Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/712aff-bf6c-42be-8080-f7df62a68d92/1/mmzFSzPPHxLlQG8GUpxU3cbvz7s.mft
File:                     mmzFSzPPHxLlQG8GUpxU3cbvz7s.mft (raw, json)
Hash identifier:          SVwGKh0ZTNsGUcLg65Qr02d1nd166/2wPUw06suazdI=
Subject key identifier:   30:9B:F3:2B:A0:E5:8B:F9:55:3F:2B:0A:80:D6:7A:21:B9:55:CA:13
Authority key identifier: 9A:6C:C5:4B:33:CF:1F:12:E5:40:6F:06:52:9C:54:DD:C6:EF:CF:BB
Certificate issuer:       /CN=9a6cc54b33cf1f12e5406f06529c54ddc6efcfbb
Certificate serial:       01976F9A328D258002D3D09D06F4FAEF93CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mmzFSzPPHxLlQG8GUpxU3cbvz7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/712aff-bf6c-42be-8080-f7df62a68d92/1/mmzFSzPPHxLlQG8GUpxU3cbvz7s.mft
Manifest number:          09DD
Signing time:             Sat 14 Jun 2025 18:01:05 +0000
Manifest this update:     Sat 14 Jun 2025 18:01:05 +0000
Manifest next update:     Sun 15 Jun 2025 18:01:05 +0000
Files and hashes:         1: mmzFSzPPHxLlQG8GUpxU3cbvz7s.crl (hash: pIjO9kqZxVqezdwFccgqUqYPFGHlvFtWNrmwQkr2WmY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/712aff-bf6c-42be-8080-f7df62a68d92/1/mmzFSzPPHxLlQG8GUpxU3cbvz7s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/712aff-bf6c-42be-8080-f7df62a68d92/1/mmzFSzPPHxLlQG8GUpxU3cbvz7s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mmzFSzPPHxLlQG8GUpxU3cbvz7s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 18:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:9a:32:8d:25:80:02:d3:d0:9d:06:f4:fa:ef:93:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a6cc54b33cf1f12e5406f06529c54ddc6efcfbb
        Validity
            Not Before: Jun 14 18:01:05 2025 GMT
            Not After : Jun 15 18:01:05 2025 GMT
        Subject: CN=309bf32ba0e58bf9553f2b0a80d67a21b955ca13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:13:89:ed:72:eb:8d:cc:1e:67:36:80:d5:98:
                    6f:ff:3a:73:16:51:8a:48:ce:89:76:5d:ce:14:39:
                    57:e6:2d:7e:fc:73:b4:c5:a1:50:ab:f7:8f:21:78:
                    b6:c7:f4:e6:d6:7a:75:8d:61:89:53:78:c7:10:d4:
                    e7:46:fa:a9:88:82:db:f0:b0:83:d1:fb:02:f8:51:
                    fb:02:d3:de:9b:3d:ce:d0:7e:af:ae:27:67:20:4c:
                    db:25:c0:e7:fc:22:d3:fd:8c:29:70:6a:e7:ea:33:
                    f4:39:54:52:dc:09:f2:cc:d1:4c:5f:e6:00:bf:61:
                    ce:15:34:fa:c7:09:bd:0e:99:60:c4:22:0e:1d:72:
                    53:4f:56:2f:0e:cc:be:9b:e5:ec:d8:7d:43:26:5b:
                    46:f7:22:5a:52:d1:ec:c3:8c:14:aa:f0:76:24:74:
                    a2:2c:1f:f6:10:50:e1:cb:f0:30:6a:ee:da:c1:1b:
                    98:ca:d1:aa:06:b0:8e:93:97:eb:a4:af:08:6c:f7:
                    94:4a:66:c0:75:dd:be:70:07:f3:f0:b1:14:5f:2f:
                    36:c3:28:a6:fe:2c:df:93:60:7c:6c:5d:f8:ef:81:
                    ba:82:65:5b:7f:38:84:53:0d:34:ca:5d:84:fa:ab:
                    0a:72:37:e1:1c:cd:28:04:de:53:6b:76:ae:75:1e:
                    64:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:9B:F3:2B:A0:E5:8B:F9:55:3F:2B:0A:80:D6:7A:21:B9:55:CA:13
            X509v3 Authority Key Identifier:
                keyid:9A:6C:C5:4B:33:CF:1F:12:E5:40:6F:06:52:9C:54:DD:C6:EF:CF:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmzFSzPPHxLlQG8GUpxU3cbvz7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/712aff-bf6c-42be-8080-f7df62a68d92/1/mmzFSzPPHxLlQG8GUpxU3cbvz7s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/712aff-bf6c-42be-8080-f7df62a68d92/1/mmzFSzPPHxLlQG8GUpxU3cbvz7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:87:04:d6:e3:a6:01:59:26:b1:75:a0:aa:cf:b3:ef:11:a8:
         cf:87:88:10:fb:41:b7:19:a5:2d:b8:47:db:c2:08:36:17:83:
         ce:3f:e2:51:e9:8b:29:40:c1:93:eb:d3:ae:9a:93:83:d8:f2:
         dc:d7:ec:6e:59:06:9f:67:36:49:53:80:0a:ce:ec:8b:e2:6b:
         7e:11:63:e5:c9:44:43:6f:04:ae:b5:b1:49:e8:e0:8c:e8:f0:
         82:14:77:40:fb:95:b0:3a:1b:a6:e0:0a:e5:a6:fe:cf:73:94:
         12:f4:d2:e3:f2:19:a0:49:6f:ad:de:b5:43:80:99:62:76:cc:
         3b:f5:85:bb:91:ba:0c:2d:d6:64:6f:d9:4e:82:a0:6f:92:22:
         a7:b0:d4:dd:a8:a6:0a:8f:82:43:4a:c8:47:78:3c:6b:81:a0:
         5b:83:6f:4d:37:f3:3c:5e:c0:a3:ba:36:cb:8b:85:99:dc:49:
         38:dd:2a:4d:bb:ca:dd:fc:14:62:32:0c:97:d0:3a:75:56:6a:
         a7:58:48:eb:c1:24:de:0a:48:77:0c:db:b3:d5:03:1a:bf:77:
         89:cb:48:9c:21:61:a4:5a:09:22:d0:a7:95:b8:1e:ef:ae:f3:
         f0:a2:e1:80:fb:02:01:1d:30:a1:cb:e1:d2:1f:46:26:e7:b6:
         87:57:d0:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:08:29 2025 by rpki-client