Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/15a057-4427-4b9d-ab75-5b7aba0f258c/1/79XDTJ_TJEnLwIirENkbWkq1Nho.mft
File:                     79XDTJ_TJEnLwIirENkbWkq1Nho.mft (raw, json)
Hash identifier:          N9Kvn2TMs2pAldeY2w/JbsIMiMt1nLWmSMe32cogIJg=
Subject key identifier:   54:76:40:DD:20:C0:9F:31:CC:7F:B9:41:A4:62:81:87:F9:AD:6B:DF
Authority key identifier: EF:D5:C3:4C:9F:D3:24:49:CB:C0:88:AB:10:D9:1B:5A:4A:B5:36:1A
Certificate issuer:       /CN=efd5c34c9fd32449cbc088ab10d91b5a4ab5361a
Certificate serial:       019777F813FE6F8B28E6D4722CB4D3C8744F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/79XDTJ_TJEnLwIirENkbWkq1Nho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/15a057-4427-4b9d-ab75-5b7aba0f258c/1/79XDTJ_TJEnLwIirENkbWkq1Nho.mft
Manifest number:          056C
Signing time:             Mon 16 Jun 2025 09:00:36 +0000
Manifest this update:     Mon 16 Jun 2025 09:00:36 +0000
Manifest next update:     Tue 17 Jun 2025 09:00:36 +0000
Files and hashes:         1: 79XDTJ_TJEnLwIirENkbWkq1Nho.crl (hash: HZIbBSYyEPebH6JIF2TzMbaqIgxnbUqXi0aILW0o7oc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/15a057-4427-4b9d-ab75-5b7aba0f258c/1/79XDTJ_TJEnLwIirENkbWkq1Nho.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/15a057-4427-4b9d-ab75-5b7aba0f258c/1/79XDTJ_TJEnLwIirENkbWkq1Nho.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/79XDTJ_TJEnLwIirENkbWkq1Nho.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 09:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:77:f8:13:fe:6f:8b:28:e6:d4:72:2c:b4:d3:c8:74:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efd5c34c9fd32449cbc088ab10d91b5a4ab5361a
        Validity
            Not Before: Jun 16 09:00:36 2025 GMT
            Not After : Jun 17 09:00:36 2025 GMT
        Subject: CN=547640dd20c09f31cc7fb941a4628187f9ad6bdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:50:7e:b2:13:c8:7d:df:1b:d3:b4:33:2f:7b:
                    f0:95:2d:60:b9:1c:66:49:5a:43:c9:61:15:9b:e1:
                    cd:eb:60:53:d3:d8:a5:af:0b:ff:41:59:5e:0e:26:
                    8b:7e:ca:e2:52:16:b4:00:1b:dd:cb:5e:94:f9:b4:
                    8d:c3:86:84:bc:42:84:27:96:51:23:a3:b6:2a:b6:
                    e0:f4:bd:76:77:14:91:22:6c:b0:89:07:90:2e:a9:
                    ce:f6:13:40:8e:74:9c:b1:86:c1:2c:8c:d7:c3:87:
                    2e:01:03:ed:f5:b2:7f:b8:b4:f2:ec:cf:ff:be:a9:
                    28:ad:61:8a:4e:bf:8c:8c:78:5a:0a:88:ad:da:27:
                    8e:0a:ec:ba:ec:9f:03:72:c0:37:5f:02:75:15:13:
                    35:ef:62:b1:54:1a:7a:1b:72:11:02:e1:29:d3:58:
                    58:78:5b:82:09:af:6b:52:ae:bb:0a:c7:58:ea:83:
                    df:f6:90:2f:7c:c7:09:56:9a:01:46:dc:9b:5e:15:
                    bf:be:8d:c7:20:69:5e:03:9c:cf:83:03:fe:4b:99:
                    07:b7:48:f3:10:56:5f:e9:5f:c8:6e:62:9f:ea:08:
                    b2:fb:cd:a4:9f:29:9c:c8:23:88:ca:b9:f3:3d:57:
                    3e:d7:6e:cd:08:93:f9:80:e9:c3:d6:ac:bb:47:fc:
                    4e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:76:40:DD:20:C0:9F:31:CC:7F:B9:41:A4:62:81:87:F9:AD:6B:DF
            X509v3 Authority Key Identifier:
                keyid:EF:D5:C3:4C:9F:D3:24:49:CB:C0:88:AB:10:D9:1B:5A:4A:B5:36:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/79XDTJ_TJEnLwIirENkbWkq1Nho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/15a057-4427-4b9d-ab75-5b7aba0f258c/1/79XDTJ_TJEnLwIirENkbWkq1Nho.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/15a057-4427-4b9d-ab75-5b7aba0f258c/1/79XDTJ_TJEnLwIirENkbWkq1Nho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:ff:72:a5:cf:48:6c:35:1f:e1:fe:62:1c:1d:3f:2f:af:a8:
         81:7a:56:f8:a4:c2:15:38:9c:9a:88:43:34:bb:1a:8e:04:53:
         b0:b9:5f:dd:68:cc:68:67:2c:b0:5c:fe:89:d2:55:55:12:3a:
         ab:b0:4a:d0:b4:83:9c:7e:0f:49:43:7a:df:7a:7f:a8:31:b4:
         f4:cd:96:68:4d:15:f6:1a:b8:ab:ef:6f:f3:97:b9:2b:92:02:
         60:70:bb:ce:55:9f:b1:0a:24:53:f7:f7:cc:8f:22:48:98:e5:
         5b:4e:25:90:1f:f4:45:b2:18:e8:97:a0:7b:f0:59:0d:a4:26:
         69:2b:b8:a1:09:6d:8a:61:1c:9f:22:08:06:93:76:3d:c9:52:
         20:c4:b5:fd:9c:3f:e6:6f:13:02:4b:1b:bc:ec:77:01:a3:0c:
         8e:0a:05:ce:50:7c:44:cf:08:e0:98:82:42:56:b0:e4:cb:57:
         ff:a0:68:4c:b7:c4:51:cc:e8:93:e1:f7:7b:fd:06:74:74:2b:
         d8:a9:a3:ff:09:99:44:43:69:35:ea:f8:79:fc:b6:46:9f:53:
         2f:94:d8:96:b6:88:30:45:6d:74:6b:b0:19:a4:25:de:99:c7:
         b2:04:9e:40:b4:49:46:e5:01:84:15:12:ef:4f:91:cc:b5:59:
         aa:81:d1:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 16:20:14 2025 by rpki-client