Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bbd9e3-8a1f-4e06-9653-7d4673b7e185/1/11ZxzcFKN_vLnwFQzPkY2xXCMm8.mft
File:                     11ZxzcFKN_vLnwFQzPkY2xXCMm8.mft (raw, json)
Hash identifier:          G9ZPZKrRP4S4Z8Vy9Yx0h6BgihVFdcf9bQ2+zyHJikY=
Subject key identifier:   36:D2:27:BF:CF:04:0D:A2:B6:47:DC:26:00:95:B7:FA:24:EB:CA:60
Authority key identifier: D7:56:71:CD:C1:4A:37:FB:CB:9F:01:50:CC:F9:18:DB:15:C2:32:6F
Certificate issuer:       /CN=d75671cdc14a37fbcb9f0150ccf918db15c2326f
Certificate serial:       01987B9C0AD990796F1DEE986EF4C086828F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/11ZxzcFKN_vLnwFQzPkY2xXCMm8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/bbd9e3-8a1f-4e06-9653-7d4673b7e185/1/11ZxzcFKN_vLnwFQzPkY2xXCMm8.mft
Manifest number:          1617
Signing time:             Tue 05 Aug 2025 19:01:20 +0000
Manifest this update:     Tue 05 Aug 2025 19:01:20 +0000
Manifest next update:     Wed 06 Aug 2025 19:01:20 +0000
Files and hashes:         1: 11ZxzcFKN_vLnwFQzPkY2xXCMm8.crl (hash: oH2JpssQhDjw93TPYjnLeUQkW9RqCHdT8IEH1DDtUTo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/bbd9e3-8a1f-4e06-9653-7d4673b7e185/1/11ZxzcFKN_vLnwFQzPkY2xXCMm8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/bbd9e3-8a1f-4e06-9653-7d4673b7e185/1/11ZxzcFKN_vLnwFQzPkY2xXCMm8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/11ZxzcFKN_vLnwFQzPkY2xXCMm8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 19:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7b:9c:0a:d9:90:79:6f:1d:ee:98:6e:f4:c0:86:82:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d75671cdc14a37fbcb9f0150ccf918db15c2326f
        Validity
            Not Before: Aug  5 19:01:20 2025 GMT
            Not After : Aug  6 19:01:20 2025 GMT
        Subject: CN=36d227bfcf040da2b647dc260095b7fa24ebca60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:11:ba:f8:f5:62:c8:48:e6:b1:dc:6f:b1:aa:
                    8f:22:69:b6:3a:42:6b:7b:b3:71:ec:3a:bb:41:56:
                    05:a6:fc:f5:47:26:d8:4c:ef:e2:7b:f3:c9:f4:3d:
                    1e:24:a5:c1:9c:db:6e:41:c7:6b:83:37:00:f7:3d:
                    0d:b0:f9:44:b0:be:29:c9:92:c0:ab:bd:ca:ad:1b:
                    c6:af:3e:24:14:94:91:48:11:af:04:73:d9:a2:81:
                    fe:de:5c:bc:7b:2c:d2:6b:18:3b:72:32:2c:3c:67:
                    07:96:d1:ae:9e:33:9d:68:81:21:1a:8f:b8:7e:49:
                    49:17:80:df:09:36:7f:a7:da:88:cf:67:e9:a4:a9:
                    54:39:c9:06:33:f7:28:59:d9:ae:09:ba:b4:ba:15:
                    52:60:59:5e:e6:e5:33:ad:ed:aa:22:e0:f3:2b:e8:
                    d1:4e:55:96:4b:55:5e:fc:a7:3c:77:4b:0a:74:76:
                    18:0b:93:ec:f5:02:26:da:9d:32:df:c0:51:9e:44:
                    a1:1a:f6:06:c3:cb:a5:4a:cd:64:61:0d:95:f4:49:
                    30:7a:66:71:69:cb:2a:e6:79:30:92:3b:f8:a3:d0:
                    6d:03:95:9c:9f:cb:4b:c6:ce:f2:c7:af:a0:81:d6:
                    59:9e:af:a9:45:78:dd:28:c0:3c:f3:c6:ae:ab:c3:
                    82:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:D2:27:BF:CF:04:0D:A2:B6:47:DC:26:00:95:B7:FA:24:EB:CA:60
            X509v3 Authority Key Identifier:
                keyid:D7:56:71:CD:C1:4A:37:FB:CB:9F:01:50:CC:F9:18:DB:15:C2:32:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/11ZxzcFKN_vLnwFQzPkY2xXCMm8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bbd9e3-8a1f-4e06-9653-7d4673b7e185/1/11ZxzcFKN_vLnwFQzPkY2xXCMm8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bbd9e3-8a1f-4e06-9653-7d4673b7e185/1/11ZxzcFKN_vLnwFQzPkY2xXCMm8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:8a:f2:e1:04:20:56:56:16:68:cd:18:bf:4a:92:79:5a:ed:
         0e:e3:5e:c8:48:0f:98:00:02:28:ae:ea:04:d5:2a:a9:fd:92:
         e1:e8:e2:52:e1:e6:62:64:ac:32:1a:ca:91:b1:35:35:83:4f:
         34:5a:28:55:27:5d:1f:92:65:b3:cc:6d:6b:01:50:8d:44:99:
         d5:23:e8:80:62:be:9c:bb:0d:03:ab:da:65:f8:b4:4c:22:fc:
         a7:11:74:6f:59:3b:3d:af:4f:e7:82:53:48:27:8c:d5:de:31:
         df:86:ef:f3:1a:fe:8d:fc:08:db:c8:31:81:58:28:b6:60:d9:
         e3:06:50:e9:28:19:ef:a0:7e:bb:f8:e3:6a:cb:4c:93:55:11:
         6c:9c:b4:fa:8e:d9:43:5b:ae:12:0d:62:2b:fe:2d:24:60:42:
         94:20:5e:82:1f:72:10:9b:0c:2d:9e:59:42:21:69:b7:9d:06:
         20:a6:f4:ec:7e:51:31:49:c3:5c:87:30:e2:89:7c:c3:34:65:
         7e:2a:96:f5:6c:73:a8:86:b5:ea:1b:07:02:0e:a5:1a:c8:7c:
         15:e8:02:c4:9b:fb:ca:6a:62:61:13:36:74:e9:e5:be:af:1d:
         5b:a7:1a:4d:59:2b:39:80:88:2c:97:90:49:a7:5a:fc:11:d2:
         34:fb:75:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:14:13 2025 by rpki-client