Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/e7e8fe-ede6-49e5-a2dc-0d1da3713fe9/1/V9ARtXf5Cqfo4MxSKeHymYOCRZM.mft
File:                     V9ARtXf5Cqfo4MxSKeHymYOCRZM.mft (raw, json)
Hash identifier:          un7ivQjy95Ts1W2HfDdc0+KFjIs4nvK6WzcLzUTppvk=
Subject key identifier:   75:01:3B:75:B2:49:89:58:E1:08:51:2E:80:C8:86:3D:9E:F0:B3:18
Authority key identifier: 57:D0:11:B5:77:F9:0A:A7:E8:E0:CC:52:29:E1:F2:99:83:82:45:93
Certificate issuer:       /CN=57d011b577f90aa7e8e0cc5229e1f29983824593
Certificate serial:       01976997B0258BE413A02BB6AD3D3118B546
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V9ARtXf5Cqfo4MxSKeHymYOCRZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/e7e8fe-ede6-49e5-a2dc-0d1da3713fe9/1/V9ARtXf5Cqfo4MxSKeHymYOCRZM.mft
Manifest number:          158A
Signing time:             Fri 13 Jun 2025 14:00:38 +0000
Manifest this update:     Fri 13 Jun 2025 14:00:38 +0000
Manifest next update:     Sat 14 Jun 2025 14:00:38 +0000
Files and hashes:         1: V9ARtXf5Cqfo4MxSKeHymYOCRZM.crl (hash: 7oc5BDoGTAHcRvLRMQsemPs/Yf6A9TT/nNqwdcM6kCA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/e7e8fe-ede6-49e5-a2dc-0d1da3713fe9/1/V9ARtXf5Cqfo4MxSKeHymYOCRZM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/e7e8fe-ede6-49e5-a2dc-0d1da3713fe9/1/V9ARtXf5Cqfo4MxSKeHymYOCRZM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V9ARtXf5Cqfo4MxSKeHymYOCRZM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:97:b0:25:8b:e4:13:a0:2b:b6:ad:3d:31:18:b5:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57d011b577f90aa7e8e0cc5229e1f29983824593
        Validity
            Not Before: Jun 13 14:00:38 2025 GMT
            Not After : Jun 14 14:00:38 2025 GMT
        Subject: CN=75013b75b2498958e108512e80c8863d9ef0b318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c5:4a:48:1d:42:8d:da:10:1a:89:85:a1:b2:
                    7e:95:b0:90:3b:93:fb:a4:1b:bc:c7:de:af:93:e8:
                    55:d8:bd:fe:38:54:fa:b2:21:ee:da:29:94:4e:61:
                    de:b4:06:e6:7a:c3:f2:e0:9e:ac:9e:97:5f:f3:ed:
                    3f:45:5e:b2:a8:03:4c:5e:3c:33:03:b2:4f:ce:09:
                    04:b2:82:3a:37:be:97:c8:91:86:d2:97:9a:42:06:
                    13:c0:56:36:7b:57:d7:64:fb:75:5c:81:94:a4:a4:
                    c7:d4:2c:97:76:c3:65:e7:0f:5b:a8:28:0b:43:ac:
                    79:de:fc:f5:ed:05:0f:06:54:76:ea:dc:e1:ec:0b:
                    87:e9:63:c2:6c:f7:27:c3:1e:1d:cd:89:dc:5a:14:
                    7a:1a:a4:69:ec:3c:f8:e9:3e:6c:9b:2a:7f:ff:90:
                    65:b4:cf:a9:57:a4:2f:0b:a2:ee:b2:52:10:f8:a0:
                    cb:bd:3a:11:98:92:0f:fc:fd:c1:1c:35:cb:10:98:
                    20:3b:c0:eb:bb:cd:7c:0c:63:bd:fd:e6:22:e5:40:
                    d4:bb:6c:45:f6:c4:18:75:4d:e6:d9:61:c2:e5:cf:
                    fe:3f:b2:56:f8:57:b0:ab:44:fe:91:7d:68:bc:7d:
                    3b:49:cd:78:87:77:5f:9c:87:ad:e0:4c:e8:8f:dd:
                    44:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:01:3B:75:B2:49:89:58:E1:08:51:2E:80:C8:86:3D:9E:F0:B3:18
            X509v3 Authority Key Identifier:
                keyid:57:D0:11:B5:77:F9:0A:A7:E8:E0:CC:52:29:E1:F2:99:83:82:45:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9ARtXf5Cqfo4MxSKeHymYOCRZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e7e8fe-ede6-49e5-a2dc-0d1da3713fe9/1/V9ARtXf5Cqfo4MxSKeHymYOCRZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e7e8fe-ede6-49e5-a2dc-0d1da3713fe9/1/V9ARtXf5Cqfo4MxSKeHymYOCRZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:c9:ac:1a:78:69:e0:22:50:b8:15:44:59:8b:19:64:dc:8b:
         bf:75:16:87:40:91:a9:f6:cb:66:3a:d7:18:2c:fe:17:77:2b:
         ce:86:20:4e:4b:75:08:50:44:d3:82:cc:55:68:5e:42:30:01:
         09:de:a5:1c:fd:96:0b:c6:97:3d:d5:09:3f:58:dc:e6:67:b3:
         fe:3e:bd:62:9a:cf:bb:e1:f8:d4:b9:0e:97:a2:81:7c:c5:2a:
         0b:73:42:31:68:19:72:9a:c7:cc:c6:4d:e3:28:9e:13:28:60:
         f6:be:8d:4d:f8:6d:0a:6e:b7:2d:8b:c5:56:75:75:12:a2:9e:
         36:aa:39:46:88:ce:70:2e:73:b2:15:5f:73:4e:02:af:84:db:
         c8:fb:cb:0f:47:38:e1:59:2a:8e:50:06:81:e5:e3:0f:94:37:
         85:c2:29:8f:e5:1e:d3:28:6d:4c:47:86:37:c3:6e:73:36:55:
         9e:df:3b:a8:02:fb:9d:de:a9:81:ee:01:29:ca:e7:07:b5:00:
         32:c0:cc:63:52:1e:34:77:c7:cc:9e:ee:7b:79:93:54:d1:99:
         f4:c9:c3:6e:2a:0c:1e:3c:01:66:c1:51:af:9c:4c:49:e0:2a:
         36:2c:77:bd:31:96:1a:32:5b:dd:61:3e:a7:f5:ec:2d:10:71:
         d7:70:82:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:13:19 2025 by rpki-client