Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/504ffa-2905-4785-9291-5b11bb179a8b/1/Rmz6T4hH8VYbVZcWcBZcDmi2J5k.mft
File:                     Rmz6T4hH8VYbVZcWcBZcDmi2J5k.mft (raw, json)
Hash identifier:          SCNYtT97hZ6cB21LDIepJYPp/cNgR1PC4V+VliLqHPQ=
Subject key identifier:   0E:F4:82:1A:DB:17:78:89:B7:EC:3F:CC:D3:D8:E1:9F:9E:01:7D:AB
Authority key identifier: 46:6C:FA:4F:88:47:F1:56:1B:55:97:16:70:16:5C:0E:68:B6:27:99
Certificate issuer:       /CN=466cfa4f8847f1561b55971670165c0e68b62799
Certificate serial:       01975EA61678A6B1833EB8CECEE69182A70E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rmz6T4hH8VYbVZcWcBZcDmi2J5k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/504ffa-2905-4785-9291-5b11bb179a8b/1/Rmz6T4hH8VYbVZcWcBZcDmi2J5k.mft
Manifest number:          09D4
Signing time:             Wed 11 Jun 2025 11:00:32 +0000
Manifest this update:     Wed 11 Jun 2025 11:00:32 +0000
Manifest next update:     Thu 12 Jun 2025 11:00:32 +0000
Files and hashes:         1: Rmz6T4hH8VYbVZcWcBZcDmi2J5k.crl (hash: VgRlW+HdCPSGYVnk6Q4t4p4YBW6FctLeuyiXVR3DU9s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/504ffa-2905-4785-9291-5b11bb179a8b/1/Rmz6T4hH8VYbVZcWcBZcDmi2J5k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/504ffa-2905-4785-9291-5b11bb179a8b/1/Rmz6T4hH8VYbVZcWcBZcDmi2J5k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rmz6T4hH8VYbVZcWcBZcDmi2J5k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 11:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5e:a6:16:78:a6:b1:83:3e:b8:ce:ce:e6:91:82:a7:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=466cfa4f8847f1561b55971670165c0e68b62799
        Validity
            Not Before: Jun 11 11:00:32 2025 GMT
            Not After : Jun 12 11:00:32 2025 GMT
        Subject: CN=0ef4821adb177889b7ec3fccd3d8e19f9e017dab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:10:ca:7b:27:0e:94:ea:46:ae:d5:b1:51:2d:
                    c1:4d:1f:fa:17:54:da:16:e9:76:aa:c2:e6:e8:7e:
                    91:3e:31:72:72:38:d7:74:5e:87:b6:cf:f6:d7:e5:
                    ad:c7:ec:e6:c1:d5:e8:15:7e:04:91:aa:4a:f5:02:
                    e9:71:e4:7e:60:e6:2b:aa:54:9a:c8:c5:1e:02:37:
                    3a:aa:01:17:f6:3e:24:1b:7a:39:6f:66:c9:24:d7:
                    76:a8:96:ed:f0:14:cd:d4:a6:8e:5c:41:34:d7:19:
                    a0:ee:c8:cd:1b:f0:2b:d4:96:4d:08:89:1e:38:e4:
                    c2:37:65:62:f0:ec:89:8c:0b:77:2f:a9:4c:80:7f:
                    62:32:2f:02:93:24:50:5f:43:50:15:42:43:81:05:
                    4e:f1:88:48:02:6f:5c:c8:26:2a:c7:ad:dc:ff:18:
                    76:c5:90:4d:4e:f2:4e:36:af:35:1a:55:df:28:d5:
                    26:75:17:b4:96:57:2b:46:23:5c:4d:74:8a:c4:6d:
                    0b:16:17:fc:24:16:8a:81:b1:76:02:e1:d4:49:7f:
                    ae:63:a2:5a:6c:7e:a3:a3:11:db:a6:29:22:42:16:
                    78:6b:81:a4:ea:5a:df:cd:72:7c:5c:7d:2a:03:ea:
                    ae:fc:42:ba:a5:ee:08:a1:84:80:b3:b6:d2:95:49:
                    d7:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:F4:82:1A:DB:17:78:89:B7:EC:3F:CC:D3:D8:E1:9F:9E:01:7D:AB
            X509v3 Authority Key Identifier:
                keyid:46:6C:FA:4F:88:47:F1:56:1B:55:97:16:70:16:5C:0E:68:B6:27:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rmz6T4hH8VYbVZcWcBZcDmi2J5k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/504ffa-2905-4785-9291-5b11bb179a8b/1/Rmz6T4hH8VYbVZcWcBZcDmi2J5k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/504ffa-2905-4785-9291-5b11bb179a8b/1/Rmz6T4hH8VYbVZcWcBZcDmi2J5k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:3e:a1:ca:9c:96:2c:ea:50:ab:cf:0f:ca:a3:1f:ba:3f:df:
         98:93:0b:3d:e2:ba:f5:36:b3:14:8c:6b:87:37:aa:4f:60:4a:
         b7:f2:d1:59:9c:df:31:7f:95:85:c2:ef:34:32:e4:ea:5e:56:
         36:0d:15:97:60:da:c9:8b:0b:23:84:4b:96:74:c0:a9:4d:5e:
         06:86:94:10:f9:e3:53:07:bb:da:52:38:f3:cf:11:52:5c:db:
         da:89:4b:9b:5c:78:4a:1a:4f:81:96:c0:e0:96:d2:4a:27:21:
         d2:60:67:b8:92:67:36:6f:5d:a0:77:b1:2d:77:07:43:b9:3f:
         ad:82:d1:ce:83:92:3f:95:9b:91:d7:00:d4:d7:5e:e6:05:d3:
         c7:51:a4:06:02:f5:b7:0f:f5:7f:ca:e4:49:2e:12:ba:6f:35:
         b2:ac:1e:b1:a4:a6:01:de:44:dc:38:c2:2f:eb:dc:f5:90:ca:
         a3:fe:0c:52:e9:15:3d:2d:71:75:88:5a:74:d8:3e:36:e5:91:
         cf:3f:d2:d7:58:bf:6a:a8:bd:f2:3c:7d:b4:6c:36:1b:f6:fb:
         f3:60:98:57:86:cd:e1:d2:05:bb:23:f9:2c:44:95:ba:42:4b:
         36:77:20:40:bc:2c:9a:4c:7b:03:90:b5:e4:a8:d4:65:6d:77:
         06:39:5c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 21:04:34 2025 by rpki-client