Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/Sz1GYT0gKWKWebKwSi-chsq8dNU.mft
File:                     Sz1GYT0gKWKWebKwSi-chsq8dNU.mft (raw, json)
Hash identifier:          u5rMKpyveQp9v3/XhJjq+4SjX/TbW8TzDHSy8VbEakU=
Subject key identifier:   12:C2:B0:B6:11:4F:57:82:A9:E8:40:E1:77:EF:51:E9:97:96:50:02
Authority key identifier: 4B:3D:46:61:3D:20:29:62:96:79:B2:B0:4A:2F:9C:86:CA:BC:74:D5
Certificate issuer:       /CN=4b3d46613d2029629679b2b04a2f9c86cabc74d5
Certificate serial:       01974A43641D1224BD3CC022EA15FA72C4CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz1GYT0gKWKWebKwSi-chsq8dNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/Sz1GYT0gKWKWebKwSi-chsq8dNU.mft
Manifest number:          1579
Signing time:             Sat 07 Jun 2025 12:00:19 +0000
Manifest this update:     Sat 07 Jun 2025 12:00:19 +0000
Manifest next update:     Sun 08 Jun 2025 12:00:19 +0000
Files and hashes:         1: Sz1GYT0gKWKWebKwSi-chsq8dNU.crl (hash: 6J+C/sfTIs1E//radSFvS/ztTlwFhdtUmfe0idj88ws=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/Sz1GYT0gKWKWebKwSi-chsq8dNU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/Sz1GYT0gKWKWebKwSi-chsq8dNU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sz1GYT0gKWKWebKwSi-chsq8dNU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 11:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:43:64:1d:12:24:bd:3c:c0:22:ea:15:fa:72:c4:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3d46613d2029629679b2b04a2f9c86cabc74d5
        Validity
            Not Before: Jun  7 12:00:19 2025 GMT
            Not After : Jun  8 12:00:19 2025 GMT
        Subject: CN=12c2b0b6114f5782a9e840e177ef51e997965002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e3:02:e6:3e:53:93:2d:0f:b9:cf:f1:43:d5:
                    89:e8:f8:c1:10:72:3f:99:63:f3:e6:51:df:88:44:
                    f6:d9:4c:96:2a:5f:ac:09:11:e2:99:a0:ee:03:a8:
                    d4:a7:cc:97:b2:98:b5:8a:21:cd:f7:5b:d4:6e:7f:
                    a3:ea:b2:54:5c:7f:1b:15:0e:ab:25:68:f7:3e:cd:
                    f4:53:67:d9:0d:fd:21:17:ef:95:46:49:ac:70:a2:
                    80:86:b5:df:97:6e:5f:77:fc:43:ad:db:b6:67:3d:
                    16:f7:ee:a8:77:fb:87:b2:94:46:ce:ec:1d:37:88:
                    8a:ac:35:74:22:f2:bf:fd:1f:bf:d7:eb:73:bf:8d:
                    9f:54:26:9a:8f:c9:3d:e3:fb:f4:97:13:5d:cb:7d:
                    5a:9f:99:21:e2:72:86:73:04:46:4f:59:12:6e:d0:
                    56:67:34:7e:bd:70:e8:cf:93:ad:c9:b0:60:34:92:
                    8d:ca:f3:f5:11:49:5f:66:4b:1c:f1:44:53:8f:19:
                    3f:27:fb:6b:d8:e1:1a:ae:ee:a9:14:49:84:38:99:
                    1c:0e:d7:45:2f:19:44:3d:10:13:e2:ea:20:89:65:
                    0e:9c:0b:7e:e8:dc:12:e2:56:65:d8:d4:a9:e0:a3:
                    71:fc:e9:9b:b7:c7:a1:f0:41:37:88:d0:c2:aa:62:
                    a3:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:C2:B0:B6:11:4F:57:82:A9:E8:40:E1:77:EF:51:E9:97:96:50:02
            X509v3 Authority Key Identifier:
                keyid:4B:3D:46:61:3D:20:29:62:96:79:B2:B0:4A:2F:9C:86:CA:BC:74:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz1GYT0gKWKWebKwSi-chsq8dNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/Sz1GYT0gKWKWebKwSi-chsq8dNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/Sz1GYT0gKWKWebKwSi-chsq8dNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:2f:bb:fd:fe:46:94:eb:1a:60:95:e0:8d:98:d8:c6:74:50:
         ab:55:c5:56:f2:7c:bd:57:36:1f:37:0d:61:40:41:44:16:3b:
         97:53:d8:88:79:71:c7:9a:84:ff:7a:90:a7:f5:6a:ce:a3:b3:
         c5:bb:7e:db:94:b2:57:d7:51:4a:da:55:1e:35:65:1a:bc:09:
         14:0d:69:ec:a6:1e:b9:b7:c2:66:f9:11:cd:2b:60:54:ba:07:
         70:13:49:fe:4c:d2:8a:79:e4:48:b4:af:dc:fa:f2:db:0c:c4:
         37:ab:ec:b7:a5:b4:14:50:49:fe:6e:ed:19:63:cf:b7:b3:12:
         53:14:39:7b:d0:69:37:e0:fe:1d:6f:e0:04:cd:11:b5:f7:95:
         b9:fb:17:f3:97:6b:34:98:c8:fe:21:96:18:13:13:63:7f:c6:
         47:ae:1e:d6:3d:8a:c4:ed:9f:e4:5a:2d:e4:b3:f6:15:fc:a6:
         9f:63:d7:bc:ee:07:5d:9f:80:a5:f6:7a:fe:36:f8:c4:01:28:
         09:80:5c:4c:93:62:33:e5:04:eb:15:d2:6a:53:19:f3:f2:a3:
         d9:04:61:58:b7:e3:c4:86:f3:86:27:0c:a0:0b:d4:92:fc:1c:
         14:8c:ff:d7:e8:51:47:5b:69:78:3d:da:9b:17:12:22:20:a2:
         5f:d9:72:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:35:11 2025 by rpki-client