Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d341a6-98a2-4b1e-9ba4-b66044adbcb1/1/rTD7Q4juZxRK4E3choEtY-Ao9Hg.mft
File:                     rTD7Q4juZxRK4E3choEtY-Ao9Hg.mft (raw, json)
Hash identifier:          9CyHav7BOvVQyriN21cYUcHuymY0EaLwnbO/M5IEPBM=
Subject key identifier:   75:71:D1:4C:A4:B3:2D:AC:FA:70:84:41:61:4C:C5:9A:9D:12:76:11
Authority key identifier: AD:30:FB:43:88:EE:67:14:4A:E0:4D:DC:86:81:2D:63:E0:28:F4:78
Certificate issuer:       /CN=ad30fb4388ee67144ae04ddc86812d63e028f478
Certificate serial:       019778D4179D42B030972C2C77A36C74CE86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rTD7Q4juZxRK4E3choEtY-Ao9Hg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/d341a6-98a2-4b1e-9ba4-b66044adbcb1/1/rTD7Q4juZxRK4E3choEtY-Ao9Hg.mft
Manifest number:          1591
Signing time:             Mon 16 Jun 2025 13:00:54 +0000
Manifest this update:     Mon 16 Jun 2025 13:00:54 +0000
Manifest next update:     Tue 17 Jun 2025 13:00:54 +0000
Files and hashes:         1: rTD7Q4juZxRK4E3choEtY-Ao9Hg.crl (hash: /nwNuHRg0qmlBt4c99AmrErQlZ0hx8xESdqDIf0W3dg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/d341a6-98a2-4b1e-9ba4-b66044adbcb1/1/rTD7Q4juZxRK4E3choEtY-Ao9Hg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/d341a6-98a2-4b1e-9ba4-b66044adbcb1/1/rTD7Q4juZxRK4E3choEtY-Ao9Hg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rTD7Q4juZxRK4E3choEtY-Ao9Hg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 13:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:78:d4:17:9d:42:b0:30:97:2c:2c:77:a3:6c:74:ce:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad30fb4388ee67144ae04ddc86812d63e028f478
        Validity
            Not Before: Jun 16 13:00:54 2025 GMT
            Not After : Jun 17 13:00:54 2025 GMT
        Subject: CN=7571d14ca4b32dacfa708441614cc59a9d127611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:87:8e:37:d0:82:d7:19:c4:5e:2d:46:fb:c0:
                    69:64:35:4c:fc:aa:ef:12:c5:5e:5a:93:31:60:1a:
                    fa:1d:83:98:7c:ee:6d:97:76:d9:41:93:98:a5:a9:
                    f5:a9:2f:50:e9:9a:c1:ef:d8:52:26:af:7b:9f:94:
                    53:d3:9f:0e:30:89:72:04:87:b5:cc:32:8f:ff:42:
                    09:7e:97:ed:f2:58:4c:21:21:52:78:4b:0a:58:7e:
                    f3:ec:d4:c4:cc:79:48:eb:0e:c2:42:6a:e6:11:ba:
                    47:c6:52:01:26:0a:de:58:eb:ba:9e:ee:2f:77:c7:
                    d6:22:5a:46:a4:40:39:6e:e6:02:01:8b:ef:01:ef:
                    f8:10:66:c7:be:bb:43:e2:4c:a4:93:f9:c3:47:14:
                    b5:65:bc:f9:b7:e1:4d:d3:f9:fe:7a:65:6f:78:b2:
                    83:9f:38:0b:4d:b4:48:37:12:09:72:c8:1c:06:63:
                    8f:ef:cb:0f:10:ca:30:02:d7:34:12:f0:f1:2e:7e:
                    07:9e:31:7e:b5:30:17:0d:12:6d:32:50:15:be:4d:
                    3d:7e:37:b5:24:aa:12:33:72:f0:a9:f2:7b:49:f6:
                    fc:ff:7f:ec:d2:7c:21:66:32:fb:1d:0b:1c:a1:4d:
                    35:18:c4:a1:0c:37:b9:29:f8:6e:7b:b0:2b:52:b9:
                    bd:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:71:D1:4C:A4:B3:2D:AC:FA:70:84:41:61:4C:C5:9A:9D:12:76:11
            X509v3 Authority Key Identifier:
                keyid:AD:30:FB:43:88:EE:67:14:4A:E0:4D:DC:86:81:2D:63:E0:28:F4:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTD7Q4juZxRK4E3choEtY-Ao9Hg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d341a6-98a2-4b1e-9ba4-b66044adbcb1/1/rTD7Q4juZxRK4E3choEtY-Ao9Hg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d341a6-98a2-4b1e-9ba4-b66044adbcb1/1/rTD7Q4juZxRK4E3choEtY-Ao9Hg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:27:7f:6f:a5:aa:54:6c:3b:27:20:a3:aa:4a:89:64:06:71:
         93:99:f1:98:e4:b9:f8:35:d5:7c:10:24:98:22:dc:10:b3:5a:
         d5:09:23:a8:aa:9a:67:87:9f:32:eb:a9:da:40:c3:4d:ed:9d:
         16:56:75:8a:b5:03:ba:6e:46:22:f5:59:05:d7:7b:6f:64:e3:
         71:cd:4d:56:5a:61:a4:b8:1f:7f:e0:3c:4b:8e:f6:da:7f:99:
         36:ec:54:ee:20:74:49:15:a1:fc:9f:f9:c7:98:48:52:ba:6d:
         4a:a5:0a:bd:85:c3:85:e0:4f:fa:fa:e9:d6:d9:63:39:52:dd:
         f2:0a:bc:00:d1:cf:94:bb:c6:13:cc:5c:57:84:cd:b9:82:b0:
         6b:bc:ef:14:5c:0f:b4:8e:73:f8:5e:a4:dc:ba:3b:de:15:5c:
         fc:03:1b:b4:03:22:b9:72:2e:97:ae:9d:e9:7b:0a:f8:f2:50:
         38:cb:97:af:ad:3c:3f:89:4a:55:63:c9:98:1d:7f:71:a3:3d:
         f8:eb:16:d5:aa:4a:f8:f4:a4:76:a7:e0:93:cd:6c:4a:73:2c:
         1f:f3:bb:30:69:6b:85:3c:bd:4c:6c:d0:45:b0:a9:30:61:ff:
         07:b7:cf:7d:d6:7e:1e:cc:47:75:10:3f:3b:c0:9b:75:6b:58:
         1b:2b:81:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 20:03:18 2025 by rpki-client