Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.mft
File:                     REs6uZ-GRKzV5pqaXzhUbNzG6XQ.mft (raw, json)
Hash identifier:          eZ3qm/DMRC9EkfEb3nPASsg4I23cZE3x0DngehXcMQA=
Subject key identifier:   1A:15:71:F7:CA:F3:A9:B4:0B:1C:6E:24:0C:21:55:AA:F1:FB:42:48
Authority key identifier: 44:4B:3A:B9:9F:86:44:AC:D5:E6:9A:9A:5F:38:54:6C:DC:C6:E9:74
Certificate issuer:       /CN=444b3ab99f8644acd5e69a9a5f38546cdcc6e974
Certificate serial:       019776E5A7619F96BB3800733241656A04D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.mft
Manifest number:          1591
Signing time:             Mon 16 Jun 2025 04:00:51 +0000
Manifest this update:     Mon 16 Jun 2025 04:00:51 +0000
Manifest next update:     Tue 17 Jun 2025 04:00:51 +0000
Files and hashes:         1: REs6uZ-GRKzV5pqaXzhUbNzG6XQ.crl (hash: bH5fHCv0Xr0LsOdfbe1d3mQ+sHexjKUE4Pm7DcxQT6g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 22:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:76:e5:a7:61:9f:96:bb:38:00:73:32:41:65:6a:04:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=444b3ab99f8644acd5e69a9a5f38546cdcc6e974
        Validity
            Not Before: Jun 16 04:00:51 2025 GMT
            Not After : Jun 17 04:00:51 2025 GMT
        Subject: CN=1a1571f7caf3a9b40b1c6e240c2155aaf1fb4248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:5d:96:c6:4d:03:8d:e7:75:ce:b3:7d:91:a7:
                    6c:76:56:e1:c3:57:dc:2c:b0:6c:24:cf:8e:1a:d7:
                    99:9b:be:e7:2b:16:77:62:3c:bf:d0:f7:cc:98:91:
                    ee:5f:3b:6d:a5:02:34:64:2f:bd:56:82:00:1d:be:
                    76:e3:d0:57:ba:58:28:7f:54:26:50:1d:49:75:9d:
                    47:45:2a:89:d3:8f:4b:13:33:c4:87:bf:b0:25:00:
                    dd:a9:d8:1e:a1:d7:48:b3:f4:e4:0d:36:da:04:43:
                    40:be:25:09:7c:b9:a3:73:55:7c:af:b5:f4:8a:b3:
                    72:fa:ba:de:d6:12:79:81:f4:0d:88:de:92:6e:e7:
                    9a:e3:09:78:13:4d:25:ef:3f:c9:a7:82:d0:70:ef:
                    0e:da:68:ca:c6:5f:cf:5a:a3:63:0a:b6:63:04:df:
                    11:76:40:e0:43:61:33:f3:ce:a6:45:33:11:d7:6c:
                    34:23:72:0e:d1:d1:51:76:51:2e:86:27:78:44:5d:
                    15:b8:07:6a:a1:6e:2f:2a:ad:0b:7a:d5:ca:ce:10:
                    5c:e3:0f:e3:9b:09:7e:c0:75:20:a0:00:71:5d:65:
                    8b:3c:b3:37:d6:98:5c:27:23:f1:76:d2:7a:e1:9a:
                    31:9e:59:1d:7b:45:a9:ee:d0:5a:75:51:ec:11:e2:
                    d9:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:15:71:F7:CA:F3:A9:B4:0B:1C:6E:24:0C:21:55:AA:F1:FB:42:48
            X509v3 Authority Key Identifier:
                keyid:44:4B:3A:B9:9F:86:44:AC:D5:E6:9A:9A:5F:38:54:6C:DC:C6:E9:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:71:8b:c7:c1:ce:03:50:2e:ef:24:59:c7:db:fa:ef:05:f7:
         ff:3a:92:92:05:8c:17:6d:02:86:2f:42:48:d5:11:3a:35:fa:
         5a:7b:70:7b:d4:12:2d:34:a0:ee:5f:1f:8d:f3:7f:aa:95:80:
         bd:09:31:06:8b:9f:c2:19:a9:f2:16:04:f5:29:e4:d4:c4:6c:
         a3:d2:a9:c8:44:fc:d4:8b:46:6a:c4:7b:f9:92:d5:07:ba:75:
         12:0d:42:8b:a5:ec:d8:86:ca:a3:64:90:7d:49:96:f8:d7:3f:
         87:15:20:81:86:7a:a1:b5:cd:2d:c6:9f:f4:1f:c1:75:69:04:
         3e:e9:a0:aa:a9:0b:92:35:f1:f8:66:d8:27:78:e2:81:ec:d4:
         fc:af:e7:9c:43:6d:9b:e3:73:e9:94:c0:d1:ff:73:74:df:ed:
         3c:cd:8d:9c:50:e8:e1:ff:9b:d5:41:46:df:5a:df:7a:0e:f9:
         d2:ca:da:21:48:40:72:7a:38:f4:aa:75:e4:98:5a:3c:b8:45:
         91:9b:5a:6d:73:4c:a4:c4:72:20:eb:f0:f5:02:b4:a6:ce:c4:
         65:70:c5:4e:f0:59:8e:7b:9d:12:93:c7:5a:41:10:6a:51:81:
         90:2f:a5:0d:94:20:29:39:cd:7b:c2:2e:11:39:6d:ad:7e:c4:
         bc:44:bb:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 07:47:17 2025 by rpki-client