 23:00:49 +0000
Manifest next update:     Sun 08 Jun 2025 23:00:49 +0000
Files and hashes:         1: Rvbuv4C9ZN_1qxASuQpVaGWoSNs.crl (hash: 2mO1pAVBGY7wTxAMeOsemzBZrCyJR+dCBG2mORQrB6s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/578faa-0a03-46ac-bb5c-9bdbb626b595/1/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/578faa-0a03-46ac-bb5c-9bdbb626b595/1/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:a0:17:ab:0a:c8:80:a0:50:55:c0:f9:26:05:f5:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46f6eebf80bd64dff5ab1012b90a556865a848db
        Validity
            Not Before: Jun  7 23:00:49 2025 GMT
            Not After : Jun  8 23:00:49 2025 GMT
        Subject: CN=48918cf708ee208f43ea74d6522bd13c5c1a10b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:84:cb:04:75:b6:f8:7d:d6:a7:f6:99:ec:97:
                    b4:92:ff:6e:71:b1:5e:3d:18:b5:d9:3e:d1:20:12:
                    b0:00:e7:44:29:06:e2:7c:be:f1:5f:7c:ca:89:25:
                    ce:de:48:cb:4d:19:b6:9d:f3:ab:52:3b:b4:04:61:
                    86:59:da:20:a8:5f:e7:8d:fb:be:ba:2e:89:ff:bc:
                    7c:fd:b8:28:46:cd:3e:9c:20:f1:85:06:9e:c3:0b:
                    dc:88:95:a9:c4:fe:a8:91:dc:9f:67:97:56:9e:16:
                    9b:84:09:3f:ea:e7:9e:63:4b:68:69:1d:4c:16:9d:
                    8a:83:ad:71:93:84:6d:20:a3:9a:c7:8b:03:96:97:
                    dc:57:81:de:6b:ac:a4:38:a6:d7:1a:21:8d:68:fa:
                    8d:dd:b9:77:91:f9:1b:a2:fe:37:57:87:f2:8c:e1:
                    3b:82:17:3a:5e:c7:de:bd:09:c0:be:27:2d:58:7c:
                    ba:25:e5:b0:76:dd:41:06:78:38:4b:e6:e2:a3:3d:
                    86:0f:51:3a:a4:33:c0:e9:4d:5c:ba:16:83:5c:f3:
                    05:3d:ec:17:d0:67:44:3a:3a:09:26:36:6e:ec:f7:
                    27:70:b0:4f:15:99:bb:12:e3:33:49:8a:ff:70:0a:
                    6d:9e:be:00:72:92:7f:d8:c7:21:34:86:ab:49:d4:
                    af:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:91:8C:F7:08:EE:20:8F:43:EA:74:D6:52:2B:D1:3C:5C:1A:10:B6
            X509v3 Authority Key Identifier:
                keyid:46:F6:EE:BF:80:BD:64:DF:F5:AB:10:12:B9:0A:55:68:65:A8:48:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/578faa-0a03-46ac-bb5c-9bdbb626b595/1/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/578faa-0a03-46ac-bb5c-9bdbb626b595/1/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:36:2c:5d:af:3b:07:7e:88:3c:14:48:32:74:c9:4b:66:cd:
         bf:0a:28:b2:94:9c:fe:f9:5a:3f:2c:2e:44:96:e1:13:2e:99:
         a8:f6:bf:fc:d0:4d:23:ab:2c:6f:d6:bd:fd:76:e4:49:85:28:
         6a:60:75:12:83:95:0f:dc:ac:6b:59:62:94:db:2b:f7:15:53:
         5c:43:75:21:c2:2e:b3:35:4b:4e:00:fe:45:d4:5b:20:a9:cf:
         2f:f4:ef:0d:70:53:4b:c4:99:30:6a:88:ab:65:9a:d5:d3:9a:
         1e:7b:e0:17:c5:b2:01:87:53:86:a6:58:67:3e:cb:98:80:19:
         f1:b0:fd:c7:ca:72:80:bc:48:51:f1:2e:cb:dd:1c:c0:e0:57:
         80:37:af:fd:6a:42:0d:9b:ed:c5:87:58:8d:7a:f7:7b:77:48:
         e8:50:f9:04:3c:2d:25:15:d1:c3:51:bd:5e:46:72:dd:a1:f7:
         e8:59:3b:5a:96:c0:ba:17:78:7c:89:6f:05:89:01:32:7d:ee:
         13:7f:af:69:64:b8:4c:76:cc:07:2e:e0:53:a8:f0:8a:c0:51:
         d9:c9:ea:fc:70:88:7d:0d:4c:d7:87:ad:3a:c6:2c:1b:33:33:
         e2:7d:f3:e8:22:7c:10:d8:c6:10:23:7d:d7:02:5f:b4:40:54:
         68:88:2a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:13:02 2025 by rpki-client