Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.mft
File:                     4rVv8vrl9iGUksEtg-EjnWrW4S8.mft (raw, json)
Hash identifier:          iv65e3kjI3owG3x0HV12O8pJqhGac2lgKpa8k5I0+uM=
Subject key identifier:   F3:A8:48:82:F9:22:0F:4B:6F:E8:90:BC:F1:E1:0D:4F:87:3B:9C:AB
Authority key identifier: E2:B5:6F:F2:FA:E5:F6:21:94:92:C1:2D:83:E1:23:9D:6A:D6:E1:2F
Certificate issuer:       /CN=e2b56ff2fae5f6219492c12d83e1239d6ad6e12f
Certificate serial:       01976094641E97845CCE988C895FB0D56406
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4rVv8vrl9iGUksEtg-EjnWrW4S8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.mft
Manifest number:          1517
Signing time:             Wed 11 Jun 2025 20:00:27 +0000
Manifest this update:     Wed 11 Jun 2025 20:00:27 +0000
Manifest next update:     Thu 12 Jun 2025 20:00:27 +0000
Files and hashes:         1: 4rVv8vrl9iGUksEtg-EjnWrW4S8.crl (hash: lT17FPgEWgccEpfp0qbqAxkI1xsnV0vEN8RwrOdKau4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4rVv8vrl9iGUksEtg-EjnWrW4S8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 20:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:60:94:64:1e:97:84:5c:ce:98:8c:89:5f:b0:d5:64:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2b56ff2fae5f6219492c12d83e1239d6ad6e12f
        Validity
            Not Before: Jun 11 20:00:27 2025 GMT
            Not After : Jun 12 20:00:27 2025 GMT
        Subject: CN=f3a84882f9220f4b6fe890bcf1e10d4f873b9cab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b1:0c:74:a1:a0:11:95:5c:50:cd:b2:0c:c8:
                    09:f8:9d:7f:b0:80:3f:63:f2:99:db:ae:3e:16:4d:
                    93:2f:60:39:e8:1c:54:ba:f8:e8:61:5d:bd:25:7b:
                    b8:d9:c4:b2:e2:a4:a3:cb:64:cc:de:6f:24:2f:4c:
                    30:28:1a:d6:6d:4f:e4:cf:ab:ed:68:c1:f6:7e:a6:
                    72:07:59:7b:09:1f:9c:23:51:36:a1:1e:0e:96:fc:
                    72:9f:81:d8:3c:66:73:f1:2a:7a:7b:db:52:95:5b:
                    ec:e1:74:eb:4c:30:3a:65:62:9b:f2:b4:85:4e:ed:
                    25:35:20:d7:96:92:d0:56:dc:e3:36:9f:d4:7c:7a:
                    8d:fb:55:dc:e4:fd:ca:0d:8d:f4:78:9d:df:ef:cc:
                    19:a6:d3:6c:9d:02:2d:44:94:15:9d:28:89:72:45:
                    15:03:15:6b:24:6e:f4:08:9f:d6:5e:92:e1:94:ac:
                    d4:5d:82:59:0e:63:0d:e9:cb:65:9d:63:3e:79:1b:
                    f9:25:0c:93:a1:5c:ea:f3:8d:7a:02:64:cd:89:6a:
                    33:a4:e8:f6:54:ec:4c:7e:ad:f1:db:b4:c2:e1:ec:
                    9a:aa:ff:7a:c3:c9:1b:59:b1:1a:26:b3:7c:e4:2d:
                    a7:38:47:7e:4a:c3:c8:88:c8:eb:2d:df:c1:6e:bc:
                    7a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:A8:48:82:F9:22:0F:4B:6F:E8:90:BC:F1:E1:0D:4F:87:3B:9C:AB
            X509v3 Authority Key Identifier:
                keyid:E2:B5:6F:F2:FA:E5:F6:21:94:92:C1:2D:83:E1:23:9D:6A:D6:E1:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rVv8vrl9iGUksEtg-EjnWrW4S8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:d5:9e:1b:6e:40:f3:6c:1d:67:64:0e:6c:ea:e4:5b:f4:01:
         94:d5:12:65:f4:81:0c:52:16:0c:05:0c:89:f5:98:74:c1:dd:
         e5:57:95:8e:53:db:33:d2:0f:15:32:a8:dd:be:1c:a5:13:77:
         78:27:82:95:a6:3e:68:b1:3a:23:26:35:e5:36:4a:2c:72:d2:
         1f:3d:51:d6:5a:10:f1:2d:dd:82:28:08:0e:61:e3:7c:b5:5f:
         fd:56:e2:34:45:19:c7:d5:c8:c8:9e:c7:42:9a:e8:92:65:ff:
         67:ef:af:f8:f6:d9:2f:43:56:2e:a9:f1:29:b6:68:df:d1:d7:
         b5:27:30:fb:a1:54:ac:49:35:b2:db:99:ed:5d:89:42:4b:fe:
         f8:65:d6:39:9a:ed:f9:94:4d:b1:24:f0:cf:80:a1:ec:6a:d2:
         b7:ff:b8:b9:6e:b5:68:1d:00:64:21:61:83:5a:a0:a8:a7:d1:
         ed:e1:17:d1:47:41:5f:df:dd:57:ba:48:42:e5:3f:80:5b:22:
         9a:1b:0f:b7:2a:25:5b:0f:a6:e6:29:41:14:5e:8e:88:28:17:
         82:f6:9c:85:32:af:1e:64:2f:8a:32:63:44:a8:c3:42:8f:08:
         69:05:e3:64:36:15:dd:cc:17:43:f5:c5:20:63:7a:22:5c:a7:
         ab:7c:96:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 04:51:52 2025 by rpki-client