Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/4ae37f-9a82-4bac-bc0b-1fafa6c85052/1/mL_nROPS3UIxYU5-S61E1FUvCRs.mft
File:                     mL_nROPS3UIxYU5-S61E1FUvCRs.mft (raw, json)
Hash identifier:          b9jO/527GjMbNLLtDf0puMokiiX7ElqpJWIRg07bziQ=
Subject key identifier:   E8:90:5B:3D:7D:43:0F:A6:81:B6:53:3C:DC:23:CC:89:3F:55:D7:3A
Authority key identifier: 98:BF:E7:44:E3:D2:DD:42:31:61:4E:7E:4B:AD:44:D4:55:2F:09:1B
Certificate issuer:       /CN=98bfe744e3d2dd4231614e7e4bad44d4552f091b
Certificate serial:       01977150FACD127FEF2ABECB40B60796D0E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mL_nROPS3UIxYU5-S61E1FUvCRs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/4ae37f-9a82-4bac-bc0b-1fafa6c85052/1/mL_nROPS3UIxYU5-S61E1FUvCRs.mft
Manifest number:          0465
Signing time:             Sun 15 Jun 2025 02:00:21 +0000
Manifest this update:     Sun 15 Jun 2025 02:00:21 +0000
Manifest next update:     Mon 16 Jun 2025 02:00:21 +0000
Files and hashes:         1: mL_nROPS3UIxYU5-S61E1FUvCRs.crl (hash: KHi30LvT56ddINjksjrYHBBJ6AT9jajmlLQOp1/hHeY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/4ae37f-9a82-4bac-bc0b-1fafa6c85052/1/mL_nROPS3UIxYU5-S61E1FUvCRs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/4ae37f-9a82-4bac-bc0b-1fafa6c85052/1/mL_nROPS3UIxYU5-S61E1FUvCRs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mL_nROPS3UIxYU5-S61E1FUvCRs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:50:fa:cd:12:7f:ef:2a:be:cb:40:b6:07:96:d0:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98bfe744e3d2dd4231614e7e4bad44d4552f091b
        Validity
            Not Before: Jun 15 02:00:21 2025 GMT
            Not After : Jun 16 02:00:21 2025 GMT
        Subject: CN=e8905b3d7d430fa681b6533cdc23cc893f55d73a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f0:99:b0:3e:f7:49:c0:98:6a:34:34:a7:16:
                    d8:0b:5f:88:09:9b:83:18:75:cc:2c:12:3a:37:49:
                    91:e2:75:ec:74:7b:49:49:0f:b6:25:51:a4:15:5d:
                    f6:2b:3b:c1:d3:dd:1d:c7:92:26:9a:bc:e9:f7:ee:
                    81:23:38:69:da:7b:53:10:85:0f:5d:69:10:f1:0c:
                    a5:44:6d:e6:8b:9a:e9:67:71:f1:6a:4a:3f:cc:87:
                    22:2e:04:7d:ba:7f:e4:6d:13:fb:8f:15:22:85:de:
                    bb:30:87:dd:cc:4b:35:60:e8:05:bb:e1:64:61:d9:
                    9c:61:89:9f:63:52:46:7c:4d:23:54:78:9e:de:8d:
                    c1:08:a7:39:d5:d3:31:9e:5a:bd:37:1a:75:c9:28:
                    3d:c8:ce:98:47:b7:0d:d2:1e:2b:a8:76:d8:f0:11:
                    4a:0f:83:32:e7:20:6e:aa:2e:82:4c:e9:ed:3b:2c:
                    14:17:a9:0f:a0:41:8f:4b:f2:12:e4:d3:3d:eb:bf:
                    86:34:03:2f:6b:8d:21:2e:fa:e8:49:c2:2a:5c:0f:
                    19:ca:1c:cb:c5:dc:fa:9e:65:12:d3:23:d8:a4:59:
                    5f:18:9c:55:6a:a4:89:64:41:60:ec:8c:bb:65:d9:
                    3e:dd:d9:28:50:fc:01:61:75:1c:f9:4d:cb:8b:1a:
                    4e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:90:5B:3D:7D:43:0F:A6:81:B6:53:3C:DC:23:CC:89:3F:55:D7:3A
            X509v3 Authority Key Identifier:
                keyid:98:BF:E7:44:E3:D2:DD:42:31:61:4E:7E:4B:AD:44:D4:55:2F:09:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mL_nROPS3UIxYU5-S61E1FUvCRs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4ae37f-9a82-4bac-bc0b-1fafa6c85052/1/mL_nROPS3UIxYU5-S61E1FUvCRs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4ae37f-9a82-4bac-bc0b-1fafa6c85052/1/mL_nROPS3UIxYU5-S61E1FUvCRs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:19:33:a4:7c:33:ea:4a:25:d4:c8:60:f8:1e:a8:5d:cb:52:
         ef:d4:63:1a:4c:f4:09:5b:9e:22:1c:5b:7b:07:ab:bf:de:97:
         3e:f8:3c:27:48:aa:31:0b:a9:6d:e5:98:25:77:ba:0a:43:3a:
         8a:a0:09:5f:65:3d:38:ae:53:aa:0f:ff:e7:6a:bd:6c:78:36:
         ef:17:df:87:b9:87:21:88:3d:ae:32:98:22:cc:dd:aa:a8:c3:
         a4:3b:7b:23:9a:09:8f:2c:78:d8:3d:e3:bb:db:4a:f9:26:91:
         74:04:5c:e9:6e:7f:24:71:2e:8d:e5:3b:49:79:fe:53:41:3f:
         6a:0b:6e:fe:fa:2a:25:5d:34:d7:d1:12:9a:35:77:55:7e:50:
         b8:b5:1a:43:e7:80:59:e9:2b:14:97:56:c1:7b:c9:0c:ca:93:
         63:18:cf:42:a3:aa:38:cf:f7:8b:1f:7a:90:04:cb:49:ad:7e:
         2c:2c:aa:c2:52:d0:41:71:c0:c8:76:40:d6:85:81:00:c0:37:
         e8:58:e3:a9:96:3a:54:5a:a6:a4:47:04:a4:6d:85:54:2a:49:
         fb:1a:0a:6b:b8:33:f3:b9:0f:d5:c5:c8:41:ac:70:3a:29:3c:
         1d:b3:31:16:52:fd:fe:ec:3b:b1:32:00:e9:9d:59:95:a0:b4:
         57:9f:d3:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:07:00 2025 by rpki-client