Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.mft
File:                     rHhiwpnWCIcYdgqWFoJy_Mv9qXA.mft (raw, json)
Hash identifier:          2TKzLUV6Mw2VcgVy6nyT+MZHRcbFnaB0wtHkE2QaPtg=
Subject key identifier:   73:70:C6:4F:BE:65:EB:3C:FC:39:B8:1D:74:71:DE:38:8F:C3:18:6A
Authority key identifier: AC:78:62:C2:99:D6:08:87:18:76:0A:96:16:82:72:FC:CB:FD:A9:70
Certificate issuer:       /CN=ac7862c299d6088718760a96168272fccbfda970
Certificate serial:       0197605D7244713ABFB298CA6E8AE6153980
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.mft
Manifest number:          03C8
Signing time:             Wed 11 Jun 2025 19:00:26 +0000
Manifest this update:     Wed 11 Jun 2025 19:00:26 +0000
Manifest next update:     Thu 12 Jun 2025 19:00:26 +0000
Files and hashes:         1: rHhiwpnWCIcYdgqWFoJy_Mv9qXA.crl (hash: Z6Zs4uI/Ci+95SkgZRrWWhI/DECzPT4Dj9jSx19gFm0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 15:40:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:60:5d:72:44:71:3a:bf:b2:98:ca:6e:8a:e6:15:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac7862c299d6088718760a96168272fccbfda970
        Validity
            Not Before: Jun 11 19:00:26 2025 GMT
            Not After : Jun 12 19:00:26 2025 GMT
        Subject: CN=7370c64fbe65eb3cfc39b81d7471de388fc3186a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ce:1b:87:ed:fd:ad:42:35:f0:80:37:0f:f8:
                    06:61:3d:6d:7a:fb:b3:fa:88:82:6a:13:c0:9d:2a:
                    d7:e5:8a:15:d5:70:75:cd:72:55:03:9c:f3:5f:4d:
                    e4:4c:dc:dc:c5:85:26:6f:e8:f0:08:25:5a:8f:78:
                    e3:a3:4e:fb:f3:59:e4:0e:27:93:1f:44:56:99:be:
                    ed:4f:b0:68:1f:89:1f:8d:fc:78:f5:9d:b5:43:f6:
                    48:73:67:d7:9e:75:f1:ad:50:92:ed:a2:76:da:00:
                    28:08:99:e9:f8:72:a3:19:95:eb:88:c8:48:4b:ff:
                    c6:51:26:73:79:d7:01:5d:92:29:a8:7e:2f:69:57:
                    d9:24:4d:07:bd:25:5b:26:23:bc:08:c7:00:36:1e:
                    d6:7e:b0:9e:18:10:f8:a0:ea:98:7f:25:e4:1e:81:
                    6b:9f:c8:21:7f:16:87:1e:91:59:a0:bc:48:bc:43:
                    6d:a1:c0:9d:50:8e:7a:b6:63:ab:57:d0:a4:88:57:
                    2a:66:d3:45:f1:39:2a:06:e6:b0:e6:80:74:79:53:
                    c7:2b:73:8a:f9:f7:9b:d4:6d:8e:1a:2c:cc:bc:40:
                    34:2b:b6:51:aa:2b:21:53:43:c6:ad:b7:3d:12:7c:
                    8e:f3:93:8d:b7:ae:bb:98:af:f4:d8:88:c0:64:de:
                    a0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:70:C6:4F:BE:65:EB:3C:FC:39:B8:1D:74:71:DE:38:8F:C3:18:6A
            X509v3 Authority Key Identifier:
                keyid:AC:78:62:C2:99:D6:08:87:18:76:0A:96:16:82:72:FC:CB:FD:A9:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:29:5f:0b:c7:25:7b:0e:ee:8c:13:b3:ff:d4:aa:4d:49:04:
         4e:cc:94:dc:3b:a5:16:d5:f4:d8:92:83:89:f3:06:fe:20:e7:
         cc:81:31:dc:9b:ad:f1:83:ab:b6:62:96:03:ef:be:87:43:81:
         34:5e:9c:7d:bd:e6:5b:26:aa:8c:4c:09:81:3b:ad:5d:ac:68:
         60:7a:dd:8c:01:4c:99:9b:7e:12:3a:49:44:d8:fc:7e:62:b6:
         32:d6:fc:20:58:f6:0d:e8:b3:f4:57:52:70:89:7a:ed:ba:01:
         6d:84:2b:35:2c:cc:f3:ca:3f:59:fb:62:6d:5a:bf:f3:63:e2:
         1c:a3:b7:59:67:92:fa:7e:76:65:f2:95:c3:51:78:6d:2c:0c:
         4f:31:bb:b0:2c:56:5f:91:7e:30:67:8c:62:cc:be:ea:d7:b4:
         31:f5:78:ec:2b:08:67:4a:e4:aa:b1:da:97:21:a1:bd:26:80:
         96:fd:5f:6e:c1:a2:5d:b0:0a:ff:f0:ca:4b:37:27:b8:c7:3b:
         dd:cb:cc:ca:30:b7:8f:d4:92:21:e8:7f:11:c4:06:e1:75:87:
         88:eb:f3:22:cd:7a:c8:29:59:ac:02:8a:75:9f:8d:68:9e:61:
         4b:72:60:a7:5e:be:79:28:d3:d4:73:14:2b:b9:3e:31:f1:21:
         f3:f3:ee:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 00:25:16 2025 by rpki-client