Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/79715e-5003-4156-9eaa-7fb3de39452d/1/k-GLqM4XISJFCMHSc8xhzI_NjeQ.mft
File:                     k-GLqM4XISJFCMHSc8xhzI_NjeQ.mft (raw, json)
Hash identifier:          49tNI9oWXSE2I9Bd8V0RixTCcW8o675jQB6cSJvbP18=
Subject key identifier:   A1:32:1D:27:E5:D6:A0:32:E2:52:BF:2B:F5:BC:FB:80:29:E3:28:DD
Authority key identifier: 93:E1:8B:A8:CE:17:21:22:45:08:C1:D2:73:CC:61:CC:8F:CD:8D:E4
Certificate issuer:       /CN=93e18ba8ce1721224508c1d273cc61cc8fcd8de4
Certificate serial:       019752A22FA8018ED5CA6A00F299163A5D3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k-GLqM4XISJFCMHSc8xhzI_NjeQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/79715e-5003-4156-9eaa-7fb3de39452d/1/k-GLqM4XISJFCMHSc8xhzI_NjeQ.mft
Manifest number:          0D4B
Signing time:             Mon 09 Jun 2025 03:00:50 +0000
Manifest this update:     Mon 09 Jun 2025 03:00:50 +0000
Manifest next update:     Tue 10 Jun 2025 03:00:50 +0000
Files and hashes:         1: k-GLqM4XISJFCMHSc8xhzI_NjeQ.crl (hash: ACd5reBAl9NJfeKbhAZgX5C3VLY3WfuGOXkOe1JR1B4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/79715e-5003-4156-9eaa-7fb3de39452d/1/k-GLqM4XISJFCMHSc8xhzI_NjeQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/79715e-5003-4156-9eaa-7fb3de39452d/1/k-GLqM4XISJFCMHSc8xhzI_NjeQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k-GLqM4XISJFCMHSc8xhzI_NjeQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 03:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:52:a2:2f:a8:01:8e:d5:ca:6a:00:f2:99:16:3a:5d:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93e18ba8ce1721224508c1d273cc61cc8fcd8de4
        Validity
            Not Before: Jun  9 03:00:50 2025 GMT
            Not After : Jun 10 03:00:50 2025 GMT
        Subject: CN=a1321d27e5d6a032e252bf2bf5bcfb8029e328dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:95:7f:39:c8:93:f3:6f:5a:84:09:7c:57:27:
                    0c:2d:bf:1e:fa:8a:4d:8e:b8:28:6b:56:62:02:4c:
                    a6:39:1d:6b:7d:25:fa:2c:18:c2:92:2e:55:b7:0a:
                    a5:65:d3:1a:e8:6d:f3:2c:25:7c:c5:0a:38:9f:04:
                    86:e7:c0:32:df:5a:4d:ff:9b:ee:d3:eb:97:d5:58:
                    be:f6:8d:0d:9b:19:a9:02:62:2c:52:8a:a5:c3:1f:
                    ae:9d:45:2a:a4:bb:d9:5b:32:b8:1e:09:da:34:4e:
                    c0:1c:3d:f3:ee:ef:9b:93:9b:df:9d:7a:21:53:99:
                    22:8a:2f:18:c7:dc:62:5f:d0:0e:4f:0d:0f:8f:4e:
                    ff:c2:70:ce:9d:b7:41:7f:3d:5a:40:55:08:33:6b:
                    3d:00:11:e9:1a:1c:34:bd:ed:a3:32:b2:d4:a1:da:
                    c7:e2:63:72:b7:c8:51:a8:22:75:cc:eb:c5:ba:f4:
                    52:82:4b:08:dd:24:9b:c1:24:c6:b2:0c:45:ea:63:
                    7a:66:b0:47:c5:e7:2c:06:35:4f:69:52:15:be:12:
                    5e:d9:2f:8a:b8:3f:f7:0a:73:b6:df:22:49:51:e1:
                    32:d6:f8:47:83:b8:ae:61:70:85:f7:a7:4d:4a:28:
                    e9:7a:59:93:0e:1c:aa:c6:2d:61:60:8e:1e:3d:ce:
                    9d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:32:1D:27:E5:D6:A0:32:E2:52:BF:2B:F5:BC:FB:80:29:E3:28:DD
            X509v3 Authority Key Identifier:
                keyid:93:E1:8B:A8:CE:17:21:22:45:08:C1:D2:73:CC:61:CC:8F:CD:8D:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-GLqM4XISJFCMHSc8xhzI_NjeQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/79715e-5003-4156-9eaa-7fb3de39452d/1/k-GLqM4XISJFCMHSc8xhzI_NjeQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/79715e-5003-4156-9eaa-7fb3de39452d/1/k-GLqM4XISJFCMHSc8xhzI_NjeQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:fb:b6:b2:95:47:de:d6:8e:08:71:c1:cf:2f:fb:84:66:4b:
         12:d3:7b:ab:1b:f3:95:6c:6e:e8:c8:ab:0d:1f:c2:45:05:5c:
         c6:bd:81:d0:df:fa:fb:87:06:a2:20:02:4b:37:5a:1d:1d:f2:
         c8:0d:b7:cb:b2:38:68:97:5b:76:13:c4:b6:a1:53:d7:3d:63:
         04:1a:dd:31:73:e0:0b:8e:57:cc:ec:47:18:e7:43:be:66:85:
         f7:01:0a:77:a5:d8:3c:39:79:6d:8a:14:5e:97:95:2d:d0:a3:
         ed:83:e2:da:b0:33:2e:82:b2:41:d7:69:e6:86:47:45:f9:7d:
         ca:3b:db:9d:a2:32:12:d8:03:53:b5:2f:e9:0b:4e:f1:d6:ab:
         c1:3c:64:cd:ec:cf:b9:49:56:7a:fe:bb:21:d0:72:1a:cf:08:
         ff:d8:c8:9e:64:99:14:3b:8f:ec:ea:9e:05:a4:9d:9b:61:45:
         3d:b6:0b:bf:b5:96:70:91:ee:6e:3e:dc:85:58:37:92:32:95:
         8a:60:5d:cf:9d:0f:7e:94:3a:77:bc:b6:f0:a0:99:f0:cc:4b:
         90:ea:34:83:f2:0f:d3:d9:22:8d:57:53:29:23:83:57:93:1f:
         0e:b7:e8:c5:13:59:7e:57:8c:15:d9:90:58:5f:1b:6c:f4:7b:
         f5:5e:76:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 13:19:55 2025 by rpki-client