Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.mft
File:                     W1t31kWP-tmE5R3zNPPo-YOCrCQ.mft (raw, json)
Hash identifier:          2FPkTlYRPjIXTC/Gky9qUiuMfSUWFKv+wd2xtBj35Ik=
Subject key identifier:   4F:2B:9F:D0:4A:C8:72:14:B0:41:01:AF:67:07:C5:FD:DD:08:D6:9F
Authority key identifier: 5B:5B:77:D6:45:8F:FA:D9:84:E5:1D:F3:34:F3:E8:F9:83:82:AC:24
Certificate issuer:       /CN=5b5b77d6458ffad984e51df334f3e8f98382ac24
Certificate serial:       01974FA0C0E3B950B44B5575181027C05C87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W1t31kWP-tmE5R3zNPPo-YOCrCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.mft
Manifest number:          03C9
Signing time:             Sun 08 Jun 2025 13:00:24 +0000
Manifest this update:     Sun 08 Jun 2025 13:00:24 +0000
Manifest next update:     Mon 09 Jun 2025 13:00:24 +0000
Files and hashes:         1: W1t31kWP-tmE5R3zNPPo-YOCrCQ.crl (hash: Q/Y+sIWW5DgXFQEvbGU1rXyMikeQGTsNqZAVxMuO4PI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W1t31kWP-tmE5R3zNPPo-YOCrCQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 13:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4f:a0:c0:e3:b9:50:b4:4b:55:75:18:10:27:c0:5c:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b5b77d6458ffad984e51df334f3e8f98382ac24
        Validity
            Not Before: Jun  8 13:00:24 2025 GMT
            Not After : Jun  9 13:00:24 2025 GMT
        Subject: CN=4f2b9fd04ac87214b04101af6707c5fddd08d69f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d5:1d:1e:53:0f:7b:91:bc:7b:4d:fc:f2:4c:
                    1c:30:bc:a9:eb:21:78:58:41:b7:82:0b:12:c4:fe:
                    01:c7:c1:2e:a5:d7:ab:8f:e9:1d:7b:f6:2c:06:ff:
                    98:ef:8d:6a:7f:91:21:16:02:b4:d8:81:76:38:8e:
                    71:da:c9:1b:a3:6a:42:42:9f:c2:60:a0:52:e3:6c:
                    bb:de:15:08:8c:6d:de:92:d6:ec:fa:54:78:c6:40:
                    d0:13:d8:55:16:2a:cd:0b:e8:4c:b4:51:b4:e4:10:
                    b7:56:d5:5c:91:8f:ed:3a:73:9d:54:0d:8f:82:16:
                    79:fb:71:7e:e6:f7:61:07:51:79:50:eb:fb:f7:6f:
                    f1:92:60:c9:45:dc:7a:5f:ce:84:38:57:b8:da:a5:
                    f0:7a:b1:68:3d:c4:de:ed:3d:b4:11:4a:07:89:18:
                    b2:8a:d0:09:4e:17:de:aa:3e:af:c0:8f:87:df:5f:
                    10:37:0f:b3:d0:54:90:03:77:0f:e2:4f:03:b9:f3:
                    57:08:8b:0a:b7:2c:39:53:dd:b4:81:39:93:60:b3:
                    3f:a9:53:bf:02:65:41:6e:9d:97:82:29:b4:da:e2:
                    9b:da:9c:78:d7:d8:48:c0:36:e2:d6:8a:4d:1a:73:
                    f8:9f:6f:43:09:65:af:57:ad:b3:7f:cf:2f:d4:48:
                    bf:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:2B:9F:D0:4A:C8:72:14:B0:41:01:AF:67:07:C5:FD:DD:08:D6:9F
            X509v3 Authority Key Identifier:
                keyid:5B:5B:77:D6:45:8F:FA:D9:84:E5:1D:F3:34:F3:E8:F9:83:82:AC:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1t31kWP-tmE5R3zNPPo-YOCrCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:b3:da:cc:cc:ce:93:7f:0f:ed:bb:7a:86:93:26:b1:79:d1:
         66:7d:5e:83:83:f1:08:ff:f2:5d:42:9a:45:2f:e3:88:58:c1:
         46:8d:ba:a1:8b:8b:cb:bc:fb:3d:46:00:18:8a:64:12:d6:e7:
         d2:ce:49:45:3f:6c:9a:81:73:00:1b:a7:3c:a5:93:95:2b:50:
         3d:37:29:01:52:09:57:5e:87:df:72:79:73:d5:f8:95:0d:d1:
         ee:e2:f1:45:17:8b:e6:d8:46:b8:19:5a:b6:5f:df:c5:cd:07:
         2e:74:46:f5:19:46:b4:2c:96:48:65:12:01:cb:de:73:c8:27:
         76:ad:09:58:81:a4:cc:2f:93:53:de:40:9c:46:ef:4f:5b:b8:
         60:9c:b7:45:b0:0f:56:84:2c:b4:b0:45:0d:9a:1a:9a:57:94:
         fb:c9:4c:b3:a4:20:45:a5:a4:37:cc:58:a9:b3:d6:0e:ea:20:
         01:26:ad:08:e1:92:5d:1c:6b:f0:29:1e:9c:56:4a:a4:16:6e:
         28:f4:d9:ed:38:50:63:69:da:4b:31:4b:22:83:ed:81:6d:be:
         2e:1b:2e:d8:96:46:5e:0f:92:b3:c3:2d:f9:35:a4:26:93:76:
         7b:ac:78:c8:da:79:9e:50:2e:ce:af:9a:fb:09:ad:2c:c0:db:
         d5:db:cb:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:27:09 2025 by rpki-client