Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/1a3f4b-b08a-45ab-a476-d7b28d2a82b1/1/ahxIGdDhnfp0DYRRrxOY0jDG2E4.mft
File:                     ahxIGdDhnfp0DYRRrxOY0jDG2E4.mft (raw, json)
Hash identifier:          2I0K2mOPoKWcUJM7NKomfdtoNsciuqQPU4qLZnUdqQw=
Subject key identifier:   88:E0:91:3D:F0:C7:7F:41:E0:99:D3:88:8D:A2:27:E2:56:B4:B2:03
Authority key identifier: 6A:1C:48:19:D0:E1:9D:FA:74:0D:84:51:AF:13:98:D2:30:C6:D8:4E
Certificate issuer:       /CN=6a1c4819d0e19dfa740d8451af1398d230c6d84e
Certificate serial:       01976CCFBD4845707876A68EF270D82A935A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ahxIGdDhnfp0DYRRrxOY0jDG2E4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/1a3f4b-b08a-45ab-a476-d7b28d2a82b1/1/ahxIGdDhnfp0DYRRrxOY0jDG2E4.mft
Manifest number:          018D
Signing time:             Sat 14 Jun 2025 05:00:43 +0000
Manifest this update:     Sat 14 Jun 2025 05:00:43 +0000
Manifest next update:     Sun 15 Jun 2025 05:00:43 +0000
Files and hashes:         1: ahxIGdDhnfp0DYRRrxOY0jDG2E4.crl (hash: FHd9EfVTgyFSsA3XgluK19+1rd4U00toDjj8a2SqIyw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/1a3f4b-b08a-45ab-a476-d7b28d2a82b1/1/ahxIGdDhnfp0DYRRrxOY0jDG2E4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/1a3f4b-b08a-45ab-a476-d7b28d2a82b1/1/ahxIGdDhnfp0DYRRrxOY0jDG2E4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ahxIGdDhnfp0DYRRrxOY0jDG2E4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:cf:bd:48:45:70:78:76:a6:8e:f2:70:d8:2a:93:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a1c4819d0e19dfa740d8451af1398d230c6d84e
        Validity
            Not Before: Jun 14 05:00:43 2025 GMT
            Not After : Jun 15 05:00:43 2025 GMT
        Subject: CN=88e0913df0c77f41e099d3888da227e256b4b203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:8a:e7:90:a0:bd:20:d6:d5:73:45:db:b4:fa:
                    1f:fb:17:d5:28:89:bd:37:38:a2:99:33:ba:a7:22:
                    d7:3c:3d:59:6a:98:e8:de:69:0b:d7:cd:03:f2:fd:
                    97:99:c9:58:9c:13:f0:bb:6a:5a:44:ea:1f:a8:36:
                    8c:4b:bf:7b:5f:49:30:45:52:f0:7e:d4:22:15:12:
                    53:59:1f:f7:21:1f:4a:08:c3:92:e9:69:6c:0a:f3:
                    27:97:b7:3a:11:15:0b:92:0a:a5:6f:98:25:5f:46:
                    23:ac:d3:07:8b:83:b5:cd:d1:3c:40:62:ae:9c:dd:
                    6f:7c:38:90:53:a2:7e:81:fb:bb:87:23:21:2b:83:
                    91:b2:82:ca:66:bf:73:0f:ca:34:15:ca:11:ed:89:
                    74:63:3f:38:d7:70:d5:7c:b5:00:3f:98:48:87:75:
                    d8:a9:54:96:d7:65:2b:e5:9b:f2:74:d4:d5:f3:fb:
                    a8:73:8e:b6:5a:cd:77:d9:a0:2b:97:5e:1c:f1:f6:
                    a7:32:04:dd:4d:f8:35:ca:b3:b8:7c:0f:9a:75:85:
                    6b:60:27:97:22:05:68:ae:bb:aa:d8:6d:84:0a:73:
                    93:da:20:18:25:5e:ae:de:1b:65:9f:cd:23:4f:29:
                    6d:8a:e9:10:66:f6:3a:0b:59:f5:f0:c0:c4:b1:95:
                    b9:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:E0:91:3D:F0:C7:7F:41:E0:99:D3:88:8D:A2:27:E2:56:B4:B2:03
            X509v3 Authority Key Identifier:
                keyid:6A:1C:48:19:D0:E1:9D:FA:74:0D:84:51:AF:13:98:D2:30:C6:D8:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahxIGdDhnfp0DYRRrxOY0jDG2E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1a3f4b-b08a-45ab-a476-d7b28d2a82b1/1/ahxIGdDhnfp0DYRRrxOY0jDG2E4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1a3f4b-b08a-45ab-a476-d7b28d2a82b1/1/ahxIGdDhnfp0DYRRrxOY0jDG2E4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:d8:10:cb:cd:cb:08:41:57:c5:f4:e2:a8:16:b5:63:14:9d:
         dc:7f:f0:9c:50:61:99:6b:04:30:9c:17:d2:cc:d4:bc:3a:d9:
         3e:68:c7:b3:26:a8:20:4e:0b:ad:74:6a:81:71:7b:ad:b7:b2:
         c7:0e:46:7d:0c:23:32:9d:98:85:1c:8d:51:4b:87:0f:c9:13:
         b2:c0:11:d2:5a:fb:6a:55:d4:3e:92:34:d5:9c:a3:6b:ec:04:
         0b:56:5e:fe:5c:04:18:8d:67:c8:e4:f4:7d:cd:d3:a5:8a:bc:
         f2:ed:53:29:fe:e4:46:a7:18:1e:97:90:80:b6:07:b1:18:b6:
         c8:d6:f3:36:37:79:55:c7:78:a5:f8:d2:1f:4e:05:1f:a2:15:
         c2:0e:35:9f:e4:e0:1a:d7:fc:2f:ce:26:1d:0b:e4:8c:d3:a2:
         64:5f:11:ea:fc:70:80:51:26:b3:23:f0:de:2f:58:7e:f1:91:
         6a:21:e0:8b:33:f2:d3:de:db:5a:cd:ba:e2:a1:c5:b3:fd:84:
         e7:5c:33:0d:2e:15:43:cc:88:24:3e:e5:46:6c:e7:62:d4:2a:
         50:af:1a:4a:e0:65:df:b6:46:cd:23:73:d3:ab:5d:33:20:aa:
         31:13:27:2d:94:d3:85:37:fb:b5:9a:ec:55:b7:4a:bd:9a:b6:
         49:6a:40:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:29:34 2025 by rpki-client