Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
File:                     CIKLx914SFC4lu197ZSD218B4Fk.mft (raw, json)
Hash identifier:          2TOHtnHWv6/m2FaNsu8WbhWs9wCV7UCpS2T5P85AADQ=
Subject key identifier:   55:94:C9:5A:A1:98:A6:38:1F:5D:C7:DD:0F:79:10:FC:5B:56:32:CA
Authority key identifier: 08:82:8B:C7:DD:78:48:50:B8:96:ED:7D:ED:94:83:DB:5F:01:E0:59
Certificate issuer:       /CN=08828bc7dd784850b896ed7ded9483db5f01e059
Certificate serial:       01974D453977632D4401EFBAE954D564BDF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
Manifest number:          03CC
Signing time:             Sun 08 Jun 2025 02:01:11 +0000
Manifest this update:     Sun 08 Jun 2025 02:01:11 +0000
Manifest next update:     Mon 09 Jun 2025 02:01:11 +0000
Files and hashes:         1: CIKLx914SFC4lu197ZSD218B4Fk.crl (hash: mTpIebRVodxHxUT4LxYiFaJ08FmRp70hf2KCB+LYz+I=)
                          2: V0Wj0jhw0RxatZH_nx8jTrLFEcc.roa (hash: mmVGDQsdur6eI4Kol0nAjQzRZYdIuybWdILnc/qmeGM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:45:39:77:63:2d:44:01:ef:ba:e9:54:d5:64:bd:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08828bc7dd784850b896ed7ded9483db5f01e059
        Validity
            Not Before: Jun  8 02:01:11 2025 GMT
            Not After : Jun  9 02:01:11 2025 GMT
        Subject: CN=5594c95aa198a6381f5dc7dd0f7910fc5b5632ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:39:16:23:0a:10:1d:24:2d:a6:ef:2e:2f:c6:
                    cf:43:e8:ba:e1:6d:61:84:be:83:78:b7:10:f9:7f:
                    26:c5:fe:e3:b6:4c:07:44:f8:b3:48:82:34:91:52:
                    bb:8b:d8:2b:b5:4e:8f:04:7c:0e:5b:a2:7b:52:92:
                    f0:e4:ea:8c:6b:41:65:fa:61:93:d6:98:d2:6a:6e:
                    dd:52:b4:9f:39:8b:fc:07:91:49:41:42:db:36:16:
                    13:da:79:eb:86:4a:95:65:a8:72:cf:8a:04:7e:5d:
                    43:f1:ca:41:5a:6d:6c:2f:9a:16:cc:39:ca:38:fc:
                    fa:aa:8c:b6:5e:4b:66:1c:a6:82:7c:cf:16:9a:30:
                    bd:74:23:61:25:17:15:b9:45:bb:a5:3e:48:f4:7d:
                    f2:c9:84:61:d9:f2:6b:eb:b5:25:d2:50:2d:20:e3:
                    50:3b:7b:46:c5:61:98:f2:df:b6:b1:09:63:aa:aa:
                    e2:52:c9:cd:de:66:47:af:f2:15:da:4f:61:ea:c4:
                    95:38:95:39:7b:d7:a6:26:10:8a:1b:57:9a:0d:22:
                    a8:5d:99:f2:20:09:5a:0f:2c:0a:ff:3e:11:65:e4:
                    29:0e:3d:2c:c6:7c:ef:89:d1:f1:f0:cd:b1:12:a3:
                    b8:e6:b5:ec:51:57:34:b0:56:09:80:2d:d9:23:33:
                    2b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:94:C9:5A:A1:98:A6:38:1F:5D:C7:DD:0F:79:10:FC:5B:56:32:CA
            X509v3 Authority Key Identifier:
                keyid:08:82:8B:C7:DD:78:48:50:B8:96:ED:7D:ED:94:83:DB:5F:01:E0:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:1c:69:60:f9:3c:83:63:e6:82:c2:43:91:1c:fa:9d:58:72:
         bd:04:1f:f4:6c:07:e6:a2:65:07:35:5b:ee:af:b7:99:98:93:
         58:47:07:11:0d:71:15:a6:52:d5:a1:7e:ea:ce:dd:e3:72:e0:
         c5:fe:53:7e:05:2f:3c:47:71:20:0d:08:e4:71:56:06:93:51:
         fd:2d:af:0a:dc:01:59:b3:60:43:06:03:81:c3:0a:cb:fe:7d:
         6d:cb:aa:68:dd:a6:0b:71:b3:f8:4b:26:a9:42:ad:cd:53:cc:
         49:67:75:a9:ef:80:84:59:23:1d:9b:a2:19:3f:f2:c6:bc:82:
         4b:92:fd:bd:5e:50:05:c0:5a:c3:24:d2:e7:88:c8:9a:4a:e6:
         21:97:e7:d4:3f:c8:c3:f2:9a:a9:53:b4:ac:8b:4c:72:30:29:
         1b:9f:e8:ab:9e:ee:1c:d4:7f:61:27:a5:9b:c9:b6:42:ba:de:
         76:56:6f:ff:54:84:10:04:31:42:5d:e8:b9:9a:1e:01:93:75:
         9c:bf:f7:7b:c3:ba:40:a3:2f:f9:ee:d4:a2:81:5c:d0:38:d2:
         36:0f:1d:ad:91:69:da:87:c6:b4:b4:8a:98:d0:9a:bc:65:f5:
         31:23:f6:6e:9a:d6:7e:25:07:50:b9:59:32:c1:0f:0e:83:95:
         d7:1b:05:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:32:27 2025 by rpki-client