Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft
File:                     SvrK0nmIVvDwZaJloQlwaUGsqOo.mft (raw, json)
Hash identifier:          9elszp4uzXMKT+oJnC92wjo1gt/4y0IBlEv5Lzv3j3g=
Subject key identifier:   63:F8:A1:C6:C3:C5:A4:5C:2B:04:3C:EF:B9:FC:48:B0:13:4C:20:40
Authority key identifier: 4A:FA:CA:D2:79:88:56:F0:F0:65:A2:65:A1:09:70:69:41:AC:A8:EA
Certificate issuer:       /CN=4afacad2798856f0f065a265a109706941aca8ea
Certificate serial:       01975BDC9929FCD445EC2ECDA963882BC3A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SvrK0nmIVvDwZaJloQlwaUGsqOo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft
Manifest number:          111F
Signing time:             Tue 10 Jun 2025 22:01:13 +0000
Manifest this update:     Tue 10 Jun 2025 22:01:13 +0000
Manifest next update:     Wed 11 Jun 2025 22:01:13 +0000
Files and hashes:         1: SvrK0nmIVvDwZaJloQlwaUGsqOo.crl (hash: l7aLUlmg/D9N9P9yprb+nagoQWPDAURBLVXlmCZY04o=)
                          2: rKZbB3iW2mhQrV3B7dzkdgnj7Hg.roa (hash: bzWIX1UDDDSaemHwck5e4pimDCRd9S56ZPwPBB+GA2A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SvrK0nmIVvDwZaJloQlwaUGsqOo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 20:45:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5b:dc:99:29:fc:d4:45:ec:2e:cd:a9:63:88:2b:c3:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4afacad2798856f0f065a265a109706941aca8ea
        Validity
            Not Before: Jun 10 22:01:13 2025 GMT
            Not After : Jun 11 22:01:13 2025 GMT
        Subject: CN=63f8a1c6c3c5a45c2b043cefb9fc48b0134c2040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ab:22:67:18:17:a9:a1:dd:dc:9d:c7:56:a2:
                    a4:d6:aa:cb:c2:b5:df:c5:40:f9:fe:a1:b7:ff:5c:
                    6d:eb:1f:c9:43:ba:57:df:50:3f:75:4b:de:d3:a9:
                    15:6c:f8:6a:10:08:c8:96:20:f5:df:63:64:ea:1c:
                    f8:5e:a2:64:a0:8f:89:b3:b2:9a:a8:70:64:be:25:
                    d6:c6:15:5b:90:c3:f9:bb:45:bf:4f:14:28:b6:b7:
                    18:00:26:fb:a2:21:e9:36:a2:cf:e3:61:8c:37:1b:
                    7e:89:bc:56:ca:d5:9a:59:60:e2:80:6b:6c:49:99:
                    44:0b:7c:ce:03:1d:8d:20:b8:52:24:c8:23:78:cf:
                    b2:b5:2e:bd:e6:34:cb:da:a2:8a:9c:e6:74:6c:35:
                    15:dc:69:1a:04:d8:a9:a5:31:9e:65:85:6a:33:65:
                    80:e1:a9:6a:c5:80:d4:41:f3:3f:76:d7:84:fe:c9:
                    f1:31:ab:99:dc:96:50:80:b2:bd:85:ef:44:76:f1:
                    2e:c1:c7:45:da:7a:b3:b7:16:81:58:dd:48:d4:90:
                    92:61:69:13:19:c2:03:6a:2c:0b:0f:68:d7:fd:0d:
                    00:06:c9:f0:29:4b:16:0b:73:dc:4b:08:26:a0:6f:
                    ea:b2:b3:f5:4a:c4:af:0b:42:34:77:06:53:b6:55:
                    18:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:F8:A1:C6:C3:C5:A4:5C:2B:04:3C:EF:B9:FC:48:B0:13:4C:20:40
            X509v3 Authority Key Identifier:
                keyid:4A:FA:CA:D2:79:88:56:F0:F0:65:A2:65:A1:09:70:69:41:AC:A8:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SvrK0nmIVvDwZaJloQlwaUGsqOo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:73:70:db:41:93:0a:5a:e8:76:5e:f5:84:27:63:34:75:dd:
         6d:2d:7a:5f:ab:61:e6:81:44:57:be:39:60:b8:82:c2:05:bd:
         ce:a5:30:87:da:78:67:02:38:6a:20:00:0d:42:0d:e8:e7:ab:
         d0:e4:fd:4d:d9:9d:f2:1d:52:b7:86:cb:a8:c8:8f:dc:f9:f3:
         a6:a7:5e:e8:1c:51:63:d7:f3:3b:79:ff:75:ff:d2:96:3a:2d:
         ee:b3:b7:11:dc:81:74:0c:9e:2f:4e:f6:8a:95:72:f5:18:9b:
         58:cd:83:18:42:c7:c2:a8:9c:22:a3:75:f2:ae:54:a9:5e:7f:
         b0:88:02:50:d6:e6:57:80:40:e7:ae:a0:28:21:51:f5:7a:ca:
         33:3b:38:2f:4c:63:04:25:56:24:ca:90:9a:1d:ce:fd:0e:33:
         f6:0e:fa:26:cd:8b:c5:34:b3:d7:3c:72:b5:2c:f3:5e:9a:7c:
         87:c5:56:90:a4:87:ff:85:b5:90:97:ae:c4:99:d8:a3:79:42:
         0a:40:46:f5:ef:a8:5a:28:e0:13:ec:b9:e4:ac:61:51:70:9b:
         a6:cf:17:86:17:a5:95:8b:04:86:4b:09:49:6e:b1:94:69:f6:
         40:8a:2f:2f:ce:3e:b2:5d:03:6a:0d:6d:fe:c0:b6:10:b0:e5:
         c3:fc:d0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 03:36:59 2025 by rpki-client