Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft
File:                     4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft (raw, json)
Hash identifier:          YtExImPi+mR0xYLTqcczdNbtBWibBuupWiuhU1l3B+M=
Subject key identifier:   D4:C4:97:DA:9D:63:13:44:A2:EE:6E:E2:CE:CC:9C:63:49:C5:AD:E7
Authority key identifier: E1:8C:71:8B:45:A7:76:75:90:9D:7F:D1:AF:EC:6D:AA:BA:FE:88:B2
Certificate issuer:       /CN=e18c718b45a77675909d7fd1afec6daabafe88b2
Certificate serial:       01974BC418101F3A61F9D184E463805C9E7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft
Manifest number:          0700
Signing time:             Sat 07 Jun 2025 19:00:31 +0000
Manifest this update:     Sat 07 Jun 2025 19:00:31 +0000
Manifest next update:     Sun 08 Jun 2025 19:00:31 +0000
Files and hashes:         1: 4Yxxi0WndnWQnX_Rr-xtqrr-iLI.crl (hash: UqoHMnWcVz3caUMIx5/H+p9EIiGt9uRqUWB0eImxZ4s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 19:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:c4:18:10:1f:3a:61:f9:d1:84:e4:63:80:5c:9e:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e18c718b45a77675909d7fd1afec6daabafe88b2
        Validity
            Not Before: Jun  7 19:00:31 2025 GMT
            Not After : Jun  8 19:00:31 2025 GMT
        Subject: CN=d4c497da9d631344a2ee6ee2cecc9c6349c5ade7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:41:7a:60:bf:41:72:cc:e9:d9:08:ce:99:2d:
                    f2:36:f6:00:6d:84:03:e2:5c:0a:3c:63:be:26:e8:
                    cd:b5:e7:ed:b7:5a:f1:be:99:9f:7d:d6:46:42:3c:
                    43:c2:04:24:fa:e2:0c:2e:38:bd:23:4f:67:33:d9:
                    89:24:39:31:a6:b4:91:95:78:25:36:a3:9c:ee:5d:
                    e0:39:02:4a:22:53:5b:99:e5:1a:31:05:cb:2d:29:
                    d7:f2:b4:34:4b:c6:76:4c:7e:1f:78:78:28:0d:ff:
                    f5:3d:52:74:2a:8f:e3:e0:a1:25:6f:d4:a4:e2:9d:
                    a3:4e:2d:92:9e:92:78:23:7d:cd:3f:be:d0:b3:fd:
                    7f:08:b1:27:db:88:59:cc:1d:df:f1:ee:d5:13:40:
                    b7:6a:01:7e:62:f9:d0:85:0c:e6:bb:27:ce:ef:0a:
                    6c:92:75:12:a7:b2:78:b8:91:b3:fc:3f:b0:d6:9c:
                    f1:06:eb:c5:fa:04:fd:fb:10:71:38:3e:2e:00:8e:
                    88:e9:a2:38:0d:0c:30:de:d7:0e:e5:3c:db:f1:b5:
                    a5:5f:a2:f1:ed:90:07:ab:23:78:d6:07:9c:c3:fb:
                    34:bf:6a:23:af:41:ca:5e:fc:1a:97:d8:a3:2b:db:
                    31:9b:9f:41:46:1e:79:9c:3d:d1:c2:eb:ca:70:6e:
                    95:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:C4:97:DA:9D:63:13:44:A2:EE:6E:E2:CE:CC:9C:63:49:C5:AD:E7
            X509v3 Authority Key Identifier:
                keyid:E1:8C:71:8B:45:A7:76:75:90:9D:7F:D1:AF:EC:6D:AA:BA:FE:88:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:7c:5e:3b:14:af:7f:2d:ff:a7:ef:f6:d2:60:20:1f:b6:ee:
         8e:24:07:0d:33:d8:03:95:7d:27:3e:95:b8:5d:ce:27:35:e9:
         5c:97:66:27:98:01:7f:d9:0a:01:20:ab:f7:53:67:89:21:f4:
         bb:de:26:77:c9:2b:d0:b2:30:a9:9a:41:82:71:12:17:0d:d4:
         78:4c:65:29:69:18:1a:e1:f7:c7:fc:11:a7:8e:34:f3:36:ca:
         05:a5:06:26:d1:39:71:2e:28:31:1f:d3:a4:bc:6b:29:a2:35:
         9c:81:4e:48:f3:eb:61:3f:65:ae:46:ce:c5:28:84:79:02:a9:
         b8:95:20:d4:38:b3:dd:7e:40:6f:ec:9c:51:ab:50:70:3b:f9:
         2f:89:76:b7:34:23:ec:02:d9:fe:06:d1:d3:d3:79:45:36:34:
         24:26:61:db:67:9b:ba:5f:2d:55:0c:cb:40:08:f1:16:95:98:
         9a:e7:da:f1:04:67:57:cd:fa:38:0f:ec:40:93:09:0c:75:bc:
         61:38:21:ce:78:65:0b:54:81:21:39:17:82:65:d3:1d:cd:ec:
         1e:48:5b:4e:34:96:7d:f3:59:6f:5f:3b:dd:3e:f7:76:e8:95:
         5e:a9:18:28:99:74:c0:66:16:f4:bf:40:13:2f:ad:9d:75:b2:
         55:21:37:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:13:55 2025 by rpki-client