Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/1f4e7e-c42f-44f2-bbee-e36966ba005c/1/bCkkSsQCZ-7EepFwj4nPU2bqqNc.mft
File:                     bCkkSsQCZ-7EepFwj4nPU2bqqNc.mft (raw, json)
Hash identifier:          qfUyPDvC3m9FlgD2Nlh3zUeHwqbxWRXkRLM3HJKzhwU=
Subject key identifier:   39:B0:A5:74:3D:43:3C:B7:01:C2:00:F2:25:FA:80:9E:86:49:6C:96
Authority key identifier: 6C:29:24:4A:C4:02:67:EE:C4:7A:91:70:8F:89:CF:53:66:EA:A8:D7
Certificate issuer:       /CN=6c29244ac40267eec47a91708f89cf5366eaa8d7
Certificate serial:       019873E3E5D4AB217723D70DB0ADA9ADD51B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bCkkSsQCZ-7EepFwj4nPU2bqqNc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/1f4e7e-c42f-44f2-bbee-e36966ba005c/1/bCkkSsQCZ-7EepFwj4nPU2bqqNc.mft
Manifest number:          0EAB
Signing time:             Mon 04 Aug 2025 07:02:51 +0000
Manifest this update:     Mon 04 Aug 2025 07:02:51 +0000
Manifest next update:     Tue 05 Aug 2025 07:02:51 +0000
Files and hashes:         1: bCkkSsQCZ-7EepFwj4nPU2bqqNc.crl (hash: mdaH4EE+REe7ReeySri4aDWAmBMIpUgQQvT/5VNJmSc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/1f4e7e-c42f-44f2-bbee-e36966ba005c/1/bCkkSsQCZ-7EepFwj4nPU2bqqNc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/1f4e7e-c42f-44f2-bbee-e36966ba005c/1/bCkkSsQCZ-7EepFwj4nPU2bqqNc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bCkkSsQCZ-7EepFwj4nPU2bqqNc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e3:e5:d4:ab:21:77:23:d7:0d:b0:ad:a9:ad:d5:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c29244ac40267eec47a91708f89cf5366eaa8d7
        Validity
            Not Before: Aug  4 07:02:51 2025 GMT
            Not After : Aug  5 07:02:51 2025 GMT
        Subject: CN=39b0a5743d433cb701c200f225fa809e86496c96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:75:4f:21:86:61:17:2e:c2:0f:2e:df:52:28:
                    f8:a3:ca:a8:ed:f6:f2:45:ae:c6:41:fc:1d:80:7c:
                    57:d0:2e:19:31:00:5c:74:74:73:5e:20:af:d1:fe:
                    3c:a4:a5:3b:04:96:f0:b7:a1:d3:4b:4e:13:16:a5:
                    d2:03:e5:92:97:ba:6e:89:ef:83:2c:71:86:44:5a:
                    2d:42:af:dc:a9:5b:6e:f8:e6:4b:52:4c:e6:07:c7:
                    1d:c8:bf:13:15:1f:31:06:d6:14:27:2c:d0:f9:70:
                    3e:81:a3:b8:9a:6c:37:3e:05:bd:9a:18:ac:f5:be:
                    12:fc:c8:be:53:32:96:ae:49:99:6b:bd:9b:46:63:
                    ad:d7:1e:a2:a0:2a:be:3f:29:0f:2c:c5:21:9e:9e:
                    84:8c:c4:2b:40:1d:e1:a0:96:49:0a:49:6e:b9:ab:
                    b7:b4:03:0c:4d:ae:93:e3:63:f9:29:87:be:49:82:
                    bd:22:fc:97:9d:32:76:52:7b:cc:a8:28:9a:54:47:
                    4d:26:6d:a7:40:a2:ff:95:16:76:34:8b:fe:5d:65:
                    89:b4:e0:9f:18:db:85:25:86:0f:4c:39:20:b2:44:
                    eb:2c:5d:96:6a:40:34:59:08:db:20:cb:14:48:c8:
                    50:8b:85:81:29:7c:bd:62:12:39:e3:49:bf:81:3f:
                    68:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:B0:A5:74:3D:43:3C:B7:01:C2:00:F2:25:FA:80:9E:86:49:6C:96
            X509v3 Authority Key Identifier:
                keyid:6C:29:24:4A:C4:02:67:EE:C4:7A:91:70:8F:89:CF:53:66:EA:A8:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bCkkSsQCZ-7EepFwj4nPU2bqqNc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1f4e7e-c42f-44f2-bbee-e36966ba005c/1/bCkkSsQCZ-7EepFwj4nPU2bqqNc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1f4e7e-c42f-44f2-bbee-e36966ba005c/1/bCkkSsQCZ-7EepFwj4nPU2bqqNc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:8f:c1:ff:11:dc:64:d5:8d:fb:1b:99:30:85:40:3c:fa:c6:
         fe:4f:4a:d9:6c:06:e8:b7:dc:c7:dc:e9:4e:f1:a3:6a:68:4c:
         b2:cd:be:8d:0c:f6:0e:3a:a3:10:1a:5d:17:57:25:56:b0:4c:
         fa:d1:3a:da:97:55:ac:d2:51:6b:b5:de:9d:09:5f:ac:e1:46:
         de:ec:bd:f9:67:8a:cd:a8:d7:65:21:51:a3:13:dc:cb:1f:5c:
         75:4c:78:37:19:48:70:c6:73:98:ca:bf:97:7c:e0:63:e1:ba:
         fe:7b:f1:55:ac:fe:97:ae:a4:5c:7a:7f:3d:29:7d:15:6e:62:
         8c:31:bb:40:92:9b:8e:60:d2:4d:c8:0c:95:d7:2d:63:19:b9:
         e8:2b:e1:db:4d:7a:1a:46:1b:1b:7e:59:ba:6b:ba:d0:5f:28:
         98:88:98:2a:81:8a:0b:f0:98:4f:f9:4c:2a:92:12:e4:fb:7e:
         a0:b0:ff:17:ea:6e:75:9f:ee:de:56:2b:92:28:9f:cd:f3:2c:
         99:79:b4:d7:67:6e:34:cc:5b:94:07:96:ca:87:e8:fe:7c:67:
         52:b1:e9:20:9c:28:e5:31:5c:4d:c1:7e:a4:be:37:68:cd:81:
         21:34:5a:69:e7:d9:22:fe:bd:6e:f6:3f:ce:b6:d0:8a:16:60:
         af:2f:67:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:05:21 2025 by rpki-client