Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.mft
File:                     1hWzvXsE9MBrKq_uljTs3BVy9Bc.mft (raw, json)
Hash identifier:          zmUGD8QuO++elTLYLhwrve/yhdUYYRMdx7PLgecRktM=
Subject key identifier:   F4:48:D5:6F:A9:F2:4E:77:BD:EF:1E:42:A9:1F:D9:A8:D6:28:A8:E6
Authority key identifier: D6:15:B3:BD:7B:04:F4:C0:6B:2A:AF:EE:96:34:EC:DC:15:72:F4:17
Certificate issuer:       /CN=d615b3bd7b04f4c06b2aafee9634ecdc1572f417
Certificate serial:       019759EE9022DE4BDBFC19C735C24B92C27F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1hWzvXsE9MBrKq_uljTs3BVy9Bc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.mft
Manifest number:          0A69
Signing time:             Tue 10 Jun 2025 13:01:36 +0000
Manifest this update:     Tue 10 Jun 2025 13:01:36 +0000
Manifest next update:     Wed 11 Jun 2025 13:01:36 +0000
Files and hashes:         1: 1hWzvXsE9MBrKq_uljTs3BVy9Bc.crl (hash: lAvDMBB6PZ1HPaJ0CGeuMtl54YipQIVpwKC42iY1rG0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1hWzvXsE9MBrKq_uljTs3BVy9Bc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 13:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:59:ee:90:22:de:4b:db:fc:19:c7:35:c2:4b:92:c2:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d615b3bd7b04f4c06b2aafee9634ecdc1572f417
        Validity
            Not Before: Jun 10 13:01:36 2025 GMT
            Not After : Jun 11 13:01:36 2025 GMT
        Subject: CN=f448d56fa9f24e77bdef1e42a91fd9a8d628a8e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:82:12:f6:0d:5a:50:b2:35:87:42:c9:c2:83:
                    97:2f:c5:7c:1a:ff:44:f8:d3:09:a5:d2:40:9c:c1:
                    b2:76:9d:c6:35:26:38:5a:9c:f3:53:d3:3e:18:66:
                    60:39:8f:7d:50:40:79:bb:fd:12:88:b6:ea:2c:cd:
                    5b:e2:5c:91:51:0a:36:64:bf:66:0a:50:85:18:a0:
                    91:9d:65:44:14:a9:49:a2:90:45:2a:f4:5b:5f:2f:
                    ae:0b:4f:11:c7:cf:c3:60:d1:d2:4c:9a:c1:28:c3:
                    1d:3d:40:58:3d:b1:6d:c6:e7:74:52:e5:64:0c:ba:
                    7c:83:09:4e:f9:04:cb:1e:8b:a4:60:49:e1:8c:38:
                    be:07:cc:f0:f0:13:80:dc:fe:9b:a9:f6:be:12:40:
                    fb:d2:00:68:d2:7a:9d:ec:60:d3:df:b2:d9:64:99:
                    b1:17:9e:43:9d:8b:6c:2e:82:9d:67:b3:21:d3:02:
                    b7:9b:09:b9:0d:93:44:f4:39:35:d2:9c:3f:b0:37:
                    ef:0c:64:5f:de:32:d0:b5:30:3b:38:2e:c0:c5:07:
                    b2:88:22:5e:47:09:85:d5:31:42:53:27:84:54:0a:
                    29:31:ba:01:14:ad:0b:46:26:6a:d2:f4:a7:aa:16:
                    e7:02:dc:f7:53:3d:e7:99:79:75:b1:b2:cf:62:2a:
                    92:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:48:D5:6F:A9:F2:4E:77:BD:EF:1E:42:A9:1F:D9:A8:D6:28:A8:E6
            X509v3 Authority Key Identifier:
                keyid:D6:15:B3:BD:7B:04:F4:C0:6B:2A:AF:EE:96:34:EC:DC:15:72:F4:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hWzvXsE9MBrKq_uljTs3BVy9Bc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:52:5e:e8:ec:c7:ab:46:b3:8b:17:3a:ab:bb:73:85:1d:a0:
         e1:af:ac:a4:ce:c5:46:8f:d0:49:ba:6a:fe:e2:ec:e5:57:e7:
         36:e7:c2:cf:3f:f9:d6:8b:f4:24:02:ad:f7:78:54:5c:06:96:
         b4:8e:4d:91:96:ff:68:27:c8:ec:ae:15:1b:9a:5d:5d:6d:b1:
         d3:a8:06:84:46:ae:eb:94:3c:c9:28:12:8a:28:9d:50:5c:67:
         6d:a7:47:50:70:9f:23:4d:ad:68:25:b6:3e:01:07:a8:17:4e:
         4a:09:08:25:05:f2:59:72:e8:75:81:1b:5a:b3:a1:0b:97:56:
         ec:5b:a7:f0:83:f3:db:90:22:7b:f0:29:99:e1:da:f2:b5:96:
         0f:b2:9f:5b:b5:bc:23:5f:f1:17:d5:a4:23:c8:16:97:e8:fb:
         0f:df:02:f7:77:e9:c2:04:e4:7d:14:62:16:4a:26:90:81:d8:
         e2:16:84:17:8d:c3:f7:5f:b6:94:08:b0:39:55:9f:9a:92:55:
         c2:76:81:98:bf:78:c1:c7:9b:da:51:85:69:88:a7:24:14:e9:
         4a:12:e5:ff:91:47:8d:d0:54:ec:be:cf:61:ea:00:b6:a2:1c:
         03:bb:56:d5:3b:58:f5:bb:af:0a:94:0a:53:1d:ce:72:1e:52:
         19:7e:a8:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 19:25:28 2025 by rpki-client