Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/a182b7-1565-4c16-86b8-b85f4039b9cf/1/ky6JreaI2S6euPGuyJs10jA9Rrg.mft
File:                     ky6JreaI2S6euPGuyJs10jA9Rrg.mft (raw, json)
Hash identifier:          kdr8iXIE8SW5LcWtJGINArRvX5K5ctyF2vo9NbGItuI=
Subject key identifier:   8C:D0:12:A0:86:D5:AE:CD:0D:5C:01:E0:19:78:0E:2F:AD:D3:12:8A
Authority key identifier: 93:2E:89:AD:E6:88:D9:2E:9E:B8:F1:AE:C8:9B:35:D2:30:3D:46:B8
Certificate issuer:       /CN=932e89ade688d92e9eb8f1aec89b35d2303d46b8
Certificate serial:       0197684E317E7977D338ACF667E3A141072D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ky6JreaI2S6euPGuyJs10jA9Rrg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/a182b7-1565-4c16-86b8-b85f4039b9cf/1/ky6JreaI2S6euPGuyJs10jA9Rrg.mft
Manifest number:          1090
Signing time:             Fri 13 Jun 2025 08:00:44 +0000
Manifest this update:     Fri 13 Jun 2025 08:00:44 +0000
Manifest next update:     Sat 14 Jun 2025 08:00:44 +0000
Files and hashes:         1: ky6JreaI2S6euPGuyJs10jA9Rrg.crl (hash: jLFiLZ9oAmUSd0zzDGKi3+bI9AVI+2p0BP+fPtr9c24=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/a182b7-1565-4c16-86b8-b85f4039b9cf/1/ky6JreaI2S6euPGuyJs10jA9Rrg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/a182b7-1565-4c16-86b8-b85f4039b9cf/1/ky6JreaI2S6euPGuyJs10jA9Rrg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ky6JreaI2S6euPGuyJs10jA9Rrg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 08:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:4e:31:7e:79:77:d3:38:ac:f6:67:e3:a1:41:07:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=932e89ade688d92e9eb8f1aec89b35d2303d46b8
        Validity
            Not Before: Jun 13 08:00:44 2025 GMT
            Not After : Jun 14 08:00:44 2025 GMT
        Subject: CN=8cd012a086d5aecd0d5c01e019780e2fadd3128a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f8:16:9d:4a:30:b8:75:d8:a1:5c:ef:ef:ad:
                    6f:bb:e2:26:a9:b4:69:f4:2c:9d:00:80:12:92:f1:
                    3f:d0:fb:5c:42:a4:0b:cc:8a:91:58:eb:89:89:89:
                    fc:3e:20:4f:ab:25:3f:e4:e0:df:82:14:19:ed:67:
                    19:d2:d6:7f:10:e3:a9:bd:56:ed:9b:f7:a0:cc:94:
                    8e:b9:4d:08:6f:5f:94:1d:97:e8:c7:8f:ba:10:e6:
                    87:5d:7d:9d:55:d7:fe:ae:9c:fa:48:f5:f6:73:31:
                    72:e0:cd:34:ca:e5:2a:da:1a:85:56:1b:92:36:6b:
                    36:29:30:66:d4:6f:4d:69:97:e6:e6:b7:42:5b:0f:
                    43:24:eb:73:c0:f4:cf:b6:56:41:4e:a0:1b:69:27:
                    b7:4b:1c:98:b2:f8:ad:59:de:d9:03:f2:0e:a3:0d:
                    56:d6:39:bb:6f:0f:b1:bc:12:10:cf:a5:0f:ed:6a:
                    57:d6:d3:20:2e:2b:6e:28:7b:6d:26:42:47:71:2d:
                    79:27:01:21:c1:92:14:cc:6e:75:4c:b6:d4:6c:80:
                    36:61:c5:3f:08:d9:3a:dc:bc:d5:d0:2d:90:63:9d:
                    04:74:20:83:3a:09:06:56:85:5a:a1:79:cd:57:a5:
                    bb:8b:be:86:0d:24:53:eb:e9:27:52:f0:bb:04:46:
                    9d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:D0:12:A0:86:D5:AE:CD:0D:5C:01:E0:19:78:0E:2F:AD:D3:12:8A
            X509v3 Authority Key Identifier:
                keyid:93:2E:89:AD:E6:88:D9:2E:9E:B8:F1:AE:C8:9B:35:D2:30:3D:46:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ky6JreaI2S6euPGuyJs10jA9Rrg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a182b7-1565-4c16-86b8-b85f4039b9cf/1/ky6JreaI2S6euPGuyJs10jA9Rrg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a182b7-1565-4c16-86b8-b85f4039b9cf/1/ky6JreaI2S6euPGuyJs10jA9Rrg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:91:c5:41:7f:ed:bd:52:64:dc:6c:6b:44:51:09:36:fc:43:
         13:6c:67:c1:88:03:e1:2d:48:45:10:05:1a:a0:db:fd:5d:32:
         86:69:e3:df:6e:2f:d5:8e:98:12:02:ab:0a:9b:9c:12:e1:2e:
         37:1a:65:b9:84:cc:b8:21:2b:ea:3f:3f:87:31:88:07:bd:1c:
         2c:4d:da:81:40:d3:a5:c7:7a:fb:f2:42:f0:89:22:44:f6:3e:
         fa:00:91:27:c4:a7:39:76:74:64:93:be:eb:5c:9f:bf:f2:22:
         36:2b:83:a4:22:3d:b2:ef:6c:c2:a6:c2:7a:03:22:6d:d2:4f:
         4b:10:3a:64:2e:9a:b9:7f:64:d7:2f:01:ef:da:cd:28:f8:4e:
         7c:61:70:21:81:01:47:68:1c:61:40:e3:83:5c:db:f4:19:50:
         df:da:05:b7:5f:01:b6:52:94:43:16:89:66:74:24:13:2b:5a:
         10:2f:3e:3b:95:c0:15:60:69:14:b6:dd:1d:bd:09:d9:fe:b3:
         ca:97:d3:0a:e8:77:33:b4:74:3d:d2:6b:b3:e3:00:02:36:0b:
         6b:5c:e9:b2:89:44:13:58:6b:21:1d:cf:3f:e7:3b:cb:cb:90:
         a9:65:cd:08:eb:a4:f1:1d:07:92:99:82:b8:75:ef:50:0d:ec:
         36:9b:8a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:20:00 2025 by rpki-client