Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/c8251f-c3fc-48e6-8aef-192be3897dac/1/c6vhX2xUCSsQPUrAhkRGmnseb-Q.mft
File:                     c6vhX2xUCSsQPUrAhkRGmnseb-Q.mft (raw, json)
Hash identifier:          Yvqvm4xLLi3LqPkO0d8Xk6itGWWqqNFNm5wnuPY3Z3g=
Subject key identifier:   07:68:FB:27:4F:C5:E8:05:B1:E4:D7:9B:2B:66:59:CE:2C:A1:20:86
Authority key identifier: 73:AB:E1:5F:6C:54:09:2B:10:3D:4A:C0:86:44:46:9A:7B:1E:6F:E4
Certificate issuer:       /CN=73abe15f6c54092b103d4ac08644469a7b1e6fe4
Certificate serial:       019747E73B1CCB5B7160491247D4C2D3E1B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c6vhX2xUCSsQPUrAhkRGmnseb-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/c8251f-c3fc-48e6-8aef-192be3897dac/1/c6vhX2xUCSsQPUrAhkRGmnseb-Q.mft
Manifest number:          1507
Signing time:             Sat 07 Jun 2025 01:00:25 +0000
Manifest this update:     Sat 07 Jun 2025 01:00:25 +0000
Manifest next update:     Sun 08 Jun 2025 01:00:25 +0000
Files and hashes:         1: c6vhX2xUCSsQPUrAhkRGmnseb-Q.crl (hash: 0spmZNplAGMts5YH02Vto+4foYFiZeOhvpRcQ/qeon0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/c8251f-c3fc-48e6-8aef-192be3897dac/1/c6vhX2xUCSsQPUrAhkRGmnseb-Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/c8251f-c3fc-48e6-8aef-192be3897dac/1/c6vhX2xUCSsQPUrAhkRGmnseb-Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c6vhX2xUCSsQPUrAhkRGmnseb-Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:e7:3b:1c:cb:5b:71:60:49:12:47:d4:c2:d3:e1:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73abe15f6c54092b103d4ac08644469a7b1e6fe4
        Validity
            Not Before: Jun  7 01:00:25 2025 GMT
            Not After : Jun  8 01:00:25 2025 GMT
        Subject: CN=0768fb274fc5e805b1e4d79b2b6659ce2ca12086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:31:2b:2c:71:98:88:5f:db:2d:8d:59:ba:6b:
                    82:da:71:fb:6f:a6:48:a8:5a:da:e1:3e:2d:2c:05:
                    90:6f:2e:12:d1:aa:05:ee:80:16:94:97:fc:4d:a3:
                    69:25:f1:52:68:48:56:18:20:20:67:1c:c4:84:50:
                    0e:c3:a1:ad:a9:bd:b1:3d:5b:e8:31:e5:6b:a5:9f:
                    b3:13:bf:9d:e6:9b:b1:3c:37:db:f0:f1:3c:15:55:
                    44:0b:4d:50:8b:f0:a1:ce:d3:5f:27:4c:69:26:d6:
                    5d:cc:04:48:b6:43:20:9e:76:01:5c:87:a1:c3:1d:
                    4e:ae:26:f0:04:c2:32:e0:10:d9:44:46:bb:49:2a:
                    58:d7:cb:95:58:5a:6d:ed:b2:c3:97:7f:89:2d:c8:
                    30:62:0e:cd:4a:6c:21:a2:79:e3:be:f1:80:96:62:
                    14:4c:10:dc:39:f8:b9:2e:d1:c5:ee:9a:fe:46:98:
                    39:62:8c:26:9f:7f:bd:53:13:b2:7c:7b:c3:66:11:
                    4a:bc:42:f6:e0:df:3a:be:c0:f7:b5:e8:f6:a5:51:
                    e8:57:5b:97:91:0a:ba:f3:03:ce:af:f6:88:a0:75:
                    44:03:c1:3b:cc:29:10:b0:8a:ed:c7:f8:53:5c:dd:
                    b8:7e:01:8c:9c:64:70:16:00:ac:c5:5b:e2:59:d9:
                    09:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:68:FB:27:4F:C5:E8:05:B1:E4:D7:9B:2B:66:59:CE:2C:A1:20:86
            X509v3 Authority Key Identifier:
                keyid:73:AB:E1:5F:6C:54:09:2B:10:3D:4A:C0:86:44:46:9A:7B:1E:6F:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6vhX2xUCSsQPUrAhkRGmnseb-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c8251f-c3fc-48e6-8aef-192be3897dac/1/c6vhX2xUCSsQPUrAhkRGmnseb-Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c8251f-c3fc-48e6-8aef-192be3897dac/1/c6vhX2xUCSsQPUrAhkRGmnseb-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:65:d0:ec:a9:06:06:23:7a:0e:b4:31:9d:6b:47:00:73:b3:
         36:95:5a:4d:aa:f3:e1:c2:ef:59:3c:61:2f:19:3a:b6:a1:89:
         f4:5b:01:72:75:39:56:42:51:6a:54:b2:fd:8e:03:9d:ea:e7:
         c3:91:a4:36:e7:94:b4:65:69:84:fb:60:fb:86:3e:44:9b:62:
         ca:d0:b5:25:6e:7c:29:75:59:8c:70:51:c3:be:05:c8:8c:27:
         5a:d8:02:01:45:00:d8:d7:2b:39:55:b2:ba:8e:6c:25:e0:0e:
         51:99:0e:8b:cc:ac:1d:6d:5b:53:49:48:b0:c2:a1:06:c3:9f:
         1b:e2:70:a4:35:a8:c0:47:cb:22:39:a9:47:b6:3c:32:5c:fa:
         09:27:81:e0:e4:30:bb:1d:98:cc:02:e4:ab:f7:48:9c:98:52:
         f7:1a:31:4c:00:ff:72:9c:67:62:23:9e:07:0b:0c:ef:90:9e:
         73:ee:96:d7:90:79:30:d9:6f:b1:70:e9:08:14:27:99:be:e0:
         21:ce:65:07:20:ca:a4:2a:78:d9:65:c9:84:71:e2:c4:35:1b:
         26:1c:0b:37:c5:eb:32:d4:1a:60:ff:a8:a5:8e:ac:82:1c:cc:
         57:56:ea:bb:8d:ea:56:f6:70:a6:8c:d9:fa:56:30:a4:d1:5b:
         6c:81:61:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:29:33 2025 by rpki-client