Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/4fe287-0987-420b-a855-cfb4729c8994/1/adEXVt0Db1nuEef4Gkh6b90jE20.mft
File:                     adEXVt0Db1nuEef4Gkh6b90jE20.mft (raw, json)
Hash identifier:          L3r9Lth77u7gSIfVY4/AQWg24e0RDZ722qmWmSCWH2Q=
Subject key identifier:   0B:6A:E2:1D:88:A4:DC:17:11:D0:84:CC:F8:9F:46:CD:42:13:3D:45
Authority key identifier: 69:D1:17:56:DD:03:6F:59:EE:11:E7:F8:1A:48:7A:6F:DD:23:13:6D
Certificate issuer:       /CN=69d11756dd036f59ee11e7f81a487a6fdd23136d
Certificate serial:       019769611865AD46C8081775608061D0724E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/adEXVt0Db1nuEef4Gkh6b90jE20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/4fe287-0987-420b-a855-cfb4729c8994/1/adEXVt0Db1nuEef4Gkh6b90jE20.mft
Manifest number:          079F
Signing time:             Fri 13 Jun 2025 13:01:00 +0000
Manifest this update:     Fri 13 Jun 2025 13:01:00 +0000
Manifest next update:     Sat 14 Jun 2025 13:01:00 +0000
Files and hashes:         1: adEXVt0Db1nuEef4Gkh6b90jE20.crl (hash: 3YTWe6S88Zte6VRS/wutBVCcJjA5AiEPeu+Ls8nShT4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/4fe287-0987-420b-a855-cfb4729c8994/1/adEXVt0Db1nuEef4Gkh6b90jE20.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/4fe287-0987-420b-a855-cfb4729c8994/1/adEXVt0Db1nuEef4Gkh6b90jE20.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/adEXVt0Db1nuEef4Gkh6b90jE20.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:61:18:65:ad:46:c8:08:17:75:60:80:61:d0:72:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69d11756dd036f59ee11e7f81a487a6fdd23136d
        Validity
            Not Before: Jun 13 13:01:00 2025 GMT
            Not After : Jun 14 13:01:00 2025 GMT
        Subject: CN=0b6ae21d88a4dc1711d084ccf89f46cd42133d45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c0:1f:c1:c8:18:d9:79:5a:19:7c:e9:b0:48:
                    e6:16:74:42:b1:db:e3:9f:ab:0f:be:86:aa:f3:02:
                    73:27:db:a3:a8:d3:40:da:6a:24:87:d3:c5:86:b8:
                    6d:d7:79:e8:bf:d0:9e:dd:14:6c:e9:5f:b7:6e:c9:
                    95:19:d9:db:1e:f3:f1:94:0d:29:8e:92:70:40:92:
                    ba:6d:7b:7c:7b:a1:84:8b:a5:b6:1e:f9:7d:a7:a9:
                    63:56:12:51:66:1e:38:49:c8:e3:f1:9a:68:d6:ab:
                    42:d5:e5:b3:dd:ac:7c:00:4e:9d:3e:f3:c6:8a:a7:
                    29:b9:1a:38:1f:7e:a4:ae:9b:42:10:06:e5:9b:43:
                    40:82:86:14:64:26:93:c4:5a:14:c7:84:ab:ad:e9:
                    63:b6:43:9b:d4:68:75:5a:8f:77:c1:79:8e:e9:c3:
                    1a:2b:26:5d:eb:49:68:49:82:7e:04:0e:be:40:55:
                    29:89:1f:54:24:dd:b4:97:2b:27:7e:f5:17:46:f7:
                    be:19:49:e8:5c:46:0c:d5:5a:06:f9:98:5d:a6:07:
                    ce:8d:b5:84:9a:bc:33:58:dc:93:92:3a:e4:13:eb:
                    82:1b:fc:72:57:2d:ff:13:6e:2b:35:48:b3:f7:9f:
                    aa:f4:a6:69:02:8d:6f:ec:4a:b4:be:84:80:5a:ad:
                    dd:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:6A:E2:1D:88:A4:DC:17:11:D0:84:CC:F8:9F:46:CD:42:13:3D:45
            X509v3 Authority Key Identifier:
                keyid:69:D1:17:56:DD:03:6F:59:EE:11:E7:F8:1A:48:7A:6F:DD:23:13:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adEXVt0Db1nuEef4Gkh6b90jE20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/4fe287-0987-420b-a855-cfb4729c8994/1/adEXVt0Db1nuEef4Gkh6b90jE20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/4fe287-0987-420b-a855-cfb4729c8994/1/adEXVt0Db1nuEef4Gkh6b90jE20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:46:1f:f2:91:ea:8a:e0:b8:fd:36:c1:9c:f2:e4:92:d5:04:
         fe:5e:55:53:d6:a0:15:fd:47:d0:8b:3a:3d:1e:4e:64:71:25:
         aa:d1:3f:c6:3a:22:2b:2e:db:d7:ab:9f:a5:f0:6b:90:7a:e5:
         f1:39:5a:af:88:7f:b5:6b:b3:57:f8:4c:61:13:f5:32:50:65:
         58:14:70:a3:db:7f:be:bc:6b:81:13:07:dc:72:5a:91:29:ba:
         65:7d:1a:81:cc:a8:80:93:4c:9f:ea:ec:e8:7a:26:49:5f:b6:
         e5:9f:25:63:38:ca:c0:d7:37:c7:a6:58:4e:15:2a:aa:a6:0b:
         b1:fd:24:fa:cb:6e:26:37:f7:69:34:59:7f:12:39:f0:2f:52:
         a6:da:e2:25:20:a9:7c:56:19:0a:93:3e:1e:e9:cc:a0:13:b9:
         5b:4b:42:ae:2b:38:ab:5a:88:fd:ac:e6:53:ff:9c:dc:c7:a5:
         73:78:f3:da:fc:c1:c9:4a:8f:6c:41:36:63:37:d7:0b:22:d2:
         ce:5a:c2:98:91:31:ab:e6:8f:8a:01:b6:26:f3:d5:ac:02:e9:
         d0:c7:01:fd:9d:90:d5:d0:c6:eb:14:8d:1c:b9:85:e8:e6:6d:
         bb:b3:9b:f2:9f:61:71:94:bb:16:f8:7d:5a:44:3c:0a:be:9b:
         a6:28:19:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:02:36 2025 by rpki-client