Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/774248-0165-4ac3-8258-af84cdb14089/1/rmmejy1W6TrqTaYW2HK2VX1w35c.mft
File:                     rmmejy1W6TrqTaYW2HK2VX1w35c.mft (raw, json)
Hash identifier:          n1W7nqNuSnSWSTw8octSkTZziu4cZ761oFs1rE8LZMs=
Subject key identifier:   C3:10:60:FD:45:C4:81:C8:DD:85:EF:A8:A8:32:7A:03:E5:38:17:28
Authority key identifier: AE:69:9E:8F:2D:56:E9:3A:EA:4D:A6:16:D8:72:B6:55:7D:70:DF:97
Certificate issuer:       /CN=ae699e8f2d56e93aea4da616d872b6557d70df97
Certificate serial:       01974C69446F3E4E4B47978FB2582DD4CE2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rmmejy1W6TrqTaYW2HK2VX1w35c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/774248-0165-4ac3-8258-af84cdb14089/1/rmmejy1W6TrqTaYW2HK2VX1w35c.mft
Manifest number:          0562
Signing time:             Sat 07 Jun 2025 22:00:56 +0000
Manifest this update:     Sat 07 Jun 2025 22:00:56 +0000
Manifest next update:     Sun 08 Jun 2025 22:00:56 +0000
Files and hashes:         1: rmmejy1W6TrqTaYW2HK2VX1w35c.crl (hash: E76xEpKL5TGi6VIH8LtPKv9wnECcO7LRgg9QCcRXWEw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/774248-0165-4ac3-8258-af84cdb14089/1/rmmejy1W6TrqTaYW2HK2VX1w35c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/774248-0165-4ac3-8258-af84cdb14089/1/rmmejy1W6TrqTaYW2HK2VX1w35c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rmmejy1W6TrqTaYW2HK2VX1w35c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 22:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:69:44:6f:3e:4e:4b:47:97:8f:b2:58:2d:d4:ce:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae699e8f2d56e93aea4da616d872b6557d70df97
        Validity
            Not Before: Jun  7 22:00:56 2025 GMT
            Not After : Jun  8 22:00:56 2025 GMT
        Subject: CN=c31060fd45c481c8dd85efa8a8327a03e5381728
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ac:ed:03:43:65:17:a1:a5:40:db:a5:82:ad:
                    99:84:57:05:39:7d:33:ad:ca:b1:2b:9b:f9:1c:5c:
                    35:0d:b5:65:34:cd:e1:c9:d1:06:39:64:1b:21:c5:
                    ae:7e:99:9e:b0:95:91:f2:a0:55:c6:27:fc:0d:97:
                    ae:93:04:b8:9d:1c:9b:f6:d9:6d:26:c4:46:f9:24:
                    d3:e2:f0:ac:7d:08:53:12:45:3b:9b:d3:0b:d0:fc:
                    94:c3:6c:1f:e4:f5:b6:99:b1:f6:94:1e:bb:de:25:
                    0c:36:df:27:f3:52:33:e9:47:47:e0:69:e4:bb:aa:
                    9d:e1:c2:e0:f5:72:ee:0b:8f:4c:ac:9d:0a:3c:4e:
                    f5:1e:35:e8:f7:b4:b3:b9:55:49:61:59:d9:32:8b:
                    f8:33:ca:5d:66:17:fe:a1:8a:c1:df:31:62:3b:3a:
                    85:5b:40:72:40:6f:7c:98:3a:6f:5e:d5:ac:69:f5:
                    75:fc:1e:f6:8d:d3:d1:2f:07:13:1a:0b:3a:c7:81:
                    91:ca:7a:bc:7b:10:11:64:f8:65:64:86:c5:5f:22:
                    e2:83:2f:4b:71:f9:02:9d:49:e1:bb:e8:ae:af:73:
                    e7:ee:37:5c:e2:09:46:e1:d1:c8:e3:b2:23:c9:0a:
                    b5:fd:6f:27:d9:65:70:d2:7d:6f:d9:d0:b4:a5:73:
                    a0:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:10:60:FD:45:C4:81:C8:DD:85:EF:A8:A8:32:7A:03:E5:38:17:28
            X509v3 Authority Key Identifier:
                keyid:AE:69:9E:8F:2D:56:E9:3A:EA:4D:A6:16:D8:72:B6:55:7D:70:DF:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmmejy1W6TrqTaYW2HK2VX1w35c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/774248-0165-4ac3-8258-af84cdb14089/1/rmmejy1W6TrqTaYW2HK2VX1w35c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/774248-0165-4ac3-8258-af84cdb14089/1/rmmejy1W6TrqTaYW2HK2VX1w35c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dc:bf:dc:a7:60:61:f5:30:45:8b:fb:a5:c0:c6:5d:47:bb:9c:
         89:e1:3c:a7:d4:fc:04:4a:e9:36:77:5d:0b:75:d7:32:90:b0:
         38:e6:26:fd:7e:ab:93:94:9c:8d:85:cf:0f:14:90:0e:4c:00:
         3b:4f:59:ac:e6:85:cc:86:03:81:a2:f5:9a:13:37:ee:38:8e:
         4e:61:4a:77:d9:7f:e4:bd:33:54:be:ad:bc:05:91:ac:fb:cb:
         2a:dc:bb:93:a9:44:cf:89:1b:fb:42:b1:99:62:5d:cb:6e:b5:
         98:a4:49:17:12:f4:60:12:3b:d8:6f:46:05:af:70:f9:eb:4b:
         2e:07:5c:2a:77:50:50:37:af:20:8e:9e:39:4e:26:93:18:ea:
         0a:30:67:e7:43:d9:f8:d1:ad:23:82:04:4d:22:c7:c3:64:db:
         2d:65:03:da:1f:01:12:4a:ff:25:dc:84:d5:29:09:5a:b2:50:
         27:2b:52:ee:3e:4b:24:62:1b:f0:d6:10:82:0c:14:82:a3:ef:
         75:cb:85:74:4c:d3:2c:5e:07:01:7d:12:47:46:52:77:9c:2d:
         5e:39:0e:92:9b:1d:3c:62:b9:e0:4c:6a:bd:19:4d:08:ab:66:
         01:32:d4:91:e2:70:6b:5b:54:74:99:bf:f2:28:43:6a:f2:6e:
         fd:cf:4b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:48:12 2025 by rpki-client