Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/829bc6-ee1c-45a3-bcdd-057cee05e0e3/1/adA-sSuz_i5OlkUcnMPvjunTtfU.mft
File:                     adA-sSuz_i5OlkUcnMPvjunTtfU.mft (raw, json)
Hash identifier:          pvlAxZ+GKaQy4KYX8cO9waifat8ZX+osn8n2f8+TNMo=
Subject key identifier:   1E:D0:D6:A2:1C:0B:C3:87:41:9C:FC:FE:23:32:32:D6:D0:CA:91:F7
Authority key identifier: 69:D0:3E:B1:2B:B3:FE:2E:4E:96:45:1C:9C:C3:EF:8E:E9:D3:B5:F5
Certificate issuer:       /CN=69d03eb12bb3fe2e4e96451c9cc3ef8ee9d3b5f5
Certificate serial:       01974A7B965FC1C543673B9632A6D3DE0C28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/adA-sSuz_i5OlkUcnMPvjunTtfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/829bc6-ee1c-45a3-bcdd-057cee05e0e3/1/adA-sSuz_i5OlkUcnMPvjunTtfU.mft
Manifest number:          120D
Signing time:             Sat 07 Jun 2025 13:01:42 +0000
Manifest this update:     Sat 07 Jun 2025 13:01:42 +0000
Manifest next update:     Sun 08 Jun 2025 13:01:42 +0000
Files and hashes:         1: adA-sSuz_i5OlkUcnMPvjunTtfU.crl (hash: 6X1eCvfFf6avibQZ07mmanjo0lGDgx7Gzzbah6oCKWA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/829bc6-ee1c-45a3-bcdd-057cee05e0e3/1/adA-sSuz_i5OlkUcnMPvjunTtfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/829bc6-ee1c-45a3-bcdd-057cee05e0e3/1/adA-sSuz_i5OlkUcnMPvjunTtfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/adA-sSuz_i5OlkUcnMPvjunTtfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 13:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:7b:96:5f:c1:c5:43:67:3b:96:32:a6:d3:de:0c:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69d03eb12bb3fe2e4e96451c9cc3ef8ee9d3b5f5
        Validity
            Not Before: Jun  7 13:01:42 2025 GMT
            Not After : Jun  8 13:01:42 2025 GMT
        Subject: CN=1ed0d6a21c0bc387419cfcfe233232d6d0ca91f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c2:d5:9b:44:20:b5:c0:d9:bf:69:32:8d:e3:
                    49:ab:7f:81:52:a4:fc:b5:0d:f0:4c:b6:2b:c4:32:
                    45:de:3a:6d:f8:89:02:f8:05:1f:d6:de:3b:30:66:
                    ff:6e:7c:64:7d:42:8e:8f:4e:81:49:61:06:52:8d:
                    6a:3a:a5:50:8b:84:18:2f:21:5b:23:8c:04:19:86:
                    63:02:95:6c:24:f5:af:5a:28:00:d5:30:42:89:6c:
                    60:5a:aa:3a:88:9f:f3:f9:5c:2c:1d:29:7a:af:60:
                    c6:b5:ea:3a:93:da:0e:a1:f1:b7:1f:4a:21:54:1a:
                    4c:86:31:f0:2f:25:6a:75:c0:bc:57:46:13:1c:ef:
                    64:b7:9c:f4:89:31:7d:d4:d4:85:d8:24:72:95:fa:
                    01:4a:e3:0f:62:d9:17:4d:7f:87:4b:10:3c:be:90:
                    3e:95:7d:d2:f5:5e:c0:2b:d4:ea:6d:85:93:c6:77:
                    5b:d9:1b:4a:98:cd:01:15:69:03:c3:90:a4:7c:14:
                    81:36:62:2f:b4:87:08:80:95:d2:cd:d7:76:7e:01:
                    c0:86:64:3b:4f:2f:cf:6a:c0:58:ec:f2:1c:60:58:
                    de:81:0b:41:d2:18:d5:6c:b8:24:31:ab:24:51:ad:
                    3d:b5:f6:29:e6:eb:77:49:9b:38:55:8e:18:62:d1:
                    6d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:D0:D6:A2:1C:0B:C3:87:41:9C:FC:FE:23:32:32:D6:D0:CA:91:F7
            X509v3 Authority Key Identifier:
                keyid:69:D0:3E:B1:2B:B3:FE:2E:4E:96:45:1C:9C:C3:EF:8E:E9:D3:B5:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adA-sSuz_i5OlkUcnMPvjunTtfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/829bc6-ee1c-45a3-bcdd-057cee05e0e3/1/adA-sSuz_i5OlkUcnMPvjunTtfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/829bc6-ee1c-45a3-bcdd-057cee05e0e3/1/adA-sSuz_i5OlkUcnMPvjunTtfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:e8:b6:8b:2e:87:0d:07:7c:54:aa:3b:d8:7f:c5:c6:e7:b6:
         7c:dc:5c:b0:dc:7a:29:02:90:73:a2:76:14:69:aa:fc:4e:fd:
         67:58:24:fb:47:84:46:51:d5:6f:31:88:15:0b:08:9e:37:0a:
         54:88:e5:f6:8d:9f:dd:bc:ee:e1:ac:35:b6:e8:67:23:2a:1d:
         66:4d:ff:3b:4d:74:30:fe:6a:c7:06:01:38:3c:a0:4e:2d:a0:
         4b:6b:40:cc:ea:f5:d5:a0:4a:b0:bc:04:5b:30:84:61:09:70:
         4e:1d:54:ec:c9:97:fc:c2:19:1e:5e:e8:c7:19:9f:23:41:cd:
         33:8e:c4:a6:a8:90:2e:0e:b6:09:3a:69:22:43:2b:d2:27:da:
         fc:77:d0:0f:4e:df:dc:15:1f:78:97:fb:aa:a7:82:dc:0b:b3:
         da:91:19:fa:01:f1:97:31:a0:a8:94:13:db:46:64:5f:0c:bd:
         ac:71:31:34:56:52:65:05:15:3c:19:d2:1d:d5:33:a4:2a:e4:
         d8:8a:71:10:71:98:58:5f:b6:bf:f9:e4:b5:d5:cf:5d:08:7b:
         17:46:37:28:b6:89:4a:75:c1:d5:d9:8a:2e:c7:c7:1c:36:5f:
         5b:69:ef:ab:5a:ae:5e:a6:a8:f3:63:fc:d1:15:be:ee:cb:1e:
         41:84:eb:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:55:06 2025 by rpki-client