Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.mft
File:                     94hH4ENTVu5e8IbBIEhAigQZG3g.mft (raw, json)
Hash identifier:          5yTWiiOFOD6fqDIRqpccZIdf7aUfbcWnRfTzSpb31u4=
Subject key identifier:   01:3D:84:3E:43:79:7B:3B:FB:36:EA:6A:D6:EB:37:D9:93:80:C5:2C
Authority key identifier: F7:88:47:E0:43:53:56:EE:5E:F0:86:C1:20:48:40:8A:04:19:1B:78
Certificate issuer:       /CN=f78847e0435356ee5ef086c12048408a04191b78
Certificate serial:       0197470BE6408BD221225AD7DB2DE7E38DBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/94hH4ENTVu5e8IbBIEhAigQZG3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.mft
Manifest number:          1579
Signing time:             Fri 06 Jun 2025 21:00:51 +0000
Manifest this update:     Fri 06 Jun 2025 21:00:51 +0000
Manifest next update:     Sat 07 Jun 2025 21:00:51 +0000
Files and hashes:         1: 94hH4ENTVu5e8IbBIEhAigQZG3g.crl (hash: UazJLY0zR558/HIAE+VYiHAKrkeQdI/RPFlX2t8ZMhA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/94hH4ENTVu5e8IbBIEhAigQZG3g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 21:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:0b:e6:40:8b:d2:21:22:5a:d7:db:2d:e7:e3:8d:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f78847e0435356ee5ef086c12048408a04191b78
        Validity
            Not Before: Jun  6 21:00:51 2025 GMT
            Not After : Jun  7 21:00:51 2025 GMT
        Subject: CN=013d843e43797b3bfb36ea6ad6eb37d99380c52c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0a:c1:cc:53:35:5a:b6:f6:36:18:75:9d:c9:
                    0a:4a:8f:6c:eb:21:b3:9f:fc:b4:d2:2b:ba:5c:3f:
                    ee:04:b3:1a:a0:b7:cd:b5:37:77:00:59:11:e7:14:
                    44:a4:2d:39:72:7d:fd:d3:f1:fb:9c:8c:56:bc:df:
                    af:39:7b:32:c3:a2:dc:48:42:57:5d:ea:7d:d5:06:
                    e2:43:1c:98:cb:ac:89:a5:c1:d6:17:96:91:a6:ab:
                    51:fd:ab:8d:84:14:94:f6:59:b2:02:7a:ff:06:42:
                    bc:ae:71:37:21:40:c8:7d:32:c2:72:7b:b0:f8:2a:
                    75:d5:77:ec:ee:a3:7c:7d:62:91:d7:c1:2b:98:1f:
                    eb:85:55:87:dd:bc:ae:c7:c7:28:38:fa:01:af:aa:
                    4b:82:65:91:2c:d6:53:8f:77:bb:ca:55:54:5b:f2:
                    50:01:fb:11:ac:25:8f:89:83:3d:6c:c9:13:da:42:
                    8b:03:6f:f7:4f:40:15:1e:3d:37:f7:ca:1d:66:a5:
                    03:4a:8e:1d:41:7a:b2:19:54:1e:3e:5a:82:43:a0:
                    a0:00:2b:85:97:20:78:ee:84:a3:6d:9b:e5:e3:7e:
                    d8:7a:c1:b1:9c:f6:46:b5:fe:cf:1d:1f:27:df:22:
                    49:af:7b:64:f0:af:a1:ff:77:e8:c3:d2:20:d8:1f:
                    ea:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:3D:84:3E:43:79:7B:3B:FB:36:EA:6A:D6:EB:37:D9:93:80:C5:2C
            X509v3 Authority Key Identifier:
                keyid:F7:88:47:E0:43:53:56:EE:5E:F0:86:C1:20:48:40:8A:04:19:1B:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94hH4ENTVu5e8IbBIEhAigQZG3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:4d:1e:74:75:16:e1:ba:d1:c0:dc:07:bf:45:69:90:8e:ce:
         8e:39:f1:af:1f:a1:d5:47:43:39:ac:ea:95:f1:1d:2f:14:16:
         cc:6c:ac:17:89:cf:74:df:06:2c:d0:51:7a:99:ef:b7:8a:92:
         67:fe:24:39:0e:b2:30:cd:8d:a7:9d:fc:05:8f:7b:79:ac:25:
         cf:0e:d1:40:a9:66:c7:7a:d2:d7:97:17:ec:f3:51:16:93:e8:
         26:83:28:3c:b7:60:75:c2:3f:9a:03:11:29:03:94:fa:71:86:
         e3:82:7d:4b:48:67:31:8a:6f:f9:56:8b:7c:e0:21:d3:5d:f8:
         14:c4:b1:c9:b8:81:d4:5c:b5:ae:c7:95:88:6b:4b:40:b1:6b:
         e0:ae:60:01:0f:3a:d0:d5:2a:72:46:3c:37:0c:eb:8f:d8:12:
         eb:74:de:4c:97:76:20:30:75:cc:29:d5:d1:2d:1a:4c:8b:77:
         c0:3b:9f:9d:2f:38:da:63:74:5d:44:d0:d6:a2:3c:56:35:98:
         6a:19:d9:1b:92:47:25:7b:40:9e:ba:2e:b3:82:7d:6e:ba:b1:
         39:04:93:2c:82:e5:ac:6e:3e:1a:10:03:e6:5d:71:3c:ed:a9:
         41:f1:ec:0f:53:fb:ca:65:85:53:12:3d:41:07:ab:af:65:ad:
         cb:15:56:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:18:32 2025 by rpki-client