Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.mft
File:                     Iaw4_oEF-1mizSV_UZ-FhZWEAwE.mft (raw, json)
Hash identifier:          17ltX/gTCiFKS2H81elMrSXdblKQ+9XQ4ZO0etJ7+hM=
Subject key identifier:   9B:A0:12:46:7A:00:E9:7E:6C:B6:C5:73:B4:68:62:83:A4:AA:06:6E
Authority key identifier: 21:AC:38:FE:81:05:FB:59:A2:CD:25:7F:51:9F:85:85:95:84:03:01
Certificate issuer:       /CN=21ac38fe8105fb59a2cd257f519f858595840301
Certificate serial:       01974CD78D34E3A9937A6130BDB6E53E3889
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.mft
Manifest number:          051A
Signing time:             Sun 08 Jun 2025 00:01:23 +0000
Manifest this update:     Sun 08 Jun 2025 00:01:23 +0000
Manifest next update:     Mon 09 Jun 2025 00:01:23 +0000
Files and hashes:         1: Iaw4_oEF-1mizSV_UZ-FhZWEAwE.crl (hash: imqNcU8Fu7J/mkQz7D/vvrmASg+Y3V9kjI96bktQbbA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:d7:8d:34:e3:a9:93:7a:61:30:bd:b6:e5:3e:38:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21ac38fe8105fb59a2cd257f519f858595840301
        Validity
            Not Before: Jun  8 00:01:23 2025 GMT
            Not After : Jun  9 00:01:23 2025 GMT
        Subject: CN=9ba012467a00e97e6cb6c573b4686283a4aa066e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f4:fd:49:65:fe:44:27:29:cd:6d:ad:1c:72:
                    a6:cd:31:4b:cc:49:84:1a:a2:9e:d2:c6:a3:4e:c4:
                    ea:bc:eb:c6:d6:d8:a0:d8:7c:19:e6:91:a7:39:1c:
                    91:6d:8d:68:a7:3c:b4:89:b9:10:d8:fa:22:d3:c8:
                    de:0b:ce:e1:83:fb:d0:3b:9b:f4:4d:ec:b0:f7:3a:
                    98:a5:2e:c8:14:db:0f:43:77:73:a5:68:4f:ea:7d:
                    e7:49:5b:f7:8b:4a:89:d0:99:af:ae:31:89:09:46:
                    61:0b:f1:85:52:d2:07:cf:98:49:04:ff:8f:d9:d5:
                    a4:ac:47:76:14:71:31:ab:a1:ca:81:0e:f2:ff:14:
                    4c:49:64:c5:b6:90:75:32:75:20:94:d8:0a:a0:f0:
                    23:89:a3:cc:45:a7:38:14:2b:3c:3f:19:76:aa:a3:
                    54:1d:4a:8c:a6:a1:d4:3b:4e:5d:bb:13:55:0f:af:
                    78:3e:ac:8b:65:50:80:9e:73:16:c7:f0:41:1f:36:
                    93:61:2c:10:37:7b:59:1f:4e:ee:26:29:ab:6a:97:
                    f1:4b:ee:ae:2a:ed:78:0e:11:47:62:32:4a:40:f8:
                    dd:8b:13:e5:c1:80:51:30:50:e1:62:06:c4:05:aa:
                    70:48:34:66:60:49:98:c2:73:c5:ab:0e:83:9e:59:
                    b4:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:A0:12:46:7A:00:E9:7E:6C:B6:C5:73:B4:68:62:83:A4:AA:06:6E
            X509v3 Authority Key Identifier:
                keyid:21:AC:38:FE:81:05:FB:59:A2:CD:25:7F:51:9F:85:85:95:84:03:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:9e:9a:9d:6a:76:ef:14:27:c4:65:43:4d:6d:89:46:4b:bc:
         82:a2:1a:9f:cf:96:24:a3:90:1e:77:af:77:03:f8:89:ed:c9:
         77:5c:c1:32:31:b7:f8:fa:88:3a:21:17:d5:9d:ec:47:e7:14:
         5a:b1:6e:c6:c8:17:81:c6:e3:78:0f:06:62:0b:ee:a5:82:18:
         89:54:bd:45:17:c7:21:ae:b5:36:8d:c4:93:65:07:09:8f:54:
         9f:93:5d:30:4b:3f:99:60:fe:4e:e3:23:7c:24:fe:f2:ef:02:
         c0:9c:2b:d7:21:ae:6b:11:94:dd:70:99:5a:e4:02:fd:80:63:
         2d:91:fe:25:a2:41:bf:8a:8e:49:51:cd:34:3c:d5:1f:80:63:
         84:36:46:80:e0:af:c9:90:50:0d:22:9f:a8:18:af:e9:00:b9:
         aa:2a:39:48:e5:79:3f:41:41:11:c9:0f:37:dd:26:db:a1:f2:
         15:69:c1:4e:d9:62:22:00:67:2f:3e:95:ce:e9:4c:80:7f:22:
         e4:b7:3b:a2:d0:00:7c:fb:06:bb:4b:d7:d8:0e:e8:13:72:ca:
         28:5d:5a:4a:39:6c:31:dc:82:36:95:3e:ee:96:ee:46:1d:19:
         3d:55:22:4c:54:2b:8f:a1:05:cb:2a:ea:91:aa:99:f3:16:51:
         2d:d4:39:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 10:29:21 2025 by rpki-client