Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/4e9e37-6e66-41b1-aa99-1516b6d82e2d/1/mXFUBuche_wTgSpHBMYq4JnnyP8.mft
File:                     mXFUBuche_wTgSpHBMYq4JnnyP8.mft (raw, json)
Hash identifier:          3lulaBYd3kTHG7OM8kOZx6nmQK0f6u2s3Z63K/NbQ4s=
Subject key identifier:   03:6E:1A:75:F7:2F:2D:9C:B4:C5:C7:CF:D7:36:08:BC:06:A9:F8:53
Authority key identifier: 99:71:54:06:E7:21:7B:FC:13:81:2A:47:04:C6:2A:E0:99:E7:C8:FF
Certificate issuer:       /CN=99715406e7217bfc13812a4704c62ae099e7c8ff
Certificate serial:       01977075F8776B393C23606D1FA0E1F0E113
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mXFUBuche_wTgSpHBMYq4JnnyP8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/4e9e37-6e66-41b1-aa99-1516b6d82e2d/1/mXFUBuche_wTgSpHBMYq4JnnyP8.mft
Manifest number:          02AE
Signing time:             Sat 14 Jun 2025 22:01:08 +0000
Manifest this update:     Sat 14 Jun 2025 22:01:08 +0000
Manifest next update:     Sun 15 Jun 2025 22:01:08 +0000
Files and hashes:         1: mXFUBuche_wTgSpHBMYq4JnnyP8.crl (hash: WWPw0gzHcjwCGTEAATXbHHYRxKeP4woi0RShvTzCBQE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/4e9e37-6e66-41b1-aa99-1516b6d82e2d/1/mXFUBuche_wTgSpHBMYq4JnnyP8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/4e9e37-6e66-41b1-aa99-1516b6d82e2d/1/mXFUBuche_wTgSpHBMYq4JnnyP8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mXFUBuche_wTgSpHBMYq4JnnyP8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:75:f8:77:6b:39:3c:23:60:6d:1f:a0:e1:f0:e1:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99715406e7217bfc13812a4704c62ae099e7c8ff
        Validity
            Not Before: Jun 14 22:01:08 2025 GMT
            Not After : Jun 15 22:01:08 2025 GMT
        Subject: CN=036e1a75f72f2d9cb4c5c7cfd73608bc06a9f853
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:35:08:cf:4e:82:28:e1:df:7e:dc:a5:80:28:
                    7d:6a:0a:58:df:32:a1:5a:5f:96:ea:e9:09:82:6d:
                    19:2b:d6:15:ac:2f:48:4a:e9:8e:92:21:16:d2:74:
                    b6:cd:1e:40:e7:d8:07:89:07:fe:57:07:d7:29:52:
                    e6:ab:4b:74:0d:ff:f6:6e:77:43:b7:2d:89:2c:6f:
                    12:aa:fe:14:ac:2e:02:25:66:1a:86:52:b0:c1:ee:
                    32:9d:47:87:08:d7:1a:5b:27:8d:66:cb:b4:91:f9:
                    04:75:ef:a7:3e:de:7f:6b:46:27:ab:cc:d5:fe:38:
                    d9:22:12:4c:f9:2b:46:82:08:e4:f6:2b:17:fb:ee:
                    09:5b:0e:d7:00:af:52:60:ca:29:a8:9d:ee:3a:f0:
                    e9:f7:5c:89:7f:5d:69:b6:e8:81:6b:de:cf:3c:8b:
                    48:97:aa:de:0d:bf:19:c2:55:c7:50:3b:17:3c:92:
                    fd:4e:27:76:4a:57:3d:04:68:21:11:0d:49:b4:81:
                    ef:32:d3:9b:8c:0c:63:bb:d3:d0:a4:5d:66:69:96:
                    ba:c3:a0:43:dc:e9:58:f0:30:7a:4b:61:7f:f4:2c:
                    b4:5d:eb:5e:fd:c6:69:a0:7e:ef:f9:8d:59:d2:e9:
                    aa:a0:3b:a8:f6:34:35:28:bb:bf:d0:5d:b8:ec:e4:
                    34:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:6E:1A:75:F7:2F:2D:9C:B4:C5:C7:CF:D7:36:08:BC:06:A9:F8:53
            X509v3 Authority Key Identifier:
                keyid:99:71:54:06:E7:21:7B:FC:13:81:2A:47:04:C6:2A:E0:99:E7:C8:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mXFUBuche_wTgSpHBMYq4JnnyP8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4e9e37-6e66-41b1-aa99-1516b6d82e2d/1/mXFUBuche_wTgSpHBMYq4JnnyP8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4e9e37-6e66-41b1-aa99-1516b6d82e2d/1/mXFUBuche_wTgSpHBMYq4JnnyP8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:9c:38:3f:b7:a2:91:c2:13:18:0c:e2:d0:3f:cb:b2:73:22:
         ff:9b:14:cc:be:1a:39:e1:a0:c6:3c:0a:09:09:20:e8:3a:52:
         4f:54:85:ea:8b:5a:e8:d3:14:20:13:ea:55:4c:c5:c5:70:ba:
         82:be:5d:9b:f5:58:72:9d:f2:68:06:1a:8e:63:6c:dc:1b:8f:
         47:d9:f4:ae:df:1e:54:9b:f9:6f:10:05:28:ca:80:d1:41:46:
         8a:df:3d:5e:c9:bf:77:63:bb:46:11:a4:eb:25:d0:19:7a:c1:
         fd:60:7b:fa:07:72:e7:82:6e:ae:3c:ad:c0:a5:77:c9:3f:8f:
         1d:8f:dc:19:b1:da:e8:c0:3b:cb:01:99:ae:8b:d3:c0:7a:76:
         b0:ae:73:ac:77:00:fd:87:3b:b0:22:31:e5:f4:af:02:5c:18:
         b0:48:fc:73:4b:21:73:4c:26:bb:92:af:70:13:7a:66:c1:58:
         fc:42:ec:14:c5:6c:bc:26:27:c3:5f:3d:fa:b0:2f:2b:55:36:
         f0:62:1f:4d:db:a6:bd:d7:9a:b3:c2:5b:d1:2e:ab:ff:72:66:
         7e:c0:36:b5:01:03:4b:82:3a:22:01:6f:94:b8:fc:13:eb:50:
         66:38:11:e1:3d:fc:d8:de:89:ec:e7:9c:0b:19:2f:61:57:9f:
         ee:dd:92:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:08:26 2025 by rpki-client