Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.mft
File:                     Ic4xHI7WC-8bXk99O4ZBB4FEGKM.mft (raw, json)
Hash identifier:          XgnTWuwto/sAxvHoCXrega5pS4QrubD5HxpUmG5hxrc=
Subject key identifier:   F7:74:7C:0D:7B:EB:90:0D:C2:8C:17:41:A5:1C:AF:7A:14:74:E7:AB
Authority key identifier: 21:CE:31:1C:8E:D6:0B:EF:1B:5E:4F:7D:3B:86:41:07:81:44:18:A3
Certificate issuer:       /CN=21ce311c8ed60bef1b5e4f7d3b864107814418a3
Certificate serial:       01975F13F8151DD8228822438357CF3AA37F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.mft
Manifest number:          0928
Signing time:             Wed 11 Jun 2025 13:00:33 +0000
Manifest this update:     Wed 11 Jun 2025 13:00:33 +0000
Manifest next update:     Thu 12 Jun 2025 13:00:33 +0000
Files and hashes:         1: Ic4xHI7WC-8bXk99O4ZBB4FEGKM.crl (hash: 0u3+ktW9HtJfl6WziHCzJSVVr4Z1TJt0awo6cKVRgmU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 13:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5f:13:f8:15:1d:d8:22:88:22:43:83:57:cf:3a:a3:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21ce311c8ed60bef1b5e4f7d3b864107814418a3
        Validity
            Not Before: Jun 11 13:00:33 2025 GMT
            Not After : Jun 12 13:00:33 2025 GMT
        Subject: CN=f7747c0d7beb900dc28c1741a51caf7a1474e7ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b1:f6:36:8c:d6:df:2c:56:19:02:ea:bf:28:
                    6f:7b:2e:b4:67:06:89:48:14:bb:cb:bb:f7:74:18:
                    de:20:79:d2:b5:5a:f5:74:e8:1d:31:bf:00:eb:d1:
                    1c:8c:10:24:bd:7a:35:7c:f1:2c:77:89:9a:8e:17:
                    be:50:5d:cd:f1:2d:c9:15:48:be:ac:0e:38:d4:ec:
                    d7:16:bb:3e:4d:60:e3:fd:b7:5b:49:45:86:b5:f0:
                    34:89:90:c1:dd:6a:ef:07:af:65:26:f3:6b:a7:df:
                    d7:af:dd:0c:ac:9b:34:e8:2d:35:02:05:16:1a:62:
                    0a:7f:2e:35:25:7e:cb:4b:f1:88:14:fb:cc:72:73:
                    f3:30:02:21:2e:cb:5b:a7:32:24:5f:6a:35:a5:6e:
                    ea:40:7e:18:aa:79:37:6f:28:e2:2a:01:65:6b:94:
                    ee:ed:0e:36:13:7f:5c:14:84:7e:99:88:b1:fd:e5:
                    fb:2e:6e:46:39:08:eb:51:19:9e:e3:37:90:f6:4b:
                    b2:47:f6:80:58:13:9a:6c:bf:69:17:17:a8:58:a9:
                    2d:72:6a:2f:98:5d:33:86:c7:70:29:80:4b:50:20:
                    54:56:cd:1e:bf:11:d2:a3:a8:ba:19:9f:9b:7d:40:
                    c1:c5:aa:a8:7e:6e:6b:00:30:0d:1e:f0:d7:b3:9d:
                    d0:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:74:7C:0D:7B:EB:90:0D:C2:8C:17:41:A5:1C:AF:7A:14:74:E7:AB
            X509v3 Authority Key Identifier:
                keyid:21:CE:31:1C:8E:D6:0B:EF:1B:5E:4F:7D:3B:86:41:07:81:44:18:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:c6:c4:2a:c4:08:aa:f3:9f:e0:16:e0:5b:9b:ea:da:80:75:
         d3:d7:91:39:00:43:3a:47:5e:b8:f3:29:e0:52:d4:fd:fc:99:
         26:7e:2b:cb:8d:b3:03:a1:0f:d5:aa:bf:53:7b:20:8a:59:e3:
         09:0f:52:f0:1a:c9:9b:f3:b3:92:8a:cb:a5:ac:ca:d9:3a:88:
         af:e2:9e:6e:32:b4:09:29:12:17:2f:f6:f4:34:52:45:00:00:
         4e:5c:94:df:34:de:84:e0:24:54:32:51:c8:53:f3:d7:8f:45:
         92:89:51:a4:93:84:03:cd:cc:b6:0e:9b:8f:6a:4e:23:f5:81:
         d6:2e:00:da:4d:23:77:79:26:09:54:16:64:e9:be:ae:ba:af:
         e9:e8:7d:b2:4d:5e:21:34:69:35:5c:6b:22:cb:e3:72:80:64:
         68:da:59:dd:29:0d:00:e3:d7:f7:4c:5b:e5:72:44:c8:93:a6:
         d9:00:50:72:a8:ae:26:f0:5d:ae:7b:60:19:91:89:c4:d4:6b:
         0d:52:b3:cd:06:cf:b0:02:ed:1c:b4:06:ef:86:78:88:86:30:
         36:0e:8b:32:77:93:0c:d5:a5:2b:6f:70:6e:a7:8d:dd:8f:81:
         14:35:0f:80:de:11:27:79:31:5e:d7:08:8d:e7:52:61:68:2c:
         e3:d2:5e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 21:57:32 2025 by rpki-client