Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/033ccb-7235-409c-bd6e-bbac3b81899b/1/Xvow7jWOJQ4cxmtGgZOlZdgk1Eg.mft
File:                     Xvow7jWOJQ4cxmtGgZOlZdgk1Eg.mft (raw, json)
Hash identifier:          51Ny4gcqRoajwpTZly2+uYzw9xSz518T6GV13Jfq8FI=
Subject key identifier:   38:D3:64:C4:FD:B2:9D:95:78:8C:0A:0D:68:25:70:A6:A6:CD:E4:D4
Authority key identifier: 5E:FA:30:EE:35:8E:25:0E:1C:C6:6B:46:81:93:A5:65:D8:24:D4:48
Certificate issuer:       /CN=5efa30ee358e250e1cc66b468193a565d824d448
Certificate serial:       019768BBD6D24BF5625EC507D60696768A70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xvow7jWOJQ4cxmtGgZOlZdgk1Eg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/033ccb-7235-409c-bd6e-bbac3b81899b/1/Xvow7jWOJQ4cxmtGgZOlZdgk1Eg.mft
Manifest number:          018B
Signing time:             Fri 13 Jun 2025 10:00:29 +0000
Manifest this update:     Fri 13 Jun 2025 10:00:29 +0000
Manifest next update:     Sat 14 Jun 2025 10:00:29 +0000
Files and hashes:         1: Xvow7jWOJQ4cxmtGgZOlZdgk1Eg.crl (hash: QbM9l7QyIMhC72XcA5PEUrgSjL8p11qk8USqRsdInuM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/033ccb-7235-409c-bd6e-bbac3b81899b/1/Xvow7jWOJQ4cxmtGgZOlZdgk1Eg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/033ccb-7235-409c-bd6e-bbac3b81899b/1/Xvow7jWOJQ4cxmtGgZOlZdgk1Eg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xvow7jWOJQ4cxmtGgZOlZdgk1Eg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 10:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:bb:d6:d2:4b:f5:62:5e:c5:07:d6:06:96:76:8a:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5efa30ee358e250e1cc66b468193a565d824d448
        Validity
            Not Before: Jun 13 10:00:29 2025 GMT
            Not After : Jun 14 10:00:29 2025 GMT
        Subject: CN=38d364c4fdb29d95788c0a0d682570a6a6cde4d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8d:9a:36:13:d2:05:1e:07:bc:a0:00:88:36:
                    c8:14:3a:76:30:9a:c7:8e:5b:c3:2e:e1:c4:d0:00:
                    00:be:47:34:9d:f3:67:6e:7e:5a:44:dc:dd:17:e8:
                    11:e6:69:b7:d5:18:96:0c:a1:14:c5:03:d8:09:54:
                    9b:a9:50:74:72:ce:1a:15:fc:0d:7d:c1:9d:97:37:
                    bf:10:82:df:1d:f1:7e:80:12:24:73:40:c3:53:79:
                    ae:2b:32:e5:a2:bb:00:eb:e8:8b:7e:53:c8:0a:6f:
                    c3:13:c1:69:31:be:ed:46:5e:08:d1:45:69:8a:9c:
                    7e:e1:8c:1e:c8:15:a5:ef:9f:00:bd:f4:29:8b:29:
                    7c:bd:a8:39:6b:11:17:fb:09:de:3e:e9:db:aa:7d:
                    26:68:d1:0e:70:d0:c9:fd:c3:e7:ae:11:eb:dd:cf:
                    e2:cf:9d:7f:18:a4:b0:2f:63:ca:66:d2:0a:d6:14:
                    6d:01:dc:13:18:22:3a:27:be:41:a8:18:0b:31:79:
                    bb:d5:7a:eb:e9:a9:b1:f9:d8:cb:0d:70:15:b5:2d:
                    19:72:be:9d:cd:62:51:21:83:c3:8e:c7:fb:95:0c:
                    26:38:82:0f:c8:d2:28:49:0c:64:cf:95:e6:30:1a:
                    fa:b7:51:79:69:0e:36:76:35:e8:69:7e:cd:43:40:
                    c2:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:D3:64:C4:FD:B2:9D:95:78:8C:0A:0D:68:25:70:A6:A6:CD:E4:D4
            X509v3 Authority Key Identifier:
                keyid:5E:FA:30:EE:35:8E:25:0E:1C:C6:6B:46:81:93:A5:65:D8:24:D4:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xvow7jWOJQ4cxmtGgZOlZdgk1Eg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/033ccb-7235-409c-bd6e-bbac3b81899b/1/Xvow7jWOJQ4cxmtGgZOlZdgk1Eg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/033ccb-7235-409c-bd6e-bbac3b81899b/1/Xvow7jWOJQ4cxmtGgZOlZdgk1Eg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:58:d5:db:41:bf:b6:20:43:79:62:16:23:c0:11:e8:ae:22:
         8d:d0:5d:97:23:65:18:33:7d:34:07:81:d5:10:ea:c3:6a:e0:
         14:c7:af:7c:55:92:f3:40:b3:f3:84:51:f9:94:ff:23:f3:49:
         cf:ac:e6:f7:a6:e4:d5:b4:ac:1a:db:a6:53:66:f4:12:23:e9:
         79:31:a5:57:5f:96:3a:68:38:2e:76:b6:c2:33:f7:dd:56:40:
         80:13:42:b5:1f:67:6f:07:19:89:12:ab:6f:08:2d:04:cd:84:
         b8:0b:be:ac:a0:e4:56:bf:e5:29:ec:46:f3:c0:14:1c:f4:18:
         7a:39:54:69:a4:2b:11:2b:74:44:e2:f2:16:72:71:cd:6c:8a:
         5a:53:bc:be:b0:27:42:23:e6:0b:af:e2:7b:2d:50:31:79:fe:
         cf:0a:8a:c8:11:28:3c:66:d7:10:50:3c:88:28:ec:23:a1:52:
         c1:6e:1b:78:4d:0d:2f:89:1a:67:da:f1:76:1f:79:f5:52:2c:
         cf:c5:37:05:53:c6:b4:96:f6:61:a7:fa:72:7a:aa:95:da:02:
         3a:6d:c7:23:ae:73:41:d0:31:bb:f5:8f:4b:2d:36:67:70:59:
         e5:bf:c2:79:c4:bc:2f:ca:a9:a9:7b:fc:9f:02:97:3e:5f:e0:
         45:33:45:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:38:18 2025 by rpki-client