Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/48f799-4443-49f8-9242-8cbeefc92f9a/1/pUR4T8L1atrefbdiM9E27pt768c.mft
File:                     pUR4T8L1atrefbdiM9E27pt768c.mft (raw, json)
Hash identifier:          hO1pSPiZkibgrFXzUosDqEoQWkXhA+GKJOcgBYFwXRU=
Subject key identifier:   AB:86:A7:2E:54:CD:EC:4E:92:A9:80:59:AF:16:E4:27:58:DC:31:07
Authority key identifier: A5:44:78:4F:C2:F5:6A:DA:DE:7D:B7:62:33:D1:36:EE:9B:7B:EB:C7
Certificate issuer:       /CN=a544784fc2f56adade7db76233d136ee9b7bebc7
Certificate serial:       01976C98F20D0076042B0184D658638BF260
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pUR4T8L1atrefbdiM9E27pt768c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/48f799-4443-49f8-9242-8cbeefc92f9a/1/pUR4T8L1atrefbdiM9E27pt768c.mft
Manifest number:          0533
Signing time:             Sat 14 Jun 2025 04:00:51 +0000
Manifest this update:     Sat 14 Jun 2025 04:00:51 +0000
Manifest next update:     Sun 15 Jun 2025 04:00:51 +0000
Files and hashes:         1: pUR4T8L1atrefbdiM9E27pt768c.crl (hash: ocMY3h34Wi8w+p2r4fz6ODsFQuaq6ANOkgZD3W3cT2o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/48f799-4443-49f8-9242-8cbeefc92f9a/1/pUR4T8L1atrefbdiM9E27pt768c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/48f799-4443-49f8-9242-8cbeefc92f9a/1/pUR4T8L1atrefbdiM9E27pt768c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pUR4T8L1atrefbdiM9E27pt768c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:98:f2:0d:00:76:04:2b:01:84:d6:58:63:8b:f2:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a544784fc2f56adade7db76233d136ee9b7bebc7
        Validity
            Not Before: Jun 14 04:00:51 2025 GMT
            Not After : Jun 15 04:00:51 2025 GMT
        Subject: CN=ab86a72e54cdec4e92a98059af16e42758dc3107
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:24:97:ed:11:ff:8b:32:72:0a:24:97:a9:11:
                    d4:42:9b:83:0f:7b:60:03:4e:03:f9:1f:9c:fa:0d:
                    ac:ee:d6:51:1e:15:9e:3c:96:5d:f0:20:cf:54:88:
                    a0:a9:ee:a0:c9:09:93:0a:a3:eb:c7:18:82:ae:7e:
                    24:d1:a2:e3:76:8f:60:49:96:f1:db:61:c2:19:a2:
                    86:38:2d:11:4c:b9:0d:c0:b2:e4:64:13:49:00:41:
                    b6:dc:ba:d5:ec:1b:af:31:36:7e:57:be:ca:1c:c1:
                    d2:5d:8e:c4:55:04:e1:07:28:a3:bc:6b:01:d4:40:
                    a8:7a:fa:c5:01:75:96:69:45:20:6e:d7:fa:de:68:
                    af:9b:2e:8e:9a:5e:1f:2a:91:f6:11:2f:75:51:6c:
                    29:ab:cc:17:19:5e:ad:7b:9e:62:4c:4d:62:89:dc:
                    b4:6c:3b:a6:6d:e2:2c:98:23:74:95:e6:7b:8c:18:
                    b3:aa:6a:c6:ea:b6:ec:f2:7d:33:e9:b6:52:35:8f:
                    eb:a4:93:cc:89:42:a0:5d:eb:e3:a9:7a:a6:e9:37:
                    db:d0:6e:b7:2e:f2:a1:1e:77:ed:48:51:24:77:e1:
                    40:bb:29:89:ad:dd:8c:7c:91:59:91:54:2d:fc:54:
                    13:13:d6:c1:cb:97:8d:aa:6f:65:a8:24:ea:0b:53:
                    1b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:86:A7:2E:54:CD:EC:4E:92:A9:80:59:AF:16:E4:27:58:DC:31:07
            X509v3 Authority Key Identifier:
                keyid:A5:44:78:4F:C2:F5:6A:DA:DE:7D:B7:62:33:D1:36:EE:9B:7B:EB:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pUR4T8L1atrefbdiM9E27pt768c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/48f799-4443-49f8-9242-8cbeefc92f9a/1/pUR4T8L1atrefbdiM9E27pt768c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/48f799-4443-49f8-9242-8cbeefc92f9a/1/pUR4T8L1atrefbdiM9E27pt768c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:a0:46:e9:e4:a5:64:17:8e:3d:33:ee:b5:16:6a:c1:fa:a7:
         5e:7c:3c:66:79:8b:93:2c:96:e4:2b:d0:c7:d6:c4:1a:74:7b:
         c8:c6:5d:35:ea:ab:0b:2e:16:fa:43:01:e2:05:e3:64:42:b8:
         87:88:9f:ca:57:7a:c5:7b:24:f9:b7:45:df:5c:18:62:6a:76:
         59:f0:ab:c0:55:62:ac:94:62:fd:91:b8:42:73:08:f1:b1:de:
         4e:27:34:22:a1:fd:79:de:56:91:65:86:28:ef:89:aa:d6:53:
         26:fb:06:c5:9a:df:e3:5c:b8:8a:67:51:ab:46:69:57:bb:f3:
         a4:5c:c0:6c:d4:ab:a2:3d:ec:1a:f0:70:b2:ce:4a:ad:d4:82:
         78:35:f1:21:5a:35:22:f4:18:03:f4:14:ec:e2:75:79:bf:93:
         7a:19:09:ec:6b:db:8f:ea:03:0e:73:57:2a:d4:62:d5:6c:a3:
         e0:50:1f:87:f8:1c:8e:b5:ed:12:82:38:d0:fc:03:02:55:ec:
         74:12:d8:91:29:c1:8e:8c:ff:5a:69:9e:df:70:b5:36:7a:0d:
         5e:82:82:68:3e:d7:71:38:f6:b5:44:5f:3b:2e:8d:d3:6d:93:
         6f:8f:98:8f:00:02:13:0d:f9:0b:5a:a0:92:a6:aa:c2:6a:8c:
         54:7f:80:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:55:50 2025 by rpki-client