Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/ee3822-abea-48d9-93a9-8856c65fe182/1/0cdzwgrI5Ak99iu7hyyvzbaLVdw.mft
File:                     0cdzwgrI5Ak99iu7hyyvzbaLVdw.mft (raw, json)
Hash identifier:          xa6VRT0Opc+trI2OFiV7iG+42JQGAaCIB194v+1jvDc=
Subject key identifier:   86:52:05:9B:9F:3A:9C:B6:E9:9F:33:1D:B2:93:E3:E0:AB:DB:57:F4
Authority key identifier: D1:C7:73:C2:0A:C8:E4:09:3D:F6:2B:BB:87:2C:AF:CD:B6:8B:55:DC
Certificate issuer:       /CN=d1c773c20ac8e4093df62bbb872cafcdb68b55dc
Certificate serial:       0197470B86CD2D4CC22FBA95880841AA49C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0cdzwgrI5Ak99iu7hyyvzbaLVdw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/ee3822-abea-48d9-93a9-8856c65fe182/1/0cdzwgrI5Ak99iu7hyyvzbaLVdw.mft
Manifest number:          07C5
Signing time:             Fri 06 Jun 2025 21:00:27 +0000
Manifest this update:     Fri 06 Jun 2025 21:00:27 +0000
Manifest next update:     Sat 07 Jun 2025 21:00:27 +0000
Files and hashes:         1: 0cdzwgrI5Ak99iu7hyyvzbaLVdw.crl (hash: h8ZqnsZtuKHcZS1C4SF5OemavUvDzjodwaup7vs5d/8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/ee3822-abea-48d9-93a9-8856c65fe182/1/0cdzwgrI5Ak99iu7hyyvzbaLVdw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/ee3822-abea-48d9-93a9-8856c65fe182/1/0cdzwgrI5Ak99iu7hyyvzbaLVdw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0cdzwgrI5Ak99iu7hyyvzbaLVdw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 21:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:0b:86:cd:2d:4c:c2:2f:ba:95:88:08:41:aa:49:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1c773c20ac8e4093df62bbb872cafcdb68b55dc
        Validity
            Not Before: Jun  6 21:00:27 2025 GMT
            Not After : Jun  7 21:00:27 2025 GMT
        Subject: CN=8652059b9f3a9cb6e99f331db293e3e0abdb57f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1e:4a:55:26:61:79:b5:71:65:f6:b1:67:54:
                    4e:db:5a:4f:4e:1b:17:2c:84:7d:8c:c8:e0:84:02:
                    71:86:20:4d:67:32:4c:ff:5a:80:92:5e:7e:31:38:
                    76:66:13:48:77:06:ab:3d:f5:d4:d4:9b:41:5c:f9:
                    54:23:df:e6:0b:d7:31:28:03:e6:67:8f:93:81:d0:
                    08:ba:f8:ed:e1:89:61:db:42:76:f2:ed:a8:86:cb:
                    10:f4:6d:2b:e4:29:fc:67:94:ff:f7:d2:cd:45:e5:
                    5d:f6:34:60:54:e6:2a:c8:1e:52:a1:a3:87:42:79:
                    e4:9e:94:21:7a:dd:ef:60:7c:d7:fa:45:7b:5f:a6:
                    d0:ef:cb:cf:c0:b2:57:a4:b9:21:45:89:cf:e7:29:
                    10:92:6e:8e:aa:2e:15:55:c7:26:67:e8:f3:d2:bd:
                    ca:fb:79:62:32:b6:35:dd:e2:cc:74:80:71:f5:9f:
                    05:f0:3c:d3:d2:27:28:00:f6:60:1c:70:1f:0e:9e:
                    8d:8b:dd:5f:3a:3a:64:e0:28:c8:1a:13:7b:aa:d5:
                    8f:f5:34:44:87:34:ab:13:a0:6e:15:ff:8e:22:36:
                    00:4b:c1:66:2d:f6:6a:9d:99:5d:32:81:a1:bc:e3:
                    06:4b:03:61:37:b3:72:d7:e5:75:d7:69:94:b2:75:
                    b1:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:52:05:9B:9F:3A:9C:B6:E9:9F:33:1D:B2:93:E3:E0:AB:DB:57:F4
            X509v3 Authority Key Identifier:
                keyid:D1:C7:73:C2:0A:C8:E4:09:3D:F6:2B:BB:87:2C:AF:CD:B6:8B:55:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cdzwgrI5Ak99iu7hyyvzbaLVdw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/ee3822-abea-48d9-93a9-8856c65fe182/1/0cdzwgrI5Ak99iu7hyyvzbaLVdw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/ee3822-abea-48d9-93a9-8856c65fe182/1/0cdzwgrI5Ak99iu7hyyvzbaLVdw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:b4:f4:bf:7d:6b:1a:8c:4f:a5:dd:36:12:c3:48:79:cd:66:
         35:03:fd:54:b2:8e:bb:77:59:9a:9e:66:bb:c6:f3:3d:a9:8f:
         80:f4:67:dd:ef:a3:1f:ae:b0:fe:88:c7:3d:f3:5a:86:e8:ef:
         da:c1:00:98:b9:67:79:13:57:cc:d2:d4:2b:59:6b:79:57:c8:
         f5:2d:0f:a0:0a:21:c9:60:15:c0:56:c1:94:16:cc:4b:2d:e6:
         21:f9:be:d9:03:9f:5d:7b:8f:09:82:38:fb:c5:5e:d0:4c:64:
         f5:41:ad:a2:20:ae:e5:79:0b:5a:5d:57:65:68:9d:03:52:e4:
         22:97:e4:2d:6a:d2:da:19:65:6c:ee:2f:03:4f:c2:c5:e0:cd:
         66:ca:28:ee:2f:f9:e5:60:ea:50:1c:be:18:d2:eb:c6:67:8f:
         ab:b6:af:a6:bd:79:90:ee:2c:74:0a:20:be:3f:07:b5:22:93:
         e9:67:70:d1:e2:46:b6:7e:f4:49:f4:29:04:7e:b2:aa:79:8d:
         1d:40:1b:25:00:a9:7c:62:b6:3f:20:10:cf:2c:76:63:9a:2a:
         6a:f3:93:59:ec:d8:d3:17:d0:b1:b4:1a:17:46:f5:c7:97:b0:
         cf:b2:1b:61:17:33:87:d0:ee:62:cb:ce:7e:00:3e:fa:46:18:
         5d:61:d7:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:03:25 2025 by rpki-client