Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/2644a0-3d8f-4ebd-8588-356c411b430e/1/d_Sa-EwLigmns7Tx8nFE6yWRD7U.mft
File:                     d_Sa-EwLigmns7Tx8nFE6yWRD7U.mft (raw, json)
Hash identifier:          NnvY6SuuHXd0narBXkevOHP4SIg5T+LIXtCGHOwVrYg=
Subject key identifier:   48:C3:01:E6:BD:EC:D0:3C:70:AC:2C:EF:77:5D:AE:0F:8D:B6:AE:0B
Authority key identifier: 77:F4:9A:F8:4C:0B:8A:09:A7:B3:B4:F1:F2:71:44:EB:25:91:0F:B5
Certificate issuer:       /CN=77f49af84c0b8a09a7b3b4f1f27144eb25910fb5
Certificate serial:       01975E0158DABAADFBC1533F3E9B13E59E38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d_Sa-EwLigmns7Tx8nFE6yWRD7U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/2644a0-3d8f-4ebd-8588-356c411b430e/1/d_Sa-EwLigmns7Tx8nFE6yWRD7U.mft
Manifest number:          03F3
Signing time:             Wed 11 Jun 2025 08:00:35 +0000
Manifest this update:     Wed 11 Jun 2025 08:00:35 +0000
Manifest next update:     Thu 12 Jun 2025 08:00:35 +0000
Files and hashes:         1: d_Sa-EwLigmns7Tx8nFE6yWRD7U.crl (hash: E5GS5/w8wm9IyaQQwGUakhyx4A5rVVGZEbnRnOSRXXE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/2644a0-3d8f-4ebd-8588-356c411b430e/1/d_Sa-EwLigmns7Tx8nFE6yWRD7U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/2644a0-3d8f-4ebd-8588-356c411b430e/1/d_Sa-EwLigmns7Tx8nFE6yWRD7U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d_Sa-EwLigmns7Tx8nFE6yWRD7U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 08:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5e:01:58:da:ba:ad:fb:c1:53:3f:3e:9b:13:e5:9e:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77f49af84c0b8a09a7b3b4f1f27144eb25910fb5
        Validity
            Not Before: Jun 11 08:00:35 2025 GMT
            Not After : Jun 12 08:00:35 2025 GMT
        Subject: CN=48c301e6bdecd03c70ac2cef775dae0f8db6ae0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:56:02:86:09:b2:7b:6b:e8:2d:2d:cc:61:d1:
                    74:e2:5a:ea:e8:0f:3d:f9:c0:8f:67:41:5a:32:7f:
                    5a:1d:d7:f7:51:93:08:aa:10:30:a3:ba:c6:2d:bf:
                    60:44:32:e9:e9:f7:25:b5:03:ff:47:37:84:1b:af:
                    7b:a6:c5:7b:06:70:8d:1d:2d:b9:ba:85:fb:6f:bd:
                    49:bd:87:eb:05:e8:37:7d:2b:e0:06:22:89:12:83:
                    93:75:a7:b5:d7:34:61:6b:3d:dc:fb:20:18:ed:a2:
                    6f:b0:bf:cb:3e:fd:39:16:38:40:bc:88:3e:a6:aa:
                    ab:bd:07:3e:35:f9:be:b3:99:30:91:89:05:59:8a:
                    a2:64:6b:05:f4:26:be:05:da:8e:dd:8a:12:8c:be:
                    c7:24:0c:ab:ce:0f:86:2a:32:3b:8b:c6:11:60:c0:
                    55:46:2b:dd:b8:51:7d:53:07:d0:4a:22:c6:4b:a4:
                    cd:ff:79:42:0d:af:eb:1b:2f:54:6f:00:db:19:dc:
                    3a:df:8d:ad:61:00:a9:7f:d5:3f:fa:dc:01:b3:34:
                    85:29:21:3a:6c:d8:90:8b:19:3c:e3:0b:9c:99:0d:
                    67:4a:25:3d:46:bd:43:87:80:7c:db:d6:a3:55:32:
                    67:b3:61:22:38:7e:a3:f6:ab:c6:4c:cc:da:39:1b:
                    ff:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:C3:01:E6:BD:EC:D0:3C:70:AC:2C:EF:77:5D:AE:0F:8D:B6:AE:0B
            X509v3 Authority Key Identifier:
                keyid:77:F4:9A:F8:4C:0B:8A:09:A7:B3:B4:F1:F2:71:44:EB:25:91:0F:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Sa-EwLigmns7Tx8nFE6yWRD7U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2644a0-3d8f-4ebd-8588-356c411b430e/1/d_Sa-EwLigmns7Tx8nFE6yWRD7U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2644a0-3d8f-4ebd-8588-356c411b430e/1/d_Sa-EwLigmns7Tx8nFE6yWRD7U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:4b:5b:f1:bc:c3:f3:87:b7:bc:bf:36:32:b7:84:93:a1:32:
         59:75:a3:51:27:17:6b:ed:cd:ac:6c:87:01:a2:1e:77:38:71:
         52:c4:10:3a:fe:d1:98:07:98:94:c9:a3:65:0e:5f:eb:e0:50:
         99:4f:71:16:c1:58:07:df:c4:a2:fa:fe:83:5d:85:f2:54:67:
         2d:18:86:b4:ea:c1:ef:73:15:6e:8f:a0:d4:5c:c2:11:fd:b4:
         9c:94:84:dd:ce:50:37:77:11:6b:48:10:02:4a:25:45:a1:2c:
         6e:51:29:ed:62:2f:7e:dd:66:d5:67:40:a0:05:11:67:2a:2a:
         f2:79:98:5c:54:b9:30:eb:20:e0:bf:d5:91:db:a3:ac:08:c2:
         22:1e:7e:8e:44:bf:7e:68:8a:32:96:a2:20:a4:44:85:41:02:
         bc:64:59:3b:fc:0f:e1:d3:a9:36:dc:a7:79:03:d0:5d:f7:9a:
         4b:b5:41:82:59:9e:25:f1:e7:82:4d:23:32:06:21:fc:cf:ea:
         2d:b4:c1:e0:3d:51:b2:dc:cf:ec:1e:c3:b7:1e:7d:17:ec:1f:
         40:9f:b1:cb:96:f6:a9:3f:9e:54:75:ca:10:57:92:26:bd:f7:
         1c:2b:9b:96:e3:9c:81:0c:9d:2d:7e:8e:2e:45:ce:87:d0:5b:
         c7:13:74:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 10:58:35 2025 by rpki-client