Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/844405-7a8f-4232-95b8-65c928c7b0bf/1/tVz-dxzyhP7o0MJ7vPEd4YeczEE.mft
File:                     tVz-dxzyhP7o0MJ7vPEd4YeczEE.mft (raw, json)
Hash identifier:          MiY3QHnCHx87SjbhDdV3fC6uKkAs8AfPs2lQW3sHGJs=
Subject key identifier:   64:4C:2C:B7:6A:14:1B:7D:33:3D:B9:45:16:F4:5B:D8:DC:00:26:B8
Authority key identifier: B5:5C:FE:77:1C:F2:84:FE:E8:D0:C2:7B:BC:F1:1D:E1:87:9C:CC:41
Certificate issuer:       /CN=b55cfe771cf284fee8d0c27bbcf11de1879ccc41
Certificate serial:       0197696131F119A52A2C9FDF0B9E12431EAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tVz-dxzyhP7o0MJ7vPEd4YeczEE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/844405-7a8f-4232-95b8-65c928c7b0bf/1/tVz-dxzyhP7o0MJ7vPEd4YeczEE.mft
Manifest number:          0D75
Signing time:             Fri 13 Jun 2025 13:01:06 +0000
Manifest this update:     Fri 13 Jun 2025 13:01:06 +0000
Manifest next update:     Sat 14 Jun 2025 13:01:06 +0000
Files and hashes:         1: tVz-dxzyhP7o0MJ7vPEd4YeczEE.crl (hash: y2yV6O+o/SKzMQRjq3ToVlWGwzO76AvI2Vvgimy0Evk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/844405-7a8f-4232-95b8-65c928c7b0bf/1/tVz-dxzyhP7o0MJ7vPEd4YeczEE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/844405-7a8f-4232-95b8-65c928c7b0bf/1/tVz-dxzyhP7o0MJ7vPEd4YeczEE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tVz-dxzyhP7o0MJ7vPEd4YeczEE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:61:31:f1:19:a5:2a:2c:9f:df:0b:9e:12:43:1e:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b55cfe771cf284fee8d0c27bbcf11de1879ccc41
        Validity
            Not Before: Jun 13 13:01:06 2025 GMT
            Not After : Jun 14 13:01:06 2025 GMT
        Subject: CN=644c2cb76a141b7d333db94516f45bd8dc0026b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:22:eb:97:14:a8:29:db:ba:6f:42:77:f7:df:
                    f6:0f:72:62:3e:6e:63:39:8c:67:e5:a5:6e:9b:5d:
                    a4:0f:f8:f0:15:20:fc:b1:d4:88:28:43:c4:ff:ca:
                    6a:68:db:2f:54:c1:1f:f6:26:70:65:2d:34:3d:89:
                    e2:95:d8:3b:04:83:a7:e3:e9:55:f7:9b:5b:22:10:
                    6b:a4:9a:83:83:48:0f:92:e3:4b:9e:ac:24:5f:3a:
                    96:e6:00:bd:43:2b:d7:96:6a:36:df:d6:a2:72:ee:
                    82:3f:e4:e7:f8:21:56:5a:c1:19:e1:38:72:0f:9a:
                    4f:8f:1d:5d:97:c4:8e:d0:9d:90:4f:08:38:dd:3f:
                    69:65:a6:0b:90:22:b6:ae:1c:9a:fb:f1:16:46:4c:
                    29:8c:60:d4:09:9c:60:33:36:9d:1b:96:97:64:22:
                    56:7a:54:46:43:8e:89:0a:f4:45:92:46:9e:eb:47:
                    04:6b:bd:6a:4a:f6:c5:a2:a8:55:8d:d9:56:d8:06:
                    d5:d1:fb:80:79:6a:b5:1e:5c:ca:f0:e6:1e:0e:9b:
                    b9:a5:c7:e3:51:52:31:3c:6d:51:8e:ca:04:7d:ad:
                    28:f0:86:9f:54:5f:97:4c:00:7e:99:2a:67:4d:70:
                    2c:be:46:67:f8:26:41:82:07:5a:bd:84:b9:6c:85:
                    e7:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:4C:2C:B7:6A:14:1B:7D:33:3D:B9:45:16:F4:5B:D8:DC:00:26:B8
            X509v3 Authority Key Identifier:
                keyid:B5:5C:FE:77:1C:F2:84:FE:E8:D0:C2:7B:BC:F1:1D:E1:87:9C:CC:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVz-dxzyhP7o0MJ7vPEd4YeczEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/844405-7a8f-4232-95b8-65c928c7b0bf/1/tVz-dxzyhP7o0MJ7vPEd4YeczEE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/844405-7a8f-4232-95b8-65c928c7b0bf/1/tVz-dxzyhP7o0MJ7vPEd4YeczEE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:07:3c:2f:b7:d2:ce:e3:6b:ac:62:ba:37:b4:9b:98:e4:63:
         48:4e:1e:d0:34:c9:63:76:d6:4c:19:52:86:76:a7:e2:3e:3a:
         90:9c:c1:e4:d2:54:66:65:e8:df:52:d6:51:84:6c:ae:22:94:
         55:6b:b6:23:98:1b:0e:b9:f4:3d:d0:28:df:2e:15:d0:24:00:
         28:62:3b:4e:7b:73:db:03:40:e7:0e:40:ee:33:62:ae:80:40:
         ef:a0:4d:d6:21:3d:66:b3:ca:3b:b5:8d:5c:42:d7:5d:32:e3:
         c3:02:bd:94:83:5b:81:be:d2:01:42:21:1b:22:f0:d0:a2:42:
         6b:f3:de:69:48:c4:36:2f:e7:4d:dd:a3:c5:c5:a2:41:92:8a:
         0d:2d:8d:fb:39:9e:f0:97:89:c0:95:8c:d5:3f:1c:a4:b6:ef:
         74:c1:20:a1:d1:91:5c:95:00:79:6a:f4:13:fb:f1:8e:f0:4a:
         57:23:65:3f:04:7c:f8:23:07:e6:19:bc:e1:7d:a9:9c:ed:0c:
         88:91:91:e1:df:6c:20:13:70:c8:28:21:5c:0e:a2:2b:cc:51:
         c6:c3:65:30:c4:76:f0:1d:18:3d:97:cd:ca:d5:e6:0d:3a:18:
         62:35:48:87:9d:1a:97:0a:69:3f:16:66:5e:15:87:9d:c1:ed:
         56:97:c0:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 20:10:17 2025 by rpki-client