Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.mft
File:                     g4fa4eZQhWzIVx5GLr2evrZccDg.mft (raw, json)
Hash identifier:          yM2PyuqEDpkJauSXoYEBciTfanIBUyjxCxx9GtV2TmA=
Subject key identifier:   07:8B:76:AB:F9:EB:B6:9C:FD:4C:41:FF:1A:B9:82:5F:6F:D5:73:F4
Authority key identifier: 83:87:DA:E1:E6:50:85:6C:C8:57:1E:46:2E:BD:9E:BE:B6:5C:70:38
Certificate issuer:       /CN=8387dae1e650856cc8571e462ebd9ebeb65c7038
Certificate serial:       01974A7A7C5924056CD1B053A8E619AC311D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g4fa4eZQhWzIVx5GLr2evrZccDg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.mft
Manifest number:          157A
Signing time:             Sat 07 Jun 2025 13:00:30 +0000
Manifest this update:     Sat 07 Jun 2025 13:00:30 +0000
Manifest next update:     Sun 08 Jun 2025 13:00:30 +0000
Files and hashes:         1: g4fa4eZQhWzIVx5GLr2evrZccDg.crl (hash: HPW6sQ+4vYgSCwcbWaLiDt4yjAeHcEUK+VmlSVMFXd0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g4fa4eZQhWzIVx5GLr2evrZccDg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:7a:7c:59:24:05:6c:d1:b0:53:a8:e6:19:ac:31:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8387dae1e650856cc8571e462ebd9ebeb65c7038
        Validity
            Not Before: Jun  7 13:00:30 2025 GMT
            Not After : Jun  8 13:00:30 2025 GMT
        Subject: CN=078b76abf9ebb69cfd4c41ff1ab9825f6fd573f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:2d:8e:bf:9e:c1:9d:6d:f6:77:f5:fc:bb:45:
                    c6:96:65:9c:cb:32:e8:f9:33:c8:05:5b:46:c6:51:
                    c3:f1:56:34:28:50:ba:25:94:60:b0:84:3f:74:88:
                    1c:fa:5e:84:1d:c1:df:5a:4f:92:17:c5:3b:a7:0a:
                    c3:ae:4e:34:e3:82:c2:e5:f7:f9:10:d7:53:2d:e3:
                    d1:ac:cc:d3:24:43:38:de:2b:80:5d:8a:6f:1e:5c:
                    29:ac:c6:80:a0:d0:51:8f:7c:58:e4:1a:73:ff:ae:
                    ec:99:a4:5e:dc:99:54:7e:9a:b4:1e:25:22:a4:4e:
                    64:80:69:82:d0:2a:4e:bd:60:3c:b3:94:29:dd:42:
                    c6:99:c4:1e:9d:67:7a:74:15:33:94:bc:12:40:a8:
                    ca:b9:96:db:9a:3e:87:05:23:ef:c3:34:0f:12:0e:
                    e8:cb:c5:fa:a0:f5:98:72:42:95:e4:35:7d:6c:c7:
                    f2:58:df:fd:fe:38:9d:0b:78:96:11:0c:3e:29:6c:
                    bf:7d:28:69:fa:f9:0a:41:ab:02:fd:c8:00:8c:d2:
                    11:f4:c6:99:28:53:04:b3:72:30:c7:41:81:d1:0b:
                    2f:b2:cd:a3:04:0d:a3:03:b4:ed:d1:2a:aa:dd:ee:
                    38:e8:c2:88:6d:86:fe:c4:59:51:d1:51:36:d1:84:
                    b2:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:8B:76:AB:F9:EB:B6:9C:FD:4C:41:FF:1A:B9:82:5F:6F:D5:73:F4
            X509v3 Authority Key Identifier:
                keyid:83:87:DA:E1:E6:50:85:6C:C8:57:1E:46:2E:BD:9E:BE:B6:5C:70:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4fa4eZQhWzIVx5GLr2evrZccDg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:14:d1:8f:51:a9:0a:99:2d:47:ec:98:03:15:52:d1:e5:4c:
         57:61:1a:40:e0:57:9b:6b:b3:73:02:f4:aa:a4:06:92:fd:c6:
         50:bf:4d:c6:06:f7:a8:6e:57:48:96:c8:39:f3:c0:1d:4f:3a:
         c1:0f:fe:e7:62:b7:02:c0:d7:4a:c3:e0:5a:e9:2b:9a:3b:5b:
         43:ee:58:99:b1:49:19:88:89:be:da:68:d8:94:24:61:49:c8:
         0f:ee:ce:f9:3b:95:9c:f6:79:28:43:87:05:9a:3d:d9:41:6e:
         bb:69:06:b4:2c:d6:f8:98:22:3c:13:cd:16:c2:ac:6c:48:ab:
         bb:81:9f:95:ba:a7:6f:0b:94:cb:f0:c6:1a:f0:a1:27:35:e4:
         18:49:25:2a:0a:fb:f0:99:fc:10:5e:c8:73:33:87:38:f9:49:
         53:1e:a3:0c:34:68:10:09:02:c3:a4:8d:05:8d:40:51:35:09:
         43:c3:3f:c9:62:07:fc:99:ce:57:f3:3e:60:5d:29:34:ca:81:
         07:66:61:62:36:a0:83:bd:4f:3c:a6:e8:a5:29:41:87:6a:f7:
         68:39:47:13:8e:c2:88:c1:98:30:02:36:f7:25:2b:55:06:55:
         18:44:ea:cb:88:ee:7e:f0:dc:be:c5:b5:8b:58:ae:35:fa:9f:
         99:a4:75:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:21:19 2025 by rpki-client