Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/53b750-6916-4c3f-bdfb-94c4e4ebcd41/1/Mq1_fYOEhaGeACeZaKm5hoOkxW4.mft
File:                     Mq1_fYOEhaGeACeZaKm5hoOkxW4.mft (raw, json)
Hash identifier:          wJ4jPuxHWT9CU9BvEwBdAXY+g/q74ZYkig6sax+Y2yc=
Subject key identifier:   31:73:3E:75:B1:70:79:BD:25:0F:F2:14:EA:2B:EE:E6:5F:F7:9C:AD
Authority key identifier: 32:AD:7F:7D:83:84:85:A1:9E:00:27:99:68:A9:B9:86:83:A4:C5:6E
Certificate issuer:       /CN=32ad7f7d838485a19e00279968a9b98683a4c56e
Certificate serial:       01974A4367690D7D7F96213E7FC967EE40D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mq1_fYOEhaGeACeZaKm5hoOkxW4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/53b750-6916-4c3f-bdfb-94c4e4ebcd41/1/Mq1_fYOEhaGeACeZaKm5hoOkxW4.mft
Manifest number:          157A
Signing time:             Sat 07 Jun 2025 12:00:20 +0000
Manifest this update:     Sat 07 Jun 2025 12:00:20 +0000
Manifest next update:     Sun 08 Jun 2025 12:00:20 +0000
Files and hashes:         1: Mq1_fYOEhaGeACeZaKm5hoOkxW4.crl (hash: vMXZ3dJr5JNbmzpU5yoLy9AlMTm8e42usY2sxRbd3Wc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/53b750-6916-4c3f-bdfb-94c4e4ebcd41/1/Mq1_fYOEhaGeACeZaKm5hoOkxW4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/53b750-6916-4c3f-bdfb-94c4e4ebcd41/1/Mq1_fYOEhaGeACeZaKm5hoOkxW4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mq1_fYOEhaGeACeZaKm5hoOkxW4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:43:67:69:0d:7d:7f:96:21:3e:7f:c9:67:ee:40:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32ad7f7d838485a19e00279968a9b98683a4c56e
        Validity
            Not Before: Jun  7 12:00:20 2025 GMT
            Not After : Jun  8 12:00:20 2025 GMT
        Subject: CN=31733e75b17079bd250ff214ea2beee65ff79cad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9c:5e:05:af:f7:07:11:9b:95:62:e6:64:53:
                    8a:c8:62:e8:a6:ee:9b:7b:0d:4d:cf:50:5f:e5:e6:
                    78:13:81:c7:e1:e2:49:53:b8:09:ac:95:0f:13:39:
                    b5:bc:3f:3c:7d:47:cd:7d:27:46:5c:cf:e5:b0:a8:
                    a2:f0:99:70:55:14:bd:45:cb:2a:96:7c:ba:d9:97:
                    ac:bd:4b:88:7c:78:02:cc:6c:0d:f2:89:8c:eb:d6:
                    02:1e:e3:9f:a0:35:d3:f5:00:37:dd:8e:93:94:61:
                    cc:ea:12:f0:55:05:74:41:e4:de:a5:0a:79:12:ae:
                    ea:aa:72:1a:72:12:65:0a:4a:28:74:30:23:f5:9e:
                    14:d7:90:02:c8:5a:c0:ce:9f:a4:0d:98:9b:a5:0b:
                    20:1c:cb:83:7b:a2:f3:38:68:37:f0:40:2b:8e:07:
                    50:a2:98:8c:60:56:07:e6:b3:5c:e1:82:34:dd:b7:
                    5b:bb:db:fc:85:b0:b7:52:da:c4:08:f0:e6:83:ea:
                    8c:f8:66:85:ed:26:07:2b:d1:4d:db:6d:1d:54:a8:
                    28:85:2a:ca:3e:84:c7:db:2b:eb:cb:c1:63:79:c3:
                    37:7d:77:e9:7c:9f:53:e5:8b:95:b5:c3:17:da:e7:
                    65:2d:ce:68:4c:4a:aa:ab:c6:18:39:99:06:30:f3:
                    5e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:73:3E:75:B1:70:79:BD:25:0F:F2:14:EA:2B:EE:E6:5F:F7:9C:AD
            X509v3 Authority Key Identifier:
                keyid:32:AD:7F:7D:83:84:85:A1:9E:00:27:99:68:A9:B9:86:83:A4:C5:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mq1_fYOEhaGeACeZaKm5hoOkxW4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53b750-6916-4c3f-bdfb-94c4e4ebcd41/1/Mq1_fYOEhaGeACeZaKm5hoOkxW4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53b750-6916-4c3f-bdfb-94c4e4ebcd41/1/Mq1_fYOEhaGeACeZaKm5hoOkxW4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:57:3b:a7:0f:be:d0:ea:24:65:4e:ea:1e:22:00:2d:28:85:
         bc:46:6d:17:4d:38:34:71:c4:5f:9e:ff:78:c5:a1:7b:62:7a:
         12:96:f0:05:c0:09:10:cd:53:ff:59:1a:00:70:9b:01:b5:09:
         03:ea:41:18:b4:58:4b:5c:ca:d0:0b:1e:0a:b3:e1:9b:42:15:
         f6:74:73:f1:dd:d5:fc:23:47:cf:93:9d:16:be:f3:19:1a:4e:
         c3:7c:fb:62:0f:1f:eb:d9:78:3d:75:90:f3:81:06:7d:7c:29:
         8d:10:13:8e:d5:01:78:29:1c:8a:19:1f:d7:57:9c:73:2a:ee:
         a8:c7:46:85:5e:08:72:23:c4:e2:1c:e4:5f:47:b4:ec:e2:a4:
         7c:31:7f:08:a0:a6:1f:e9:6f:bc:8c:02:27:4f:b7:83:a0:3e:
         93:24:f0:71:3e:0a:7a:b5:fe:36:35:ee:b6:50:8f:a8:68:e3:
         1d:58:9d:2f:4d:48:c0:1e:d0:55:7b:18:ac:c2:8a:f8:6e:05:
         46:9a:54:11:7d:b8:14:1c:6f:e2:fe:61:b5:cd:56:d6:ae:0e:
         d8:db:47:26:7d:58:e4:ba:25:cf:bf:3e:8f:23:eb:36:7a:08:
         62:46:dd:8f:cf:66:b2:4d:25:f8:82:76:b5:9b:51:ce:10:f5:
         d4:d4:d1:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:29:36 2025 by rpki-client