Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.mft
File:                     ArqdsmdPc0Vl8JUzk_ClaWHKV8g.mft (raw, json)
Hash identifier:          n79faip0rUoYrxi6VxM6/LGRdZeoy2ItQXIXQ4o40e8=
Subject key identifier:   B4:46:95:35:FE:76:C1:93:BB:9B:7B:7F:DB:8B:1F:32:60:DC:AD:5F
Authority key identifier: 02:BA:9D:B2:67:4F:73:45:65:F0:95:33:93:F0:A5:69:61:CA:57:C8
Certificate issuer:       /CN=02ba9db2674f734565f0953393f0a56961ca57c8
Certificate serial:       01974D4553C699888A943E29B9CBC181221D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.mft
Manifest number:          0E57
Signing time:             Sun 08 Jun 2025 02:01:18 +0000
Manifest this update:     Sun 08 Jun 2025 02:01:18 +0000
Manifest next update:     Mon 09 Jun 2025 02:01:18 +0000
Files and hashes:         1: ArqdsmdPc0Vl8JUzk_ClaWHKV8g.crl (hash: vhpeJaHF51g8XfujwDbhbuc5DDZzYt8IFhqrZC+L0IY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 02:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:45:53:c6:99:88:8a:94:3e:29:b9:cb:c1:81:22:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02ba9db2674f734565f0953393f0a56961ca57c8
        Validity
            Not Before: Jun  8 02:01:18 2025 GMT
            Not After : Jun  9 02:01:18 2025 GMT
        Subject: CN=b4469535fe76c193bb9b7b7fdb8b1f3260dcad5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1e:c1:8a:99:7c:bb:4d:da:d8:58:7a:c8:49:
                    8d:be:1b:95:1a:40:79:45:38:95:c2:0a:f0:11:d2:
                    55:b9:28:db:aa:1b:9c:d6:da:1f:f5:4b:62:f3:e1:
                    14:ad:63:a4:67:d2:b6:3f:be:8e:2d:0f:4b:b1:b7:
                    de:1d:82:e9:b7:ea:68:cc:71:ac:9d:7d:b8:bc:f3:
                    95:c5:3e:2f:1f:f2:51:ed:5a:11:ee:30:e1:d7:cf:
                    7f:17:d5:99:bd:0b:9c:13:ef:b8:cc:77:91:d8:56:
                    33:12:78:e2:29:38:f3:e7:79:f8:51:b9:62:52:2d:
                    f5:fc:fe:c3:be:cb:c3:af:51:a7:ca:79:01:cc:90:
                    7a:dd:30:14:3e:00:50:79:e1:9e:aa:3a:e4:6e:af:
                    9d:fb:99:8c:2b:bc:bb:9f:c2:e4:3b:e1:45:e0:4f:
                    b1:8f:0d:b8:a2:70:e5:3a:47:fd:a2:2d:e0:a7:09:
                    06:2f:a1:49:58:02:d4:dd:8b:4c:f8:65:08:78:d3:
                    da:d0:19:11:49:3f:3f:08:5f:7c:05:e0:05:26:62:
                    9c:97:73:81:37:15:aa:af:88:a0:4a:b1:fe:ac:17:
                    0b:cc:66:b4:bd:b1:33:9f:d1:3b:90:57:9e:24:2c:
                    af:9f:92:a3:47:79:13:31:74:80:c0:1f:dd:75:ce:
                    3d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:46:95:35:FE:76:C1:93:BB:9B:7B:7F:DB:8B:1F:32:60:DC:AD:5F
            X509v3 Authority Key Identifier:
                keyid:02:BA:9D:B2:67:4F:73:45:65:F0:95:33:93:F0:A5:69:61:CA:57:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:70:15:ab:d8:d5:a8:a7:f2:39:19:ac:35:c3:cf:97:32:a5:
         dd:32:90:45:98:89:a8:c5:3d:bf:f5:e3:26:7e:53:95:32:1d:
         e8:a0:8d:72:c5:7e:f3:05:6c:b2:b1:89:07:c2:74:20:25:53:
         5f:bf:ae:c3:d9:7e:6f:04:ae:73:45:12:04:fc:2e:06:33:af:
         2c:5a:0b:4a:ab:08:9b:9d:af:58:bb:03:b2:7d:3c:e8:dc:6c:
         34:f3:e2:19:6d:84:67:d4:1d:2e:53:bc:3e:e9:58:62:95:ed:
         4f:bf:fe:80:e8:f1:69:2b:fc:a6:75:7f:ef:9e:b0:fd:c1:1d:
         77:8a:3a:ed:8d:2f:57:d4:09:eb:a3:89:c8:2b:8d:78:db:6b:
         2c:86:01:42:a7:dd:34:76:f4:d4:37:ba:f8:98:de:84:fb:77:
         b6:f3:31:02:43:aa:1e:fd:a9:73:81:90:bf:6c:dd:48:29:01:
         87:30:81:5a:8f:32:be:e3:21:e2:4c:34:05:72:d7:71:6c:ef:
         bf:4d:2b:f6:a9:37:59:99:90:91:43:66:71:f4:bf:6c:ff:6c:
         4c:a2:da:7d:be:1d:bf:e3:c9:ce:cd:0f:c8:30:ba:43:7c:d0:
         4d:67:85:f0:4e:f5:46:a8:49:88:3a:1c:b0:47:30:7f:eb:f1:
         7d:f8:f6:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:04:52 2025 by rpki-client