Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/9e99bf-2d89-4401-bc9f-cba8c8a5453e/1/q1wa2N15IqRaLMdIHv4B3UMwBsI.mft
File:                     q1wa2N15IqRaLMdIHv4B3UMwBsI.mft (raw, json)
Hash identifier:          cZbMPmaJ0NUreYUkIpBT2ehAbijpYPi9ElEoeRu0z0c=
Subject key identifier:   0C:CC:C2:A5:F9:07:C1:A5:BD:3C:EB:AB:28:DC:18:58:94:61:26:BA
Authority key identifier: AB:5C:1A:D8:DD:79:22:A4:5A:2C:C7:48:1E:FE:01:DD:43:30:06:C2
Certificate issuer:       /CN=ab5c1ad8dd7922a45a2cc7481efe01dd433006c2
Certificate serial:       01975234852DF731852826605F0E97903A08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q1wa2N15IqRaLMdIHv4B3UMwBsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/9e99bf-2d89-4401-bc9f-cba8c8a5453e/1/q1wa2N15IqRaLMdIHv4B3UMwBsI.mft
Manifest number:          081D
Signing time:             Mon 09 Jun 2025 01:01:02 +0000
Manifest this update:     Mon 09 Jun 2025 01:01:02 +0000
Manifest next update:     Tue 10 Jun 2025 01:01:02 +0000
Files and hashes:         1: q1wa2N15IqRaLMdIHv4B3UMwBsI.crl (hash: p4ALEI9nNrp9jdBtrDnLaRxXnKKHEn9xFL7xyX0YV0w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/9e99bf-2d89-4401-bc9f-cba8c8a5453e/1/q1wa2N15IqRaLMdIHv4B3UMwBsI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/9e99bf-2d89-4401-bc9f-cba8c8a5453e/1/q1wa2N15IqRaLMdIHv4B3UMwBsI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q1wa2N15IqRaLMdIHv4B3UMwBsI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 21:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:52:34:85:2d:f7:31:85:28:26:60:5f:0e:97:90:3a:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab5c1ad8dd7922a45a2cc7481efe01dd433006c2
        Validity
            Not Before: Jun  9 01:01:02 2025 GMT
            Not After : Jun 10 01:01:02 2025 GMT
        Subject: CN=0cccc2a5f907c1a5bd3cebab28dc1858946126ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:94:7f:c0:fe:82:66:5c:dd:20:e9:99:14:10:
                    43:7f:b4:8f:37:1e:88:e1:81:0a:05:f1:7d:c2:13:
                    01:29:8a:d2:e8:7f:f1:fe:c5:42:bf:fe:4c:cc:9d:
                    81:63:85:7c:33:dc:25:d7:c3:6a:ef:f4:03:74:43:
                    ec:95:90:4e:95:e0:2e:87:e6:4a:f5:2f:7d:7a:de:
                    40:55:86:55:f6:61:28:02:f4:5f:16:b0:49:62:ea:
                    4a:eb:d2:e3:cd:d3:a2:45:ce:f4:08:fb:7f:a6:fe:
                    a1:a4:71:fc:d4:66:2d:61:20:a7:55:59:94:ae:de:
                    9b:d9:7e:14:bf:90:eb:d2:ed:7a:3a:d2:11:5e:7b:
                    7b:2e:b2:6b:f1:00:0e:0b:97:21:69:6f:e6:27:ae:
                    9e:c2:41:72:5a:71:04:49:1f:77:80:1d:fa:14:27:
                    ec:b4:e8:52:5f:41:69:f5:28:b4:b1:29:2d:03:f9:
                    7c:34:fe:fc:59:7d:c5:83:d3:02:3a:0b:58:ed:02:
                    78:ec:ad:2f:ff:0c:3d:bf:48:27:c0:00:48:9c:ef:
                    04:4a:f7:53:97:e2:7b:7b:76:92:a7:6b:c3:fb:b7:
                    8f:c5:2f:be:51:89:c9:18:69:c1:2c:82:e6:1d:57:
                    e9:8a:48:16:fc:c6:bc:02:ba:af:27:86:53:83:04:
                    dc:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:CC:C2:A5:F9:07:C1:A5:BD:3C:EB:AB:28:DC:18:58:94:61:26:BA
            X509v3 Authority Key Identifier:
                keyid:AB:5C:1A:D8:DD:79:22:A4:5A:2C:C7:48:1E:FE:01:DD:43:30:06:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1wa2N15IqRaLMdIHv4B3UMwBsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/9e99bf-2d89-4401-bc9f-cba8c8a5453e/1/q1wa2N15IqRaLMdIHv4B3UMwBsI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/9e99bf-2d89-4401-bc9f-cba8c8a5453e/1/q1wa2N15IqRaLMdIHv4B3UMwBsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:4f:82:00:7c:f7:d6:22:ee:56:34:10:ea:bd:1d:2e:e9:49:
         49:de:4e:ef:ac:69:89:a9:3d:56:45:87:a9:2d:8f:12:51:eb:
         b4:ac:6b:bb:14:e4:39:c0:b4:9a:96:f7:62:25:09:b5:f0:6c:
         82:99:c9:8a:ba:9b:8b:52:81:f4:80:ea:92:b4:14:0f:ae:f9:
         9a:c0:46:38:09:d4:54:a9:b7:fc:b5:2c:47:f2:ef:ff:2e:f1:
         a7:49:5b:17:58:ef:30:0d:6a:bd:e3:2d:a5:f8:0f:33:85:a6:
         dd:be:ff:00:91:f4:e4:8f:f9:8d:8e:3c:d9:1c:f3:da:43:03:
         3e:8f:6d:33:4e:5f:47:56:02:c6:75:0a:89:f4:e0:a8:1b:11:
         bc:b4:8a:c3:0d:07:cd:db:cf:52:47:8c:8e:95:9c:b9:83:4a:
         98:29:eb:e2:55:bc:83:c9:94:12:0e:39:0d:a0:84:dd:c8:99:
         53:2d:a0:db:df:80:25:cb:93:3d:8e:75:15:c1:2d:cb:37:32:
         0f:46:eb:bc:ff:f8:f7:5a:6e:0f:92:17:9e:08:23:82:d2:38:
         da:dd:6d:8f:73:57:a0:10:c3:96:fb:bc:43:67:75:3d:49:d2:
         29:b0:2e:fa:1e:b0:5f:14:26:0c:6b:42:8c:d9:65:a2:4f:de:
         4b:f4:1d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:15:13 2025 by rpki-client