Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft
File:                     FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft (raw, json)
Hash identifier:          rcSus8wsq9mjdZqM9fMJxrMIxh33mUdUkgXWsmw9fec=
Subject key identifier:   ED:19:BF:4C:5D:1A:17:61:C2:48:A0:51:AC:0C:6D:99:9C:48:19:1D
Authority key identifier: 15:77:6D:F6:C2:6A:0F:F3:9C:43:53:9D:02:47:29:21:B8:61:E4:EC
Certificate issuer:       /CN=15776df6c26a0ff39c43539d02472921b861e4ec
Certificate serial:       0197643A8EF139BDBB6254535B69FE9053A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft
Manifest number:          1587
Signing time:             Thu 12 Jun 2025 13:00:48 +0000
Manifest this update:     Thu 12 Jun 2025 13:00:48 +0000
Manifest next update:     Fri 13 Jun 2025 13:00:48 +0000
Files and hashes:         1: FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.crl (hash: UuGkxGxwgHJOtJANafBi6h90bqmJCu1hfEbFZW7bba8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 13:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:64:3a:8e:f1:39:bd:bb:62:54:53:5b:69:fe:90:53:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15776df6c26a0ff39c43539d02472921b861e4ec
        Validity
            Not Before: Jun 12 13:00:48 2025 GMT
            Not After : Jun 13 13:00:48 2025 GMT
        Subject: CN=ed19bf4c5d1a1761c248a051ac0c6d999c48191d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7c:0e:14:b1:23:29:b8:e3:29:3d:a9:bc:e4:
                    28:58:91:dc:92:d8:13:b9:b1:d9:ec:6b:dc:fb:e7:
                    1b:5e:f2:6e:d0:88:a3:39:1d:d6:1b:6a:01:9e:94:
                    95:c2:9f:62:d0:a6:1d:69:44:db:af:eb:bf:59:6e:
                    26:66:2b:04:0c:27:a0:6d:a5:d2:99:ab:71:a1:d5:
                    7b:f3:1f:ec:2c:3b:fd:da:d8:b0:18:5f:66:88:6e:
                    22:a0:8e:b7:0c:51:5c:01:96:da:ee:df:6f:f4:6f:
                    ef:f8:e5:42:c1:a3:79:8c:21:63:f6:3b:c7:91:03:
                    da:79:57:f1:b2:05:c9:39:ce:e4:2a:ce:a1:b8:c7:
                    0b:9a:07:f6:18:aa:c8:d6:e0:06:7e:52:89:aa:cd:
                    62:ed:cd:27:8a:e4:87:80:7b:7c:4d:50:bd:23:c4:
                    c4:16:fe:a9:52:a5:ce:3d:b7:57:ba:d2:54:dc:c1:
                    ff:81:aa:16:e0:60:8c:28:62:54:66:76:67:e8:f1:
                    f1:9a:0c:9d:71:9c:f7:56:0b:dc:9b:0e:23:cb:f9:
                    81:bc:81:a4:57:31:38:69:8b:9d:db:e2:f3:f6:37:
                    de:06:20:fb:4e:06:b0:6e:d9:4b:e6:56:05:35:5e:
                    80:57:dc:b7:22:d7:34:9e:06:c6:8a:5b:d2:ba:62:
                    e6:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:19:BF:4C:5D:1A:17:61:C2:48:A0:51:AC:0C:6D:99:9C:48:19:1D
            X509v3 Authority Key Identifier:
                keyid:15:77:6D:F6:C2:6A:0F:F3:9C:43:53:9D:02:47:29:21:B8:61:E4:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:0a:d7:6e:e7:a7:bf:9c:95:42:9a:36:98:0c:cd:8f:2f:3a:
         9e:73:95:75:2e:60:1c:52:b0:9c:54:ad:67:3b:f0:1f:32:02:
         4f:c5:c0:6c:67:2f:7a:d0:61:7c:3d:17:f6:38:0c:52:22:a8:
         f0:b9:c1:3f:c1:d1:69:a9:d5:0f:0a:be:bb:4e:69:62:a4:2f:
         89:a5:dc:32:4a:83:d9:cc:cc:6f:44:6d:17:2d:7b:ee:55:31:
         13:fc:73:ef:91:0e:65:45:d7:14:01:e7:83:01:37:50:e6:47:
         6f:96:c0:85:af:1b:0d:38:b4:fb:b1:d1:2b:cb:4d:68:9b:bf:
         25:9b:ee:7a:03:1a:d9:6b:48:da:df:1a:66:7c:12:5f:d7:be:
         f8:56:9e:d4:35:32:eb:be:da:3a:56:68:45:bf:3e:39:15:29:
         64:5c:69:14:74:bb:d6:54:7f:b4:e9:b4:10:c2:a1:65:60:98:
         70:f2:45:a2:d1:0f:54:b3:18:aa:c1:bf:d8:40:c8:58:b5:32:
         e1:e4:6d:e5:a6:a8:82:fc:4c:f4:8d:24:fc:35:e7:da:d7:11:
         68:10:22:bb:2e:22:e4:f2:08:94:0f:a6:9c:7f:f5:cf:b8:3c:
         0d:94:f2:b7:50:6d:f4:e0:ef:e2:b0:14:b5:85:50:6a:a4:95:
         72:fd:a3:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 18:00:22 2025 by rpki-client