Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.mft
File:                     fHvscgXfiNB3CG9Kj7WuznXLtmE.mft (raw, json)
Hash identifier:          5j8ofcMfT0UWQi/GWj+KuVKarrjqS72yB9gmZLaIpaM=
Subject key identifier:   59:F6:F2:AE:B0:22:1E:F4:42:C4:3A:3C:6E:44:09:1E:09:87:05:C4
Authority key identifier: 7C:7B:EC:72:05:DF:88:D0:77:08:6F:4A:8F:B5:AE:CE:75:CB:B6:61
Certificate issuer:       /CN=7c7bec7205df88d077086f4a8fb5aece75cbb661
Certificate serial:       01976471EF3C1131F207C965D19A12E0C0AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fHvscgXfiNB3CG9Kj7WuznXLtmE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.mft
Manifest number:          13DF
Signing time:             Thu 12 Jun 2025 14:01:17 +0000
Manifest this update:     Thu 12 Jun 2025 14:01:17 +0000
Manifest next update:     Fri 13 Jun 2025 14:01:17 +0000
Files and hashes:         1: fHvscgXfiNB3CG9Kj7WuznXLtmE.crl (hash: V9/fLnfHNLy7SdU+LHEYGAFVjrnxsibJUxnxgxSDkOY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fHvscgXfiNB3CG9Kj7WuznXLtmE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:64:71:ef:3c:11:31:f2:07:c9:65:d1:9a:12:e0:c0:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c7bec7205df88d077086f4a8fb5aece75cbb661
        Validity
            Not Before: Jun 12 14:01:17 2025 GMT
            Not After : Jun 13 14:01:17 2025 GMT
        Subject: CN=59f6f2aeb0221ef442c43a3c6e44091e098705c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:55:03:81:ed:77:8d:02:ba:97:9e:fb:a3:cf:
                    c3:51:71:0c:09:e6:f9:36:f0:ce:c6:20:94:a9:0b:
                    09:54:e1:2a:1f:68:df:ae:ad:fe:3f:a3:ec:77:f3:
                    33:4d:2c:a4:6d:75:9b:7d:ce:f7:29:e2:66:ef:6e:
                    4a:3d:73:02:f8:f0:92:c0:ec:66:a1:78:fd:6a:3b:
                    89:7d:b0:a4:e4:c1:8a:c9:a8:97:20:26:19:57:99:
                    a4:89:e3:9b:16:84:b6:3e:df:7b:1f:33:e1:f5:da:
                    3c:45:12:68:88:07:8f:ed:81:28:32:98:bf:35:4b:
                    a2:0c:38:d5:e3:06:b7:d7:1c:27:9e:35:1d:05:5f:
                    78:2e:3b:5e:09:19:73:ca:b8:90:53:29:74:16:b4:
                    4d:1c:f5:bb:8d:12:79:47:c3:09:f8:15:fa:39:33:
                    7e:15:1e:b5:8d:74:66:aa:b6:db:9c:26:22:03:49:
                    fe:6d:f8:8b:ef:12:81:63:27:02:37:b2:27:db:83:
                    c0:26:bc:d3:a8:5e:9a:7b:65:07:9b:e7:2b:33:6d:
                    0a:fb:e9:a0:fb:3f:c1:b2:8a:33:42:d5:dc:8c:6d:
                    ff:d6:d8:96:51:c4:09:0a:28:87:d4:f9:30:92:78:
                    2b:9e:14:83:89:8e:de:fb:53:9b:c2:5c:72:63:3e:
                    24:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:F6:F2:AE:B0:22:1E:F4:42:C4:3A:3C:6E:44:09:1E:09:87:05:C4
            X509v3 Authority Key Identifier:
                keyid:7C:7B:EC:72:05:DF:88:D0:77:08:6F:4A:8F:B5:AE:CE:75:CB:B6:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fHvscgXfiNB3CG9Kj7WuznXLtmE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:34:74:79:e4:21:f7:8a:91:01:f7:de:d0:cf:af:93:99:06:
         36:55:74:b4:c5:2a:a6:5a:a5:17:dc:b2:cb:b1:18:f5:ae:a1:
         0e:6b:18:bb:6b:80:1a:7f:97:96:ed:49:46:1f:4f:8b:d1:76:
         44:35:3e:95:23:12:73:7e:27:da:71:f4:82:d4:39:24:33:73:
         24:63:d1:bd:6d:6a:2f:bb:e1:42:a3:fe:1c:f7:be:7c:2b:1a:
         90:a9:d7:72:4e:f7:e9:75:97:4b:2b:00:a7:42:64:cb:34:c0:
         19:72:3a:bf:cc:a5:2e:19:64:47:1e:e1:74:1f:01:49:0d:d7:
         48:66:80:0c:05:bb:e0:33:55:d6:6a:7c:a8:0b:66:50:0b:ec:
         02:a6:8d:f6:b4:8c:27:c4:39:52:18:c4:47:7e:1a:b4:8a:fc:
         62:b5:ea:a3:41:0c:5d:f0:03:3f:55:e7:6a:3a:8e:94:28:ab:
         1f:7f:dc:ef:f4:e6:dd:82:3f:09:80:88:2f:ea:4b:81:8e:82:
         55:f6:dc:6d:fe:16:30:b5:7e:a4:db:98:9f:73:47:28:5c:19:
         37:e6:d0:37:cc:46:c3:b2:c6:5b:e3:e7:c0:54:27:60:85:34:
         19:62:79:a6:da:9f:a4:e1:1d:50:0d:03:ea:b4:a2:09:94:39:
         20:32:9b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 00:02:12 2025 by rpki-client