Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f366bf-8f55-4e7f-ae27-708218a66b8f/1/mnJ6puaHtJLSEvRR3rhh6gHxdSk.mft
File:                     mnJ6puaHtJLSEvRR3rhh6gHxdSk.mft (raw, json)
Hash identifier:          wJllph5VJRYijDbWcu2b7BF9ldZ5cotM8os/Qg4zEik=
Subject key identifier:   19:20:EE:1F:9C:CA:81:34:B3:04:C6:42:85:51:08:DE:97:E2:28:8B
Authority key identifier: 9A:72:7A:A6:E6:87:B4:92:D2:12:F4:51:DE:B8:61:EA:01:F1:75:29
Certificate issuer:       /CN=9a727aa6e687b492d212f451deb861ea01f17529
Certificate serial:       01976BBD58229DF55AD72378BACC8E6BB42D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mnJ6puaHtJLSEvRR3rhh6gHxdSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/f366bf-8f55-4e7f-ae27-708218a66b8f/1/mnJ6puaHtJLSEvRR3rhh6gHxdSk.mft
Manifest number:          1186
Signing time:             Sat 14 Jun 2025 00:01:00 +0000
Manifest this update:     Sat 14 Jun 2025 00:01:00 +0000
Manifest next update:     Sun 15 Jun 2025 00:01:00 +0000
Files and hashes:         1: mnJ6puaHtJLSEvRR3rhh6gHxdSk.crl (hash: tx+2jjqrqVL+8cLUkg2WT/1mKXz+jYCTReg4DS9EEXw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/f366bf-8f55-4e7f-ae27-708218a66b8f/1/mnJ6puaHtJLSEvRR3rhh6gHxdSk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/f366bf-8f55-4e7f-ae27-708218a66b8f/1/mnJ6puaHtJLSEvRR3rhh6gHxdSk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mnJ6puaHtJLSEvRR3rhh6gHxdSk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 00:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:bd:58:22:9d:f5:5a:d7:23:78:ba:cc:8e:6b:b4:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a727aa6e687b492d212f451deb861ea01f17529
        Validity
            Not Before: Jun 14 00:01:00 2025 GMT
            Not After : Jun 15 00:01:00 2025 GMT
        Subject: CN=1920ee1f9cca8134b304c642855108de97e2288b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:79:a4:ba:6d:a3:b4:e6:c0:03:0b:97:dd:2e:
                    22:3c:34:c8:3f:7c:ba:bf:d4:4b:df:28:7d:f2:fa:
                    6e:aa:29:b2:63:92:6c:e7:1b:21:91:5c:66:e9:23:
                    6d:79:ab:8e:af:a4:3c:af:54:9c:c4:03:ea:3e:d2:
                    b6:2d:09:04:85:7e:9f:d1:ab:46:7c:8d:56:9e:7c:
                    5f:91:4f:1a:56:9d:ac:ed:2e:9d:78:4e:e9:bb:ee:
                    20:d4:de:26:6d:dc:69:18:e4:3f:ce:03:81:1e:e9:
                    4e:64:0e:9a:ec:76:73:46:85:b4:18:9c:d1:6e:ed:
                    9c:ae:cb:5e:11:9a:3d:5d:37:52:dc:34:51:84:74:
                    8a:17:be:86:b2:1d:8b:9a:5c:27:fd:4e:a8:e3:5e:
                    58:18:e9:7b:e6:42:2a:fa:4b:51:62:97:63:58:ff:
                    85:5a:33:e8:00:7d:3e:03:8d:1d:1b:f9:18:44:26:
                    7a:37:1a:73:7a:06:b1:a2:45:8c:25:c5:a3:10:9f:
                    65:1d:0e:ea:18:45:0b:f3:db:79:bc:43:db:dc:95:
                    55:6d:47:7a:6f:5f:83:31:15:97:13:59:2e:6e:62:
                    30:08:66:75:37:59:ca:91:a9:6c:d8:56:da:ea:f3:
                    b8:7d:9c:c6:ae:42:41:e5:5b:30:ea:39:de:b8:d6:
                    54:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:20:EE:1F:9C:CA:81:34:B3:04:C6:42:85:51:08:DE:97:E2:28:8B
            X509v3 Authority Key Identifier:
                keyid:9A:72:7A:A6:E6:87:B4:92:D2:12:F4:51:DE:B8:61:EA:01:F1:75:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnJ6puaHtJLSEvRR3rhh6gHxdSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f366bf-8f55-4e7f-ae27-708218a66b8f/1/mnJ6puaHtJLSEvRR3rhh6gHxdSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f366bf-8f55-4e7f-ae27-708218a66b8f/1/mnJ6puaHtJLSEvRR3rhh6gHxdSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:a6:49:9e:b1:49:c5:93:04:64:d2:8a:f6:2c:eb:c3:67:ab:
         82:5c:91:3e:ca:8b:3c:6f:b1:bb:2f:dd:66:19:43:f4:9b:e0:
         1e:c9:43:fa:f6:bc:cb:52:40:b6:d9:4d:eb:84:ee:af:9b:c1:
         e1:a3:d1:1a:b9:2b:8a:7b:7e:a7:c2:94:fd:74:3d:54:18:9e:
         58:58:31:17:1f:11:c9:09:57:66:50:8c:dd:d3:a0:da:a0:33:
         57:80:ed:e7:b1:b6:4f:57:6c:82:60:f6:aa:33:a3:f6:5d:d5:
         2a:a3:f0:d3:d8:34:5a:3c:ec:24:a2:e2:0b:de:c6:08:05:98:
         d7:3c:e2:93:38:65:91:82:35:51:db:8a:7a:cc:64:fd:3a:55:
         f7:84:98:d5:48:03:00:49:0e:31:eb:ff:36:13:b1:82:6c:77:
         51:33:6c:0a:25:48:76:fe:ea:85:bf:75:06:0b:bf:a3:c3:00:
         52:5d:4c:d2:43:b4:5a:a8:4a:b2:88:8b:fc:3a:59:7e:41:13:
         78:02:ed:13:99:d4:58:5d:6a:f0:60:92:8f:8c:5a:92:6b:75:
         b0:95:e9:05:34:d3:9d:36:55:6f:00:4d:13:82:ff:e2:80:3e:
         5b:5e:ff:ed:35:47:5a:db:14:1f:63:c7:6b:7b:df:39:36:16:
         37:bd:6f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:21:08 2025 by rpki-client