Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/287870-0e1b-4cd2-8f24-6710e96a1b6f/1/q33wfyEEN2kvd-7DRpuaSCuW0ao.mft
File:                     q33wfyEEN2kvd-7DRpuaSCuW0ao.mft (raw, json)
Hash identifier:          mcUnbol8YrHdL//2yjxdu6s1eU6lpwakA9vjrV9KItA=
Subject key identifier:   4F:77:E0:56:DF:C2:59:BB:25:96:90:40:B9:78:57:F0:1D:8A:9D:00
Authority key identifier: AB:7D:F0:7F:21:04:37:69:2F:77:EE:C3:46:9B:9A:48:2B:96:D1:AA
Certificate issuer:       /CN=ab7df07f210437692f77eec3469b9a482b96d1aa
Certificate serial:       01974B8D9D128D4F159390C562BEE44014FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q33wfyEEN2kvd-7DRpuaSCuW0ao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/287870-0e1b-4cd2-8f24-6710e96a1b6f/1/q33wfyEEN2kvd-7DRpuaSCuW0ao.mft
Manifest number:          0512
Signing time:             Sat 07 Jun 2025 18:01:01 +0000
Manifest this update:     Sat 07 Jun 2025 18:01:01 +0000
Manifest next update:     Sun 08 Jun 2025 18:01:01 +0000
Files and hashes:         1: q33wfyEEN2kvd-7DRpuaSCuW0ao.crl (hash: J41bwmlvqfVP6TRXlzj1kKWMHuTz4JTJ0IjOUAkgDq0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/287870-0e1b-4cd2-8f24-6710e96a1b6f/1/q33wfyEEN2kvd-7DRpuaSCuW0ao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/287870-0e1b-4cd2-8f24-6710e96a1b6f/1/q33wfyEEN2kvd-7DRpuaSCuW0ao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q33wfyEEN2kvd-7DRpuaSCuW0ao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:8d:9d:12:8d:4f:15:93:90:c5:62:be:e4:40:14:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab7df07f210437692f77eec3469b9a482b96d1aa
        Validity
            Not Before: Jun  7 18:01:01 2025 GMT
            Not After : Jun  8 18:01:01 2025 GMT
        Subject: CN=4f77e056dfc259bb25969040b97857f01d8a9d00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:90:dc:57:a0:e6:8d:2e:8a:d4:7b:8a:29:89:
                    27:72:a4:14:71:b0:1f:12:76:34:92:c0:2c:a2:59:
                    68:5d:61:f2:e7:68:36:1e:d1:b4:6a:24:6b:8c:60:
                    58:ac:7b:72:84:36:d9:5d:f6:ad:1c:8d:7d:c8:87:
                    71:55:18:2e:e1:8b:79:27:c6:ba:e0:d7:6d:14:46:
                    b9:23:7a:ca:fb:12:82:dd:98:7d:e6:0a:73:f9:a6:
                    a3:ad:1f:dd:63:24:7b:b9:cd:db:bb:dd:1a:34:11:
                    ac:57:a9:39:26:7c:ee:62:ff:f8:dd:0b:c3:d9:f3:
                    59:df:c5:16:64:3f:6d:60:4a:51:dc:0b:a0:c5:c9:
                    38:fe:26:74:ea:22:83:cf:10:00:49:36:74:3a:e1:
                    ea:72:9c:9d:d4:79:cf:43:91:be:74:1a:f4:00:30:
                    3f:3c:27:6c:ff:3e:66:bb:41:c7:70:60:b7:91:ed:
                    5b:98:97:bc:93:fb:7b:ec:61:b6:13:ef:06:8d:29:
                    d7:02:c6:55:5c:73:17:c0:00:5e:4a:39:a8:d8:26:
                    62:06:9e:08:d3:48:cc:a2:37:09:af:74:f4:9d:7e:
                    20:a1:d3:b2:7b:1e:93:03:9f:46:c4:38:6c:8a:1c:
                    db:2e:bc:de:c8:62:e5:c0:7d:e6:59:70:03:b0:41:
                    5d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:77:E0:56:DF:C2:59:BB:25:96:90:40:B9:78:57:F0:1D:8A:9D:00
            X509v3 Authority Key Identifier:
                keyid:AB:7D:F0:7F:21:04:37:69:2F:77:EE:C3:46:9B:9A:48:2B:96:D1:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q33wfyEEN2kvd-7DRpuaSCuW0ao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/287870-0e1b-4cd2-8f24-6710e96a1b6f/1/q33wfyEEN2kvd-7DRpuaSCuW0ao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/287870-0e1b-4cd2-8f24-6710e96a1b6f/1/q33wfyEEN2kvd-7DRpuaSCuW0ao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:85:8c:86:ad:ca:11:d8:6c:28:fe:17:94:32:29:68:7c:c0:
         c3:c1:f7:0f:fa:3d:d6:d7:22:f2:aa:6f:13:37:6b:7c:89:99:
         e2:40:ff:6c:57:2c:81:fe:ab:9d:a9:8c:01:a0:5c:bd:16:4f:
         35:30:88:4a:3d:13:77:6b:7c:d8:c7:3a:12:f8:4a:8b:86:c0:
         20:3f:21:b9:07:7f:d3:a1:f6:b8:d1:c7:ce:b8:0e:0e:e9:39:
         4e:00:27:60:14:ec:e5:68:38:c9:16:00:dc:b5:de:2f:64:fa:
         c0:fb:3f:12:c3:8f:5c:76:a4:61:20:fb:66:2b:50:99:cf:2c:
         ff:1a:91:4c:c0:95:e7:ee:ab:c4:2b:54:2b:aa:fb:1c:50:48:
         03:eb:20:34:16:57:e8:1d:e9:c5:7e:06:f8:a8:cd:48:d3:f3:
         a2:e3:fd:d8:91:51:7d:9c:96:c4:89:43:98:b6:45:3e:89:7f:
         b4:f6:90:d8:dc:49:88:a7:72:ad:17:96:8d:d6:44:df:35:50:
         af:54:f1:09:e2:23:5a:d7:36:b7:0e:2f:41:e1:28:9e:8d:fd:
         4c:86:8a:56:3f:04:f9:97:f2:41:2b:b3:92:f2:b3:43:f7:9b:
         e1:1a:8e:b8:f0:7f:c4:6d:13:bb:34:2a:ab:8b:fd:ed:ea:86:
         42:a2:2d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:57:07 2025 by rpki-client