Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft
File:                     61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft (raw, json)
Hash identifier:          WExCzWpzKfgdVbQx3fL/DYr2t7wYSe6axN90rILJmSc=
Subject key identifier:   FF:0B:5C:F8:24:FF:C5:BD:C8:35:68:77:D2:32:02:1D:09:6A:24:C5
Authority key identifier: EB:50:B4:39:D4:88:E1:B1:A6:9E:35:86:09:86:21:95:6C:0E:DC:7B
Certificate issuer:       /CN=eb50b439d488e1b1a69e3586098621956c0edc7b
Certificate serial:       01974A7AB62DD291D8B2771D7C5FBBD86F90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/61C0OdSI4bGmnjWGCYYhlWwO3Hs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft
Manifest number:          0B77
Signing time:             Sat 07 Jun 2025 13:00:45 +0000
Manifest this update:     Sat 07 Jun 2025 13:00:45 +0000
Manifest next update:     Sun 08 Jun 2025 13:00:45 +0000
Files and hashes:         1: 61C0OdSI4bGmnjWGCYYhlWwO3Hs.crl (hash: YKGFzCHpMADF3D9n0ni2Ra/Vne9F5om0JMgfYO1H1oE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/61C0OdSI4bGmnjWGCYYhlWwO3Hs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 11:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:7a:b6:2d:d2:91:d8:b2:77:1d:7c:5f:bb:d8:6f:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb50b439d488e1b1a69e3586098621956c0edc7b
        Validity
            Not Before: Jun  7 13:00:45 2025 GMT
            Not After : Jun  8 13:00:45 2025 GMT
        Subject: CN=ff0b5cf824ffc5bdc8356877d232021d096a24c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:07:30:71:8a:53:c7:1a:ae:ea:0c:84:ff:58:
                    4b:b3:60:27:d7:6e:9c:25:b7:44:88:34:19:f6:50:
                    bb:38:33:15:bb:95:b7:71:8d:1d:55:9e:f4:84:56:
                    5a:8a:6f:8f:92:a3:61:1a:64:ea:d1:b0:bc:ca:1e:
                    a1:3e:d3:e3:9e:a5:a0:99:8f:13:48:ea:44:ca:33:
                    ab:37:bb:ed:ac:da:81:51:12:ca:ba:d6:c0:13:57:
                    5f:7f:8d:7f:26:83:c7:d3:1d:f5:ca:6c:9e:36:0f:
                    65:dd:f2:fc:f8:5c:b9:59:2c:38:2e:54:0b:88:3f:
                    4a:42:77:5d:f5:4f:8f:fd:f6:c1:5e:d0:fb:29:18:
                    71:46:b6:70:6c:c5:34:13:9c:b5:53:34:8d:42:ad:
                    1b:50:1b:2e:33:ce:ab:8c:fa:2c:96:bc:a8:6b:1b:
                    ce:0e:8c:60:1a:9c:8a:c9:1b:36:34:d5:71:bd:60:
                    26:ab:c7:65:fe:04:17:e0:42:6e:34:f4:46:ff:c1:
                    d6:ea:6e:fc:3b:03:59:aa:d9:42:10:5c:73:f4:4f:
                    a5:cf:28:0b:8d:f5:be:b2:db:cb:92:e6:ec:05:5d:
                    28:26:1a:13:4c:8c:82:2a:b8:27:b2:2c:5b:52:ee:
                    20:0b:fd:af:9b:40:12:e7:7b:f3:b7:85:89:93:7c:
                    ea:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:0B:5C:F8:24:FF:C5:BD:C8:35:68:77:D2:32:02:1D:09:6A:24:C5
            X509v3 Authority Key Identifier:
                keyid:EB:50:B4:39:D4:88:E1:B1:A6:9E:35:86:09:86:21:95:6C:0E:DC:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61C0OdSI4bGmnjWGCYYhlWwO3Hs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:53:cb:e6:4e:a1:5c:e8:2c:3a:f7:fe:82:f6:1e:47:b5:5e:
         a1:5b:d2:1f:af:89:74:26:9c:f0:93:6d:74:2b:8c:53:41:9c:
         b2:16:d9:5c:d6:0e:42:34:f0:e9:e0:e5:52:de:f7:b8:6f:13:
         57:7a:9a:22:d5:b2:b8:58:5e:ea:44:4d:2c:5f:c4:12:90:f8:
         5c:3d:0f:67:7a:eb:74:eb:31:99:59:fa:1b:57:ab:ff:2f:4b:
         fd:d0:bd:b3:59:e8:dc:c6:c3:95:74:9a:48:45:92:58:a7:97:
         ae:f3:89:d0:c5:d0:9a:e0:c6:19:24:57:db:e1:a1:b9:0e:5e:
         fd:62:97:cf:78:78:9a:04:ce:bf:04:4f:fe:64:90:bd:96:26:
         90:62:89:19:1c:3e:c5:6a:f6:06:50:a0:4a:d7:53:ce:b3:b4:
         97:7c:df:7b:aa:b9:95:74:6b:34:83:17:a8:2f:af:12:23:21:
         42:d4:c4:6b:41:09:ed:e5:ad:69:2f:22:40:d3:72:91:31:aa:
         ca:3b:71:90:95:41:30:6e:0c:48:0b:60:fb:d4:3e:00:79:06:
         2d:34:93:49:b5:1c:ae:1c:5e:44:0b:5c:a8:ce:da:85:74:f9:
         2c:c4:2d:21:71:62:cb:ed:b1:66:cf:82:49:6c:39:06:ac:7b:
         b5:39:e0:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:15:12 2025 by rpki-client