Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.mft
File:                     EVWxb6nbe87sy4nR_iUmMsCXJRQ.mft (raw, json)
Hash identifier:          3yQuL3OUayILPh0eO/HG1khdCBEkZfUKdqQAvYKC/dU=
Subject key identifier:   31:29:FD:6B:1A:41:35:AC:EA:34:D7:F0:6C:14:9F:9A:BF:FC:E4:B2
Authority key identifier: 11:55:B1:6F:A9:DB:7B:CE:EC:CB:89:D1:FE:25:26:32:C0:97:25:14
Certificate issuer:       /CN=1155b16fa9db7bceeccb89d1fe252632c0972514
Certificate serial:       01976DABEDB46BB91D5E1C310E93DD0523D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EVWxb6nbe87sy4nR_iUmMsCXJRQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.mft
Manifest number:          0F87
Signing time:             Sat 14 Jun 2025 09:01:13 +0000
Manifest this update:     Sat 14 Jun 2025 09:01:13 +0000
Manifest next update:     Sun 15 Jun 2025 09:01:13 +0000
Files and hashes:         1: EVWxb6nbe87sy4nR_iUmMsCXJRQ.crl (hash: AOo/NpHI2fN/LqOWA0hX7d5F3SZLVU2EO56YTkE1hU8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EVWxb6nbe87sy4nR_iUmMsCXJRQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:ab:ed:b4:6b:b9:1d:5e:1c:31:0e:93:dd:05:23:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1155b16fa9db7bceeccb89d1fe252632c0972514
        Validity
            Not Before: Jun 14 09:01:13 2025 GMT
            Not After : Jun 15 09:01:13 2025 GMT
        Subject: CN=3129fd6b1a4135acea34d7f06c149f9abffce4b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f1:bb:ad:92:1e:4d:28:9e:40:2a:8e:fc:67:
                    f4:f7:f7:11:41:07:9d:e0:3b:ff:c7:fa:c1:2a:bb:
                    26:d4:b2:03:64:39:1c:9d:8f:df:34:58:d8:c9:d2:
                    ab:fb:90:38:eb:a9:1e:a6:cf:2d:b8:58:41:6d:6a:
                    78:31:fd:96:09:05:6e:7e:ff:d5:a6:a9:32:76:05:
                    b8:e9:c7:39:06:1c:0c:fc:63:51:21:37:ef:e1:3a:
                    bc:33:7b:22:6f:82:ae:c6:49:75:f7:7e:a0:7b:87:
                    30:c0:e7:78:3d:fa:2f:7a:55:67:b1:e8:0d:93:37:
                    ea:57:6b:fb:c4:db:99:da:7f:9a:41:be:a6:7d:53:
                    8a:79:41:e7:08:9c:b7:5d:04:19:51:2a:c0:78:8a:
                    2d:83:44:d1:82:45:34:e9:99:ab:ce:e3:7b:77:66:
                    af:d5:b7:e6:af:6b:b7:77:51:a9:cd:04:6a:49:10:
                    4e:7c:40:8a:cf:11:9a:d2:49:9d:28:25:ba:97:e1:
                    82:1c:4c:f0:d4:e6:07:0a:a6:3a:9e:b1:7e:5e:29:
                    93:e5:ea:5c:06:b1:d6:9e:6b:e6:34:61:b7:48:ad:
                    f1:46:f2:0f:f8:23:af:c7:b8:28:77:13:e1:d0:bf:
                    92:f1:94:a6:ac:6d:23:d9:6b:8a:d5:e2:6c:5a:07:
                    cd:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:29:FD:6B:1A:41:35:AC:EA:34:D7:F0:6C:14:9F:9A:BF:FC:E4:B2
            X509v3 Authority Key Identifier:
                keyid:11:55:B1:6F:A9:DB:7B:CE:EC:CB:89:D1:FE:25:26:32:C0:97:25:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EVWxb6nbe87sy4nR_iUmMsCXJRQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:c7:a8:cb:45:e5:a1:ac:96:73:53:55:0c:af:92:3d:46:a3:
         ae:60:4b:95:ef:fa:38:79:c0:52:9b:28:04:ca:2a:e2:98:e8:
         58:5a:df:46:2d:e2:96:c5:c6:62:ce:46:8d:d5:f2:c5:11:8e:
         13:9f:d4:2d:39:5f:18:8c:76:34:04:85:96:72:68:a1:40:07:
         f0:dc:32:fe:04:c7:f8:f2:25:98:79:6f:18:96:48:a9:4c:93:
         c7:fa:55:d5:33:bb:dc:ac:f2:5d:e5:0f:0d:88:db:2d:07:15:
         86:c1:11:81:c4:c4:c4:03:26:84:6b:77:a8:fd:63:32:c8:a1:
         11:72:5a:42:d7:e4:55:a6:18:ec:47:49:dc:dc:fe:56:16:c9:
         ae:32:fd:cc:ca:43:e7:10:ba:94:1c:71:32:83:12:50:e7:c3:
         bd:50:0e:18:8a:4b:e2:37:fc:c3:f1:93:14:f2:88:4e:16:06:
         1b:69:ec:ae:0f:22:50:97:cb:95:3c:b1:df:7f:1b:1a:36:cc:
         6b:f7:02:ac:79:d8:66:ae:ee:a9:2b:28:dd:cc:48:13:e9:2c:
         69:ae:64:12:af:b7:eb:82:84:fa:38:32:56:04:33:66:fd:f3:
         ba:89:d5:e4:42:b0:b4:ff:00:63:c6:be:bf:93:38:06:1e:2e:
         c5:f3:a2:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:07:11 2025 by rpki-client