Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/569442-4e6d-4ebe-9bb2-3fdb753a8619/1/IsXMfDZMkOr6uml-C_WfBVaalpU.mft
File:                     IsXMfDZMkOr6uml-C_WfBVaalpU.mft (raw, json)
Hash identifier:          GG/t89nS8J/5wf5jbDP9IKu9+1TcHbA4aS112lOYZKY=
Subject key identifier:   89:57:26:C2:BF:42:46:87:86:44:18:52:FD:95:58:CE:2C:69:EF:6D
Authority key identifier: 22:C5:CC:7C:36:4C:90:EA:FA:BA:69:7E:0B:F5:9F:05:56:9A:96:95
Certificate issuer:       /CN=22c5cc7c364c90eafaba697e0bf59f05569a9695
Certificate serial:       019770757CDF6E4881FE16D0D9BC5E3210A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsXMfDZMkOr6uml-C_WfBVaalpU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/569442-4e6d-4ebe-9bb2-3fdb753a8619/1/IsXMfDZMkOr6uml-C_WfBVaalpU.mft
Manifest number:          0C13
Signing time:             Sat 14 Jun 2025 22:00:37 +0000
Manifest this update:     Sat 14 Jun 2025 22:00:37 +0000
Manifest next update:     Sun 15 Jun 2025 22:00:37 +0000
Files and hashes:         1: IsXMfDZMkOr6uml-C_WfBVaalpU.crl (hash: RgfNcGMdwQ67Cl8mqQbtVz1RFHHJlQhLe6mwytp4Tfw=)
                          2: Rwalp_l1gE5qteHvPqygUpBfDbs.roa (hash: uNWR8irKkp/fDA/zKVLrXnW+fuP58wA187hFjBN4YQg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/569442-4e6d-4ebe-9bb2-3fdb753a8619/1/IsXMfDZMkOr6uml-C_WfBVaalpU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/569442-4e6d-4ebe-9bb2-3fdb753a8619/1/IsXMfDZMkOr6uml-C_WfBVaalpU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IsXMfDZMkOr6uml-C_WfBVaalpU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:75:7c:df:6e:48:81:fe:16:d0:d9:bc:5e:32:10:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c5cc7c364c90eafaba697e0bf59f05569a9695
        Validity
            Not Before: Jun 14 22:00:37 2025 GMT
            Not After : Jun 15 22:00:37 2025 GMT
        Subject: CN=895726c2bf42468786441852fd9558ce2c69ef6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3b:e7:9e:bc:ad:a2:f2:64:76:df:ae:46:3e:
                    cf:3a:9e:da:64:cd:b4:83:06:2e:70:81:3c:a3:c7:
                    49:31:15:2a:45:eb:75:c0:58:2f:bd:85:8a:62:5b:
                    46:62:d4:c3:ae:ab:04:62:e7:84:5b:24:45:44:1b:
                    58:f8:c7:bc:6d:eb:05:ba:3c:fc:f5:45:08:29:a9:
                    90:5a:b5:b1:67:d6:56:cf:6a:f3:12:64:f8:b5:5e:
                    d4:08:cf:84:d6:e9:ca:82:2c:b3:4e:2b:34:52:83:
                    f7:48:42:62:f2:54:65:91:78:0d:6a:9c:51:d0:d5:
                    56:0c:4b:0e:dc:47:0b:6f:10:c3:21:7b:10:f5:f9:
                    66:cb:fc:3c:74:ca:cd:c7:41:05:0e:28:dd:4c:cc:
                    64:fa:4c:0f:fa:71:20:ab:09:2d:f1:89:20:e9:6f:
                    c7:03:4a:44:a3:e3:95:a6:a3:f4:3b:ad:56:51:36:
                    e0:7a:5e:44:14:8c:b9:b3:5c:38:02:01:d6:f4:1d:
                    7a:00:ca:f7:c5:bb:e8:3c:82:0f:78:ce:4c:4b:f1:
                    c8:9f:ef:96:ae:e0:49:8e:a8:dc:cd:4b:da:46:f7:
                    76:72:ca:18:b1:7f:f7:fa:53:2c:41:ac:51:34:a5:
                    c8:e7:23:9a:5a:63:d7:61:4c:c0:98:49:34:7b:11:
                    91:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:57:26:C2:BF:42:46:87:86:44:18:52:FD:95:58:CE:2C:69:EF:6D
            X509v3 Authority Key Identifier:
                keyid:22:C5:CC:7C:36:4C:90:EA:FA:BA:69:7E:0B:F5:9F:05:56:9A:96:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsXMfDZMkOr6uml-C_WfBVaalpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/569442-4e6d-4ebe-9bb2-3fdb753a8619/1/IsXMfDZMkOr6uml-C_WfBVaalpU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/569442-4e6d-4ebe-9bb2-3fdb753a8619/1/IsXMfDZMkOr6uml-C_WfBVaalpU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:ba:70:3b:99:82:9f:46:b3:ba:af:ff:a6:76:b5:16:53:1e:
         27:4b:66:87:a8:62:0c:8d:b8:83:19:6b:69:0f:fc:c5:ef:4a:
         60:bf:f3:b0:7b:e8:08:45:d3:77:40:98:f5:87:7b:4c:d2:03:
         7b:02:5c:0e:57:de:78:83:b4:7a:31:6f:16:6b:cd:ac:3b:4f:
         92:c2:62:17:a6:32:92:75:f2:62:a5:c9:fc:88:cf:28:68:10:
         de:7d:82:23:59:d8:e4:97:5f:4d:39:55:a7:60:cc:99:fb:71:
         eb:e0:22:2c:5f:5b:b1:ca:a4:7b:8c:aa:fb:58:1f:3f:d3:92:
         c6:72:02:1d:bd:a2:68:04:63:ae:9a:5d:10:54:de:b7:4a:36:
         6f:8b:4f:56:5f:be:43:74:c3:f9:ae:c3:cc:07:14:2b:70:b0:
         4e:46:dd:21:6c:4d:51:99:70:50:db:66:a6:d6:5a:f1:aa:8c:
         cc:61:5f:35:1f:3d:6f:22:af:e0:38:df:b5:3d:0e:ae:bd:c3:
         fe:0c:36:15:42:d8:5b:84:a7:f2:95:46:d1:9e:73:3f:12:0e:
         2a:0e:8c:33:bc:4b:b0:d4:77:95:1b:ec:a4:d2:ae:34:3e:45:
         21:1b:ed:5c:2b:13:4d:e6:8c:c4:0d:12:8f:f3:2a:70:f7:b9:
         a2:ef:c2:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:36:43 2025 by rpki-client