Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/63ca08-b92c-4b4c-b82b-6e76c78a9c63/1/9mxqP6MXDCUW4R7pEE_tMmmZfdY.mft
File:                     9mxqP6MXDCUW4R7pEE_tMmmZfdY.mft (raw, json)
Hash identifier:          pdCjHTGOW2S87naNNRJ7ziNj+lryhH8kWS1C64qK+Qs=
Subject key identifier:   21:91:DA:6D:75:60:64:51:A8:61:38:4C:CC:48:B2:43:A2:3E:F7:14
Authority key identifier: F6:6C:6A:3F:A3:17:0C:25:16:E1:1E:E9:10:4F:ED:32:69:99:7D:D6
Certificate issuer:       /CN=f66c6a3fa3170c2516e11ee9104fed3269997dd6
Certificate serial:       019769CED14524500F99A48E5C275898900D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9mxqP6MXDCUW4R7pEE_tMmmZfdY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/63ca08-b92c-4b4c-b82b-6e76c78a9c63/1/9mxqP6MXDCUW4R7pEE_tMmmZfdY.mft
Manifest number:          0C44
Signing time:             Fri 13 Jun 2025 15:00:51 +0000
Manifest this update:     Fri 13 Jun 2025 15:00:51 +0000
Manifest next update:     Sat 14 Jun 2025 15:00:51 +0000
Files and hashes:         1: 9mxqP6MXDCUW4R7pEE_tMmmZfdY.crl (hash: FhSh6srRPlDAih0Y9hU/zWgNFXHI8y2QpZOk/6i6mM0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/63ca08-b92c-4b4c-b82b-6e76c78a9c63/1/9mxqP6MXDCUW4R7pEE_tMmmZfdY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/63ca08-b92c-4b4c-b82b-6e76c78a9c63/1/9mxqP6MXDCUW4R7pEE_tMmmZfdY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9mxqP6MXDCUW4R7pEE_tMmmZfdY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:ce:d1:45:24:50:0f:99:a4:8e:5c:27:58:98:90:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f66c6a3fa3170c2516e11ee9104fed3269997dd6
        Validity
            Not Before: Jun 13 15:00:51 2025 GMT
            Not After : Jun 14 15:00:51 2025 GMT
        Subject: CN=2191da6d75606451a861384ccc48b243a23ef714
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:4a:3c:59:25:c2:c7:ed:64:86:1b:ca:bc:b3:
                    a1:cb:02:c0:65:ad:6d:19:63:a8:f8:f4:6c:5a:c9:
                    dd:5b:27:cb:8f:3b:1e:c6:ed:25:8d:d1:e8:0d:5c:
                    c1:c4:21:21:da:3b:e7:9f:95:52:2f:69:4a:41:8f:
                    b1:12:99:71:84:a7:63:cf:af:66:e4:e7:9c:5b:82:
                    0b:ff:b0:1d:2d:d0:13:5c:eb:8b:d9:e9:af:be:c9:
                    e2:3a:d2:c6:d4:72:00:30:bf:39:e4:1e:f2:3b:66:
                    eb:1e:1d:f2:d2:fc:ca:df:e1:9c:dd:15:49:36:c6:
                    a5:05:23:a9:2e:fb:46:a6:45:74:da:8d:6a:66:77:
                    de:28:4b:fb:3c:b0:c8:89:36:a9:1b:a3:60:ee:f5:
                    ec:a0:3e:26:9a:53:e0:9a:2d:21:3c:56:61:3a:84:
                    0b:fb:ed:e2:69:b4:22:2b:f6:e2:22:cb:e4:c9:69:
                    91:6f:4f:20:32:6f:f9:0e:67:49:bb:d8:0d:be:d2:
                    eb:d3:11:f3:81:03:be:3e:07:03:29:b9:4a:86:eb:
                    eb:c0:4e:48:d1:b1:92:4d:42:82:84:44:e0:fa:9c:
                    7d:d8:40:be:a4:2f:f9:f1:e0:70:f2:3d:38:92:e6:
                    d8:12:e5:db:f1:9b:ea:c6:5c:ec:92:ea:41:80:b0:
                    5f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:91:DA:6D:75:60:64:51:A8:61:38:4C:CC:48:B2:43:A2:3E:F7:14
            X509v3 Authority Key Identifier:
                keyid:F6:6C:6A:3F:A3:17:0C:25:16:E1:1E:E9:10:4F:ED:32:69:99:7D:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9mxqP6MXDCUW4R7pEE_tMmmZfdY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/63ca08-b92c-4b4c-b82b-6e76c78a9c63/1/9mxqP6MXDCUW4R7pEE_tMmmZfdY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/63ca08-b92c-4b4c-b82b-6e76c78a9c63/1/9mxqP6MXDCUW4R7pEE_tMmmZfdY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:42:8b:5d:75:6f:44:13:82:f6:56:c7:78:a9:dc:c9:9f:5f:
         5b:a8:1e:4b:7d:b7:d8:18:21:06:92:9a:5e:87:2a:be:d9:0c:
         83:1f:f5:43:5d:df:11:84:d5:ee:d0:dd:e5:8c:65:e6:6f:8b:
         fc:0b:70:53:5d:dc:59:a3:79:a3:b5:8f:9a:22:b7:d4:34:8f:
         c4:51:5b:2b:7d:4f:8a:05:98:27:de:06:24:44:8d:55:61:72:
         be:27:18:78:ac:4a:5e:02:a5:b3:88:15:81:70:73:66:5c:d0:
         6c:fb:24:68:d8:9d:fb:53:46:d3:09:68:45:fd:92:e5:4e:e3:
         96:79:69:30:51:16:18:dc:af:9f:a6:c1:c6:dd:2e:dc:2d:b5:
         d3:60:bf:fb:50:4e:20:40:e2:84:71:06:b2:f3:92:df:e0:b6:
         f8:79:1b:21:e2:56:7d:7f:d6:af:64:ba:72:07:54:d5:23:b2:
         9d:7d:2d:f7:2c:87:d5:2f:fc:81:ba:e5:6c:b2:ce:42:d8:a3:
         b9:7a:e1:08:6b:1e:9b:6e:86:5b:e3:b1:d1:8c:67:ae:58:ac:
         60:61:67:34:a6:6d:c4:8a:9b:b7:43:0c:3c:4a:f6:82:17:7e:
         8a:a8:f7:12:18:32:02:bb:9f:e9:0d:fb:03:49:16:6d:8d:dd:
         19:36:36:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:57:02 2025 by rpki-client