Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.mft
File:                     MXvyYLzaMCviwgdijPsWRHhhT-U.mft (raw, json)
Hash identifier:          cjWD5VWGrOo3NGKSSrUDXx7OPWfGhqHiEJlJZ/TJulU=
Subject key identifier:   1D:5E:C3:96:F1:AB:C6:37:22:23:AF:79:8E:97:60:2D:E5:E1:A3:61
Authority key identifier: 31:7B:F2:60:BC:DA:30:2B:E2:C2:07:62:8C:FB:16:44:78:61:4F:E5
Certificate issuer:       /CN=317bf260bcda302be2c207628cfb164478614fe5
Certificate serial:       01976F998754318A48DE27F5F14F92477CE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MXvyYLzaMCviwgdijPsWRHhhT-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.mft
Manifest number:          0D04
Signing time:             Sat 14 Jun 2025 18:00:21 +0000
Manifest this update:     Sat 14 Jun 2025 18:00:21 +0000
Manifest next update:     Sun 15 Jun 2025 18:00:21 +0000
Files and hashes:         1: MXvyYLzaMCviwgdijPsWRHhhT-U.crl (hash: jDLC/DBJNOpqLQ3KSn9n6og/ZJAK1EiDvzR/pAG30Vw=)
                          2: penXvalgbMBLZqcx96rUayqK3NQ.roa (hash: vb/Iw29Kb6TCjGenAwHcr/Ra62ZOMD3/iU+HDEP/27c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MXvyYLzaMCviwgdijPsWRHhhT-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 18:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:99:87:54:31:8a:48:de:27:f5:f1:4f:92:47:7c:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=317bf260bcda302be2c207628cfb164478614fe5
        Validity
            Not Before: Jun 14 18:00:21 2025 GMT
            Not After : Jun 15 18:00:21 2025 GMT
        Subject: CN=1d5ec396f1abc6372223af798e97602de5e1a361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2b:d2:17:eb:b2:be:e9:97:a9:43:2c:a8:58:
                    76:f9:90:48:cd:c6:7b:4a:61:5c:d4:28:37:d9:5e:
                    27:a4:27:a6:a2:75:57:17:f2:e6:7b:c1:65:dc:61:
                    81:67:d2:71:68:06:0c:89:17:f1:db:15:c5:2e:07:
                    c8:2f:2a:9e:96:59:ba:a4:df:fc:6e:11:03:0f:6a:
                    03:29:ac:1a:6e:03:af:8c:79:82:59:0e:ea:86:48:
                    22:8d:48:f1:d7:14:54:03:67:69:56:eb:e8:51:79:
                    35:bd:fa:df:6c:4e:6a:37:61:d7:b8:da:9f:5e:22:
                    97:71:74:04:4c:5a:a9:9f:e8:f8:96:e6:73:77:b7:
                    5b:b7:38:9a:d6:20:04:e2:fb:5d:4a:83:c2:6d:6c:
                    1e:f1:01:dd:d2:2c:80:ed:94:0a:c7:98:9f:94:30:
                    11:7b:b6:ad:b6:a2:4f:f6:01:34:ec:7d:59:e4:61:
                    99:a4:c1:a6:c0:d4:00:12:05:2d:5e:49:8a:bf:16:
                    0b:83:29:59:31:ab:33:e0:10:1a:4d:0d:ab:86:14:
                    3e:da:0f:c4:ba:8c:9b:d4:07:ee:42:3e:19:ba:6d:
                    e1:b5:50:f2:6f:c6:00:f0:59:c8:e6:f0:a0:02:e1:
                    00:97:a3:61:86:f5:bf:d4:22:d9:11:67:1e:4b:29:
                    8a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:5E:C3:96:F1:AB:C6:37:22:23:AF:79:8E:97:60:2D:E5:E1:A3:61
            X509v3 Authority Key Identifier:
                keyid:31:7B:F2:60:BC:DA:30:2B:E2:C2:07:62:8C:FB:16:44:78:61:4F:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXvyYLzaMCviwgdijPsWRHhhT-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:59:c5:8f:19:d4:32:31:3b:73:a5:75:24:80:d8:c9:b9:44:
         ec:a1:8e:42:08:60:f6:70:0f:f8:a7:54:67:2a:45:d2:3b:29:
         49:d2:8f:9d:18:e6:75:2a:56:1a:d4:46:e4:fc:84:ca:26:8a:
         41:74:c4:b9:8a:61:e8:59:47:c0:86:b4:57:33:9c:35:21:eb:
         18:ff:cb:3b:ec:0d:9d:97:76:5e:85:d7:2f:28:8b:40:ee:5c:
         57:b1:45:8b:b9:da:3b:4d:ca:14:23:7c:83:b1:ff:d7:d8:89:
         11:92:af:b6:d3:89:6e:e2:b8:a9:ff:43:ba:2b:67:c7:93:64:
         26:df:a6:a1:1b:be:65:fd:b7:02:27:e0:2d:11:7e:29:ef:af:
         f0:af:50:d9:5d:7b:4d:7e:3e:a7:81:c6:e9:a6:85:42:d7:38:
         6b:fc:87:b0:ba:ef:cb:8a:7f:a8:62:8a:b1:c0:3b:b8:0a:62:
         8d:7c:4e:1d:ce:ea:b7:70:c3:c3:a4:19:33:f5:4e:82:b2:df:
         d8:ee:61:9f:5e:23:07:ed:06:19:f6:0a:11:da:a9:b3:1b:79:
         fd:54:b4:bb:de:26:6a:e5:7d:93:68:c1:12:18:40:78:58:e3:
         37:7f:c0:11:d2:2e:e4:65:58:21:e9:cc:bd:f9:89:57:c4:a6:
         f1:ab:90:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:09:20 2025 by rpki-client