Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/c7mBy27nnS34yJ1qNMVUveP8x18.mft
File:                     c7mBy27nnS34yJ1qNMVUveP8x18.mft (raw, json)
Hash identifier:          6OlFLNveUJRN6ZwQ5twtWJkmurxVkU0nYbv+vsB6mRw=
Subject key identifier:   B3:AC:90:94:06:98:EA:DA:AF:C9:99:83:07:FC:AC:21:2F:D8:87:4D
Authority key identifier: 73:B9:81:CB:6E:E7:9D:2D:F8:C8:9D:6A:34:C5:54:BD:E3:FC:C7:5F
Certificate issuer:       /CN=73b981cb6ee79d2df8c89d6a34c554bde3fcc75f
Certificate serial:       01974BFB350D201020822E6D5D44B95AC019
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c7mBy27nnS34yJ1qNMVUveP8x18.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/c7mBy27nnS34yJ1qNMVUveP8x18.mft
Manifest number:          0965
Signing time:             Sat 07 Jun 2025 20:00:43 +0000
Manifest this update:     Sat 07 Jun 2025 20:00:43 +0000
Manifest next update:     Sun 08 Jun 2025 20:00:43 +0000
Files and hashes:         1: c7mBy27nnS34yJ1qNMVUveP8x18.crl (hash: 7fl3XIOwNhyVQSD3lpuKzJla8/5hBh74lXnmWiDFolU=)
                          2: pP7tyuuRn66UIb06Z8juPizzBlI.roa (hash: vMVBYtNtS/yDZwAn3TTK359AmlCLqfTH6tG5fmDA5mE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/c7mBy27nnS34yJ1qNMVUveP8x18.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/c7mBy27nnS34yJ1qNMVUveP8x18.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c7mBy27nnS34yJ1qNMVUveP8x18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:fb:35:0d:20:10:20:82:2e:6d:5d:44:b9:5a:c0:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73b981cb6ee79d2df8c89d6a34c554bde3fcc75f
        Validity
            Not Before: Jun  7 20:00:43 2025 GMT
            Not After : Jun  8 20:00:43 2025 GMT
        Subject: CN=b3ac90940698eadaafc9998307fcac212fd8874d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a0:78:96:b8:c2:7f:d8:c7:a2:ea:b6:27:1a:
                    6e:fb:ad:9d:24:72:96:d8:38:75:73:37:3e:92:3d:
                    87:7b:c7:cd:8a:f6:e8:3b:85:0e:7b:82:e9:20:16:
                    87:50:7e:df:c0:ee:9a:ba:67:f0:b0:2c:4e:7e:d2:
                    bc:c6:ba:04:8c:19:12:4b:ee:83:87:fe:fe:93:e7:
                    3d:46:b6:a2:f4:e4:fe:91:38:b3:a7:25:a2:72:02:
                    e4:37:d5:26:71:7f:e3:d8:57:dd:85:25:26:bf:3a:
                    42:a8:90:71:b7:c6:23:2a:51:f3:89:25:e1:f8:d7:
                    4f:c8:f3:28:9b:1b:80:4c:11:b2:56:b0:21:c0:51:
                    b4:10:27:ea:61:be:67:4b:a0:1b:46:6e:98:18:0e:
                    e9:6f:90:49:9e:84:db:64:c4:71:c2:07:62:b1:67:
                    ee:44:20:b2:c2:13:32:e1:5b:88:76:86:f1:3f:9a:
                    ff:ba:be:57:51:00:fa:7d:2d:ee:d6:66:e8:a7:ff:
                    88:d2:14:96:ef:99:5d:4d:07:74:1e:22:9a:98:8b:
                    b3:0b:45:d8:07:aa:26:4b:5f:ea:40:ab:dd:03:b0:
                    87:92:84:4d:8f:e9:2d:01:3d:c9:ea:e3:bc:21:80:
                    ea:e1:7b:29:d4:c5:7d:71:31:c9:79:b0:1b:34:5f:
                    35:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:AC:90:94:06:98:EA:DA:AF:C9:99:83:07:FC:AC:21:2F:D8:87:4D
            X509v3 Authority Key Identifier:
                keyid:73:B9:81:CB:6E:E7:9D:2D:F8:C8:9D:6A:34:C5:54:BD:E3:FC:C7:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7mBy27nnS34yJ1qNMVUveP8x18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/c7mBy27nnS34yJ1qNMVUveP8x18.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/c7mBy27nnS34yJ1qNMVUveP8x18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:9b:df:44:a2:77:18:f7:35:a1:d5:24:98:0a:5e:f9:50:2f:
         ee:5c:db:60:8b:d7:48:2a:eb:ee:bd:51:dd:26:a5:03:6e:84:
         e2:2a:5c:57:17:05:80:48:d8:47:2e:3f:9b:aa:fd:b0:a4:37:
         bc:d2:53:e7:6e:f1:b0:36:c0:32:66:81:5f:1a:13:b8:cb:39:
         06:11:51:37:73:73:37:83:0e:8f:97:c0:30:53:e9:31:b6:5a:
         d2:a1:d9:c0:59:e7:20:0b:6e:b7:b0:24:ed:a7:9a:9c:88:b0:
         df:65:0a:98:bb:1c:26:55:74:1f:ee:e0:cf:17:1c:ed:f0:2a:
         19:0f:39:01:02:02:a7:2e:c3:96:72:ce:de:85:d6:db:c5:1e:
         c9:d6:0a:07:a0:c6:59:0c:66:37:1d:b1:1d:23:0c:6d:9b:b2:
         ba:0f:72:a2:36:81:ac:f5:0a:a8:fa:ec:19:25:e5:e0:15:5e:
         ca:22:45:f4:e7:27:99:94:b0:00:de:ec:df:fd:2d:34:e8:9a:
         13:cd:27:fb:7f:50:8e:ae:fe:b9:15:2d:41:99:48:ca:a0:b2:
         25:0f:26:c0:7f:01:d0:d4:6b:24:32:e5:3a:88:2f:00:85:a0:
         a8:49:69:42:c3:e3:fc:95:a5:ef:22:1a:50:eb:5e:2a:62:2a:
         b9:93:1d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:57:22 2025 by rpki-client