Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.mft
File:                     g06Y-uclpT43QqjU7ehT9P9juRM.mft (raw, json)
Hash identifier:          z5R4aU1qVUJZ7+695XCz4VeJY0JAoxJUykqAjjWili0=
Subject key identifier:   B4:06:AA:85:08:8D:EC:92:86:8C:EE:D3:68:98:27:61:F6:72:39:C9
Authority key identifier: 83:4E:98:FA:E7:25:A5:3E:37:42:A8:D4:ED:E8:53:F4:FF:63:B9:13
Certificate issuer:       /CN=834e98fae725a53e3742a8d4ede853f4ff63b913
Certificate serial:       01975DCA865305FB2EC72AC3F526131C7F0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g06Y-uclpT43QqjU7ehT9P9juRM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.mft
Manifest number:          0339
Signing time:             Wed 11 Jun 2025 07:00:43 +0000
Manifest this update:     Wed 11 Jun 2025 07:00:43 +0000
Manifest next update:     Thu 12 Jun 2025 07:00:43 +0000
Files and hashes:         1: g06Y-uclpT43QqjU7ehT9P9juRM.crl (hash: Jqvp+cVPmSWmHfvaKkCKhZ7lF3TOEPvVl2/0/a3NtFE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g06Y-uclpT43QqjU7ehT9P9juRM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 23:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5d:ca:86:53:05:fb:2e:c7:2a:c3:f5:26:13:1c:7f:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=834e98fae725a53e3742a8d4ede853f4ff63b913
        Validity
            Not Before: Jun 11 07:00:43 2025 GMT
            Not After : Jun 12 07:00:43 2025 GMT
        Subject: CN=b406aa85088dec92868ceed368982761f67239c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ee:88:44:7f:f1:e1:c9:a5:4d:ca:c8:bd:dc:
                    d6:38:f3:84:72:c4:aa:b2:d2:69:30:1d:23:1b:55:
                    65:96:57:cc:6f:b4:1e:e5:52:4e:9d:82:24:5c:bc:
                    c6:61:09:17:15:07:89:b2:fc:5f:76:4c:6c:46:7b:
                    9c:47:fe:0b:bf:cf:ea:bb:87:e1:ed:a6:ee:d2:4c:
                    b2:fa:15:39:d0:5a:37:2b:15:cc:5e:70:86:74:8d:
                    0c:66:03:b7:d4:b2:ea:55:69:83:f2:ca:0f:b5:f9:
                    90:bb:57:a4:d1:4e:0f:65:bf:e8:15:5e:01:18:45:
                    3b:3f:ef:37:8c:81:8e:c8:57:25:bd:82:0b:40:05:
                    bc:b9:98:b0:7e:5e:c4:64:e5:d2:d0:1d:61:1e:62:
                    cc:3f:0b:37:28:70:66:49:94:6f:e6:5e:a1:0d:2a:
                    70:58:62:24:8d:44:2a:75:b4:5e:70:9b:3e:a6:c8:
                    b8:5e:cc:03:a9:a8:7d:c4:4e:d0:c8:73:50:89:4c:
                    d2:ea:5b:fe:1f:04:26:9f:ae:5b:ce:8d:ac:9f:c1:
                    4b:9c:7d:90:1d:c1:78:5b:4f:99:73:cd:c8:85:6a:
                    1b:40:2b:4d:98:b8:1f:09:21:4f:93:7b:16:0a:bc:
                    13:64:2a:d1:85:ae:88:0b:06:02:79:2c:27:1e:21:
                    2f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:06:AA:85:08:8D:EC:92:86:8C:EE:D3:68:98:27:61:F6:72:39:C9
            X509v3 Authority Key Identifier:
                keyid:83:4E:98:FA:E7:25:A5:3E:37:42:A8:D4:ED:E8:53:F4:FF:63:B9:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g06Y-uclpT43QqjU7ehT9P9juRM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:43:86:72:ef:3a:54:59:3a:f1:62:17:3a:1d:01:d6:f0:85:
         8d:fc:52:a6:a2:3c:aa:7d:62:33:bb:8e:0b:2f:cc:c2:04:9c:
         b3:ed:33:44:c6:de:6f:04:31:74:38:8c:a3:9b:a2:36:0a:7b:
         99:a8:d8:94:80:2a:b9:d1:7e:1d:91:de:1c:32:95:08:88:c7:
         9e:0d:c3:f6:70:71:62:59:e9:aa:89:a6:68:14:14:f1:9a:59:
         f4:05:56:01:03:8b:d5:84:d7:35:4f:ca:72:36:e2:18:c4:6d:
         a2:53:e6:93:10:92:bb:cd:d6:aa:2b:f9:8b:45:e2:bf:72:aa:
         0a:84:23:1f:a0:84:41:bc:77:89:35:77:c2:d5:c3:ab:f4:19:
         49:c3:bb:a1:96:c2:9f:65:de:4c:17:aa:6f:e8:ae:06:21:fb:
         98:de:52:a3:fb:29:b4:84:67:8c:84:67:7e:ab:08:25:cc:3e:
         47:69:08:80:d0:6a:48:30:78:28:fd:17:c8:81:9d:8a:3b:c4:
         35:c8:08:d1:f8:f7:bf:11:d1:95:0d:ff:ce:56:c1:2c:f5:0b:
         49:f2:48:e4:2a:a9:64:34:57:7d:dd:15:14:33:e1:f0:4c:e0:
         05:55:4c:c5:7d:cf:04:c8:91:e2:4c:41:e8:d5:c1:40:e6:37:
         7e:a9:29:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 09:34:01 2025 by rpki-client