Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.mft
File:                     KQgdaL3eqL6_JuYYIZeFlPIjvL4.mft (raw, json)
Hash identifier:          fJa4TpJIuLStEZ1X2CgpePtmkAHIRHkmUAvrHl2cz/M=
Subject key identifier:   6F:E4:0E:FB:41:D0:43:E8:69:4D:86:12:38:31:57:3F:19:34:7B:C8
Authority key identifier: 29:08:1D:68:BD:DE:A8:BE:BF:26:E6:18:21:97:85:94:F2:23:BC:BE
Certificate issuer:       /CN=29081d68bddea8bebf26e61821978594f223bcbe
Certificate serial:       019748FA1CAC6426B13301F441622FB3CF28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KQgdaL3eqL6_JuYYIZeFlPIjvL4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.mft
Manifest number:          077C
Signing time:             Sat 07 Jun 2025 06:00:40 +0000
Manifest this update:     Sat 07 Jun 2025 06:00:40 +0000
Manifest next update:     Sun 08 Jun 2025 06:00:40 +0000
Files and hashes:         1: KQgdaL3eqL6_JuYYIZeFlPIjvL4.crl (hash: GthkasgcQUpcSdz3gwkd13fiea5/6HJUiqP+Z/XRqSI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KQgdaL3eqL6_JuYYIZeFlPIjvL4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 06:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:fa:1c:ac:64:26:b1:33:01:f4:41:62:2f:b3:cf:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29081d68bddea8bebf26e61821978594f223bcbe
        Validity
            Not Before: Jun  7 06:00:40 2025 GMT
            Not After : Jun  8 06:00:40 2025 GMT
        Subject: CN=6fe40efb41d043e8694d86123831573f19347bc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:32:8a:6d:75:81:26:a7:fb:ec:de:13:06:8e:
                    32:6e:19:00:43:39:ff:61:e4:48:cc:ec:dc:94:27:
                    51:b6:48:7e:ad:11:08:57:b1:3e:c5:0d:80:7d:f5:
                    20:ec:39:66:85:aa:44:4f:df:7d:9d:64:35:a8:d3:
                    7a:00:13:56:36:c6:4a:be:f0:ad:a7:08:e4:a8:1d:
                    c2:61:61:af:c9:7a:bd:39:3d:12:70:a4:f0:44:ef:
                    86:77:1f:1a:30:bb:61:5e:1b:db:95:41:a6:f6:87:
                    2c:99:c2:14:04:e5:09:74:59:48:b9:af:3c:40:87:
                    ad:d1:e9:b3:b2:20:d3:48:68:49:83:93:f3:1f:9f:
                    dd:42:2d:e6:69:67:45:e9:4e:b2:24:c4:e7:12:86:
                    bd:e2:53:0a:2b:16:20:79:38:bc:55:40:aa:a1:3a:
                    31:e2:d0:1a:02:35:c7:ae:46:94:6d:74:c5:92:09:
                    80:04:c2:b4:ce:5b:17:50:53:03:4a:d7:53:13:49:
                    e6:19:4d:41:64:d9:d7:4c:07:70:97:ad:6a:9e:ca:
                    5f:c8:b8:80:6a:81:ad:e6:66:46:9e:93:01:67:ff:
                    56:0c:b9:56:bc:60:4e:45:2a:85:fc:53:e2:06:2c:
                    b7:4e:05:ed:55:bb:44:ae:54:f6:b9:28:49:a3:39:
                    13:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:E4:0E:FB:41:D0:43:E8:69:4D:86:12:38:31:57:3F:19:34:7B:C8
            X509v3 Authority Key Identifier:
                keyid:29:08:1D:68:BD:DE:A8:BE:BF:26:E6:18:21:97:85:94:F2:23:BC:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQgdaL3eqL6_JuYYIZeFlPIjvL4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:1f:00:03:88:62:04:8d:c2:8f:33:49:ea:bc:e9:a9:40:f5:
         63:2d:2a:90:c5:55:83:ef:5f:16:9d:cc:65:c9:e6:fc:fb:c1:
         d5:45:c9:09:3d:db:e7:8e:df:6e:5e:b7:83:13:91:69:c1:89:
         6d:b7:c5:9c:68:28:8c:88:e9:da:aa:01:f4:f3:29:f4:8b:0d:
         ee:98:a1:d7:30:c7:f2:13:93:60:a5:67:eb:b3:7c:0a:cd:59:
         7a:ee:55:75:dd:bc:52:60:5d:81:8b:7b:ff:37:c5:42:87:8b:
         a1:53:e8:aa:de:bc:cf:e0:8c:26:d5:90:f0:7d:d4:8b:78:78:
         79:69:ba:fa:c9:59:e2:4e:d8:ea:9a:e8:f1:37:01:45:8e:de:
         e9:6c:97:f6:98:06:0c:76:9d:7a:46:a1:c2:c5:c9:94:ec:61:
         3e:e8:f3:22:5c:b5:c0:5b:d4:72:2f:38:a1:2b:14:1a:dc:88:
         96:db:97:bf:45:33:ee:54:72:03:10:ae:46:77:ae:b3:e7:01:
         9d:85:e0:f6:d1:0d:a8:fa:b2:a4:f9:0f:d6:34:f6:aa:d0:75:
         a3:25:44:9f:ef:64:79:ff:3d:73:84:29:5c:f7:ef:31:1c:ea:
         27:10:4d:00:18:c0:78:eb:98:cd:ab:f9:ce:d5:30:a1:30:50:
         58:80:9d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:33:04 2025 by rpki-client