Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/fa5903-6bf8-4d2e-bfba-6b2b72c25ed1/1/4V293KWBZpetEkXADKt2ryHsLjs.mft
File:                     4V293KWBZpetEkXADKt2ryHsLjs.mft (raw, json)
Hash identifier:          WxuJx1HhKFoB5u1Ik/HhJ1EvV1Vibu+B+tyuJPnxTec=
Subject key identifier:   9D:C6:4E:72:44:63:AF:73:E0:D5:0B:B5:28:CF:34:79:A4:26:FC:25
Authority key identifier: E1:5D:BD:DC:A5:81:66:97:AD:12:45:C0:0C:AB:76:AF:21:EC:2E:3B
Certificate issuer:       /CN=e15dbddca5816697ad1245c00cab76af21ec2e3b
Certificate serial:       019748FA8E6CF2FBCF0AF122057226A65292
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4V293KWBZpetEkXADKt2ryHsLjs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/fa5903-6bf8-4d2e-bfba-6b2b72c25ed1/1/4V293KWBZpetEkXADKt2ryHsLjs.mft
Manifest number:          1578
Signing time:             Sat 07 Jun 2025 06:01:09 +0000
Manifest this update:     Sat 07 Jun 2025 06:01:09 +0000
Manifest next update:     Sun 08 Jun 2025 06:01:09 +0000
Files and hashes:         1: 4V293KWBZpetEkXADKt2ryHsLjs.crl (hash: LhppjthKCRV7DKerumsIHN+MdLvAII5IYOikpdHKff8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/fa5903-6bf8-4d2e-bfba-6b2b72c25ed1/1/4V293KWBZpetEkXADKt2ryHsLjs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/fa5903-6bf8-4d2e-bfba-6b2b72c25ed1/1/4V293KWBZpetEkXADKt2ryHsLjs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4V293KWBZpetEkXADKt2ryHsLjs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:fa:8e:6c:f2:fb:cf:0a:f1:22:05:72:26:a6:52:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e15dbddca5816697ad1245c00cab76af21ec2e3b
        Validity
            Not Before: Jun  7 06:01:09 2025 GMT
            Not After : Jun  8 06:01:09 2025 GMT
        Subject: CN=9dc64e724463af73e0d50bb528cf3479a426fc25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:bd:86:66:f2:0d:fc:ed:b9:e6:a0:2d:1e:02:
                    16:66:51:59:dc:02:ff:00:99:1f:77:d6:dc:64:e2:
                    6d:30:37:19:47:f2:ec:35:53:b7:9d:5d:2d:32:4f:
                    ca:fe:63:35:fe:c4:09:06:1a:69:eb:79:0a:18:d4:
                    92:1a:97:2a:11:be:8e:ab:ee:31:1d:fd:85:4b:4e:
                    6a:d5:2b:33:62:42:98:90:ca:b9:48:73:c9:ab:a6:
                    ca:6a:55:87:7d:52:b2:e3:6d:93:c4:1e:fd:a2:9a:
                    e4:6f:c6:f3:fa:c9:b5:e9:b6:0b:88:0b:33:cf:22:
                    34:43:75:94:f0:d5:38:4d:5c:90:d8:cb:88:f6:90:
                    d5:ac:ca:2a:48:c0:a9:18:66:56:00:22:54:c7:de:
                    51:96:08:0d:df:97:d3:9d:b9:a6:17:98:6b:52:bf:
                    b8:df:b9:b0:b4:ad:8d:30:01:2e:4c:b3:3e:c2:40:
                    29:7c:11:80:97:0b:80:34:ae:13:f7:ba:bd:9f:74:
                    de:76:5d:09:c2:13:1f:0d:4f:63:7a:56:3f:cb:77:
                    dd:79:06:01:a9:02:8e:87:a7:8f:bb:09:a2:76:f9:
                    05:7c:70:b4:92:a2:b9:13:24:8e:43:22:37:7f:74:
                    59:91:c1:07:e7:c3:dd:49:74:e6:19:d8:b0:ff:e8:
                    a3:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:C6:4E:72:44:63:AF:73:E0:D5:0B:B5:28:CF:34:79:A4:26:FC:25
            X509v3 Authority Key Identifier:
                keyid:E1:5D:BD:DC:A5:81:66:97:AD:12:45:C0:0C:AB:76:AF:21:EC:2E:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4V293KWBZpetEkXADKt2ryHsLjs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/fa5903-6bf8-4d2e-bfba-6b2b72c25ed1/1/4V293KWBZpetEkXADKt2ryHsLjs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/fa5903-6bf8-4d2e-bfba-6b2b72c25ed1/1/4V293KWBZpetEkXADKt2ryHsLjs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:3f:41:6a:1b:51:99:f0:b0:e0:39:fd:85:13:a1:ea:8a:db:
         d2:19:2e:ef:05:37:21:bf:ca:13:5f:cb:3b:18:96:1e:79:4a:
         e4:4f:4c:38:47:60:75:bf:4e:f6:d3:34:05:98:32:9d:03:06:
         56:3a:bb:5b:8a:91:18:c6:20:22:b6:3a:ee:a8:f3:02:6e:79:
         a7:cd:35:ed:b5:d0:15:88:9d:cf:e2:57:21:79:e9:81:ba:16:
         c7:5e:49:d9:22:92:8c:96:c9:49:0d:26:e9:a2:39:49:a1:be:
         f2:2a:30:24:30:e5:98:2b:37:e6:ed:70:08:cc:d6:30:5d:ae:
         7e:64:84:33:a1:b5:e9:cb:34:93:45:ed:9e:c2:d0:a0:d5:e1:
         f6:49:46:89:88:e1:ca:62:1a:25:11:4e:98:5a:8f:53:80:24:
         33:0b:9d:a9:5c:9e:ea:25:db:59:66:c4:da:ff:91:45:9e:1e:
         70:22:d9:d1:f8:d4:fd:1a:6b:58:9b:80:e4:97:f5:73:fb:ca:
         53:3a:f1:14:7f:c4:73:54:cc:f9:77:b6:8a:f0:b3:3c:b4:d6:
         09:5e:ce:f9:0c:bf:1a:34:d5:96:97:3d:bf:22:3e:57:45:a5:
         e5:f2:76:28:6b:94:31:f0:28:58:36:53:45:fe:51:c4:9e:e2:
         41:93:32:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:56:49 2025 by rpki-client