Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/786319-ff5f-412f-aa74-caad51694e97/1/qXJG_EMZM_Cyggztllx4URgLFe4.mft
File:                     qXJG_EMZM_Cyggztllx4URgLFe4.mft (raw, json)
Hash identifier:          2hI6Vg6Ln951YFbtNZSUsrKtPCfy2Llq5eKxLNj7qOM=
Subject key identifier:   28:FE:7A:86:1E:AC:2F:0C:7D:2D:A0:FB:A1:F5:4D:9B:05:32:F6:81
Authority key identifier: A9:72:46:FC:43:19:33:F0:B2:82:0C:ED:96:5C:78:51:18:0B:15:EE
Certificate issuer:       /CN=a97246fc431933f0b2820ced965c7851180b15ee
Certificate serial:       01974DB2BB5E32B520D528EE6351DD6BE3FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qXJG_EMZM_Cyggztllx4URgLFe4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/786319-ff5f-412f-aa74-caad51694e97/1/qXJG_EMZM_Cyggztllx4URgLFe4.mft
Manifest number:          0927
Signing time:             Sun 08 Jun 2025 04:00:48 +0000
Manifest this update:     Sun 08 Jun 2025 04:00:48 +0000
Manifest next update:     Mon 09 Jun 2025 04:00:48 +0000
Files and hashes:         1: qXJG_EMZM_Cyggztllx4URgLFe4.crl (hash: rjK7wynZ0SfNKQ4E8Wai9evT9kLqUqKQLBCFR1zWLkI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/786319-ff5f-412f-aa74-caad51694e97/1/qXJG_EMZM_Cyggztllx4URgLFe4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/786319-ff5f-412f-aa74-caad51694e97/1/qXJG_EMZM_Cyggztllx4URgLFe4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qXJG_EMZM_Cyggztllx4URgLFe4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:b2:bb:5e:32:b5:20:d5:28:ee:63:51:dd:6b:e3:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a97246fc431933f0b2820ced965c7851180b15ee
        Validity
            Not Before: Jun  8 04:00:48 2025 GMT
            Not After : Jun  9 04:00:48 2025 GMT
        Subject: CN=28fe7a861eac2f0c7d2da0fba1f54d9b0532f681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e4:e6:df:7d:ab:89:c7:25:e9:c4:fd:c6:9f:
                    11:ab:ec:c2:41:77:e4:7f:d0:02:12:9a:94:46:53:
                    b9:c7:2a:66:32:15:54:77:cd:c7:a4:03:1e:6f:c0:
                    b6:c2:b6:8b:6b:ef:99:30:9f:b0:20:97:5d:e6:f8:
                    65:c6:66:4f:52:6f:cb:5b:52:06:c1:f0:a7:a1:61:
                    c7:00:37:25:8b:4f:40:23:ec:3c:00:b1:df:0d:05:
                    00:dd:a9:17:e8:0c:73:34:cf:6f:d0:1a:df:c9:fa:
                    6f:ae:76:ad:b5:f4:8c:70:d4:10:7f:2c:85:b1:2d:
                    b5:8e:6d:74:11:5b:81:34:f4:b1:56:71:0d:1c:50:
                    55:92:11:41:51:6c:65:0c:58:1e:d8:62:0f:0a:24:
                    eb:6f:f2:82:15:01:08:2b:7f:cf:56:eb:e5:e7:38:
                    89:20:96:07:dc:41:6c:89:b4:d5:e2:0b:9d:6d:97:
                    7c:65:29:21:05:2b:5e:42:bb:04:05:9b:a2:40:c3:
                    9f:98:2e:90:bc:ba:69:ee:f7:d8:1a:82:82:db:2f:
                    96:da:5c:60:ef:dd:28:ef:56:0a:b2:37:77:5f:5f:
                    be:c9:44:27:10:18:5c:7d:6f:13:22:83:fd:71:73:
                    fb:2b:1d:49:1c:2f:8f:e1:37:d0:c4:61:8b:0a:22:
                    e3:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:FE:7A:86:1E:AC:2F:0C:7D:2D:A0:FB:A1:F5:4D:9B:05:32:F6:81
            X509v3 Authority Key Identifier:
                keyid:A9:72:46:FC:43:19:33:F0:B2:82:0C:ED:96:5C:78:51:18:0B:15:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qXJG_EMZM_Cyggztllx4URgLFe4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/786319-ff5f-412f-aa74-caad51694e97/1/qXJG_EMZM_Cyggztllx4URgLFe4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/786319-ff5f-412f-aa74-caad51694e97/1/qXJG_EMZM_Cyggztllx4URgLFe4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:1c:51:1c:9c:4f:6d:69:ef:95:f4:ea:8e:9d:c3:10:2f:22:
         05:de:58:83:60:1b:bc:56:15:9f:a0:45:52:fc:5e:10:5e:e3:
         17:59:65:4d:75:d5:71:3d:7a:ef:81:c4:5d:f7:e3:31:9a:de:
         23:e8:42:cd:91:10:90:8f:34:e8:77:30:00:d7:84:8e:3c:b9:
         6e:4a:e0:f3:e6:b0:90:b3:f4:74:de:71:f7:b8:31:60:0c:d1:
         43:06:df:02:55:b6:1e:6c:24:c0:1d:93:d1:8c:f6:8b:84:e0:
         3a:28:ad:c0:5d:6b:e7:cb:8f:11:3f:0a:1e:fd:53:a1:5d:99:
         ef:91:dc:a1:60:1b:d1:2f:c6:dc:35:71:61:24:d2:95:89:00:
         51:6f:3f:c6:0e:e2:f4:bb:f1:5c:a7:dc:5c:04:9f:85:79:ef:
         35:c4:07:23:09:0f:c8:22:c6:29:94:63:5a:16:1a:64:84:54:
         38:a4:9c:30:6b:4f:76:f2:9d:70:ae:fb:74:f1:6c:0f:fe:ff:
         5b:3a:16:2c:f7:a6:a3:d8:b3:75:5d:34:03:96:6c:b2:66:2c:
         d2:17:15:3a:3b:5c:59:91:62:b1:d1:83:7a:ec:73:36:e9:93:
         37:72:b3:70:44:d1:dc:a1:a1:fd:5e:a0:d8:fe:c4:1b:1b:1d:
         00:74:61:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:54:42 2025 by rpki-client