Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.mft
File:                     7fBEw2PXiOdDNOE24DzH_R5JohY.mft (raw, json)
Hash identifier:          FtTjZfYxQJP9R5wVjMHIi0IJdFgYJ/Qn9MVriA8d9rg=
Subject key identifier:   C6:C7:3B:EA:89:C1:D5:16:6B:3F:EC:13:74:9F:77:F0:BC:24:23:D1
Authority key identifier: ED:F0:44:C3:63:D7:88:E7:43:34:E1:36:E0:3C:C7:FD:1E:49:A2:16
Certificate issuer:       /CN=edf044c363d788e74334e136e03cc7fd1e49a216
Certificate serial:       01974A7B6AB19E4904C1EEEEBCE3E3C9574D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7fBEw2PXiOdDNOE24DzH_R5JohY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.mft
Manifest number:          07F3
Signing time:             Sat 07 Jun 2025 13:01:31 +0000
Manifest this update:     Sat 07 Jun 2025 13:01:31 +0000
Manifest next update:     Sun 08 Jun 2025 13:01:31 +0000
Files and hashes:         1: 7fBEw2PXiOdDNOE24DzH_R5JohY.crl (hash: Pb1l97yY62ST06XiTrLnP5hh6Uacwpq4wuzFFQ1WWws=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7fBEw2PXiOdDNOE24DzH_R5JohY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 13:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:7b:6a:b1:9e:49:04:c1:ee:ee:bc:e3:e3:c9:57:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edf044c363d788e74334e136e03cc7fd1e49a216
        Validity
            Not Before: Jun  7 13:01:31 2025 GMT
            Not After : Jun  8 13:01:31 2025 GMT
        Subject: CN=c6c73bea89c1d5166b3fec13749f77f0bc2423d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:7c:ae:ee:56:eb:5a:e2:fb:4d:b6:b5:04:35:
                    87:04:c3:f9:a7:47:31:ee:28:55:07:ae:de:96:e7:
                    d7:a1:80:d5:5a:24:b1:ff:b5:c1:5b:ff:f3:e1:f5:
                    6a:d7:20:7e:b2:1f:d0:00:9f:11:d6:8f:8c:1f:29:
                    94:6f:18:c4:05:b3:6e:a1:44:23:41:89:93:56:5a:
                    f9:13:68:1d:23:d9:4a:17:8b:ec:c4:2d:be:fc:36:
                    80:d9:0a:80:fe:69:03:d6:3b:70:21:5f:1d:e3:eb:
                    17:0e:d3:dc:23:35:fe:85:90:11:14:b3:ae:04:e1:
                    04:79:9a:4c:be:8c:e5:46:02:10:2b:0e:6e:37:05:
                    77:7e:18:d0:a4:bd:ea:da:f0:ef:7a:4e:37:5d:22:
                    5f:e3:43:62:d0:e3:88:31:12:f4:5e:2c:69:e8:cb:
                    31:ad:fb:42:86:90:e1:4b:28:44:d8:6d:5d:12:f8:
                    e4:1f:e4:f7:a4:fe:c6:f1:1a:18:6f:3c:1e:8a:68:
                    55:df:f7:7d:d1:de:5a:6b:34:87:2a:97:0f:11:98:
                    28:e0:5d:de:a5:69:9d:87:a6:7b:b9:f1:91:51:a3:
                    bc:e1:e5:5a:a3:f9:06:c6:ec:2f:24:38:c7:87:14:
                    24:6c:0b:04:90:e4:14:a6:5e:0f:f4:bc:bd:63:fc:
                    30:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:C7:3B:EA:89:C1:D5:16:6B:3F:EC:13:74:9F:77:F0:BC:24:23:D1
            X509v3 Authority Key Identifier:
                keyid:ED:F0:44:C3:63:D7:88:E7:43:34:E1:36:E0:3C:C7:FD:1E:49:A2:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fBEw2PXiOdDNOE24DzH_R5JohY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:a8:bf:7a:19:d4:88:36:b6:d6:6a:a1:da:89:fe:23:ce:fc:
         15:c9:46:e7:7f:0e:59:8e:c3:c3:65:47:a9:4a:af:8d:c1:80:
         fa:ff:47:db:3b:10:c7:15:1e:4f:91:cb:1a:03:d5:38:5f:19:
         48:9d:08:32:ce:f0:2f:1f:e9:97:84:d3:53:06:42:8e:d5:f0:
         e9:72:50:44:cf:23:3b:42:9c:b0:e2:e8:e9:e6:cd:09:cd:57:
         66:28:b0:3c:8e:28:62:e7:30:e5:df:f1:c8:17:a0:72:26:78:
         7f:a4:66:27:e4:33:87:c4:46:8a:a0:6b:cf:2a:8b:2e:2c:85:
         a6:f1:95:1b:3d:11:4f:01:41:17:ac:f6:a0:31:61:e7:99:4d:
         2f:d4:f4:8a:af:6f:e2:7e:f0:24:96:a1:c1:42:22:ee:bc:53:
         ab:c9:87:0c:d4:f1:dc:70:00:82:e0:99:e0:b9:77:b9:1a:f7:
         6e:43:fa:82:db:d3:88:7c:75:c4:63:67:64:52:a2:cf:66:93:
         2b:38:e9:6a:ef:cb:9d:6f:51:c0:e5:f4:49:56:2c:06:22:60:
         06:b6:ce:fc:03:35:a1:79:33:c0:b5:e6:01:55:e9:a1:e9:84:
         2b:83:28:37:d6:d9:d9:af:d4:ea:96:af:a9:2f:c2:3c:42:32:
         a3:58:59:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:03:14 2025 by rpki-client