Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/b2e4bf-17ac-4690-86c7-a40ea47b69cc/1/W1mW18RE1mpSvKEBsGynOKf8qps.mft
File:                     W1mW18RE1mpSvKEBsGynOKf8qps.mft (raw, json)
Hash identifier:          ft6l6mG7SxqDLGio3X46Ul/sMD9XB/iFKG46Tv3lJZs=
Subject key identifier:   E7:D2:9A:8B:E0:A2:71:E7:BB:3E:51:81:05:70:15:66:E7:1B:73:D7
Authority key identifier: 5B:59:96:D7:C4:44:D6:6A:52:BC:A1:01:B0:6C:A7:38:A7:FC:AA:9B
Certificate issuer:       /CN=5b5996d7c444d66a52bca101b06ca738a7fcaa9b
Certificate serial:       01976961A68A7A4074B16C8AEC33771F8075
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W1mW18RE1mpSvKEBsGynOKf8qps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/b2e4bf-17ac-4690-86c7-a40ea47b69cc/1/W1mW18RE1mpSvKEBsGynOKf8qps.mft
Manifest number:          0136
Signing time:             Fri 13 Jun 2025 13:01:36 +0000
Manifest this update:     Fri 13 Jun 2025 13:01:36 +0000
Manifest next update:     Sat 14 Jun 2025 13:01:36 +0000
Files and hashes:         1: W1mW18RE1mpSvKEBsGynOKf8qps.crl (hash: Be94n9r5Rzv6pqYOPI7IOkJHJc4EnozhUNHVhcDvOLc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/b2e4bf-17ac-4690-86c7-a40ea47b69cc/1/W1mW18RE1mpSvKEBsGynOKf8qps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/b2e4bf-17ac-4690-86c7-a40ea47b69cc/1/W1mW18RE1mpSvKEBsGynOKf8qps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W1mW18RE1mpSvKEBsGynOKf8qps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:61:a6:8a:7a:40:74:b1:6c:8a:ec:33:77:1f:80:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b5996d7c444d66a52bca101b06ca738a7fcaa9b
        Validity
            Not Before: Jun 13 13:01:36 2025 GMT
            Not After : Jun 14 13:01:36 2025 GMT
        Subject: CN=e7d29a8be0a271e7bb3e518105701566e71b73d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:89:de:46:67:f8:9f:b3:00:ec:1a:34:4f:77:
                    b4:4c:ff:bf:d0:46:73:ab:7e:53:ae:7b:da:8d:63:
                    f9:b2:53:59:a7:ac:c3:ba:4c:8c:38:56:cf:90:04:
                    96:a7:94:61:26:ef:aa:c6:cd:9f:9e:00:c0:8d:dc:
                    62:40:d7:6d:2f:a9:62:e2:ae:a4:06:8c:53:a6:4f:
                    25:18:4a:8c:bb:ed:1a:ae:cb:fa:43:61:f8:05:a1:
                    a7:c0:be:57:60:22:c4:55:f0:bd:37:6d:b8:d4:ce:
                    f7:db:f6:a2:6c:00:77:a6:8a:2b:89:a3:2b:64:5b:
                    60:16:9e:75:a0:eb:07:63:c0:e1:13:fc:06:9e:0e:
                    e3:6c:7b:2b:3e:c8:34:50:c3:d8:16:57:4a:18:a4:
                    4d:0c:d0:0c:1e:3a:34:b9:eb:89:4e:bf:7e:24:b1:
                    dd:9e:cd:eb:2b:40:8d:3c:5c:a1:5f:24:02:ac:7b:
                    26:f3:05:10:0a:9a:9b:e4:96:16:61:f3:a8:cb:8d:
                    95:c2:72:be:12:cc:83:6b:61:ac:3d:72:15:e3:9e:
                    8b:7e:2b:7a:40:f9:cb:92:7e:bc:a4:59:b1:09:86:
                    cf:61:79:9a:61:f9:b2:1f:8e:b8:ac:41:bd:9c:12:
                    53:0d:aa:0f:0c:43:0f:b8:71:5a:ec:85:c1:90:53:
                    45:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:D2:9A:8B:E0:A2:71:E7:BB:3E:51:81:05:70:15:66:E7:1B:73:D7
            X509v3 Authority Key Identifier:
                keyid:5B:59:96:D7:C4:44:D6:6A:52:BC:A1:01:B0:6C:A7:38:A7:FC:AA:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1mW18RE1mpSvKEBsGynOKf8qps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b2e4bf-17ac-4690-86c7-a40ea47b69cc/1/W1mW18RE1mpSvKEBsGynOKf8qps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b2e4bf-17ac-4690-86c7-a40ea47b69cc/1/W1mW18RE1mpSvKEBsGynOKf8qps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:e0:3f:f9:8c:9c:76:20:07:73:73:61:d1:11:fd:fc:02:d8:
         e2:0f:9c:4a:1d:8b:b4:d1:1f:7b:4e:0a:3c:08:f7:23:55:02:
         b9:9c:d2:20:7b:d1:08:e9:1a:b4:8f:28:84:e5:04:39:31:6d:
         c5:ba:e3:26:2b:95:72:7f:9e:ff:b6:43:ee:80:25:2a:8c:ac:
         77:8a:82:dd:42:ec:e3:4d:f4:0b:72:83:83:27:18:1c:69:4c:
         be:3b:3c:8f:0c:6b:06:68:4c:6d:73:a4:20:39:b4:ce:10:c1:
         ad:a6:2d:77:0d:82:14:3a:13:4b:32:2f:35:c3:6f:cb:cd:d5:
         2a:ae:e2:59:0a:e1:b4:5d:af:33:56:8b:03:4d:97:cf:44:b5:
         f4:07:35:31:13:67:96:50:68:9a:af:ef:25:13:3a:b4:f0:b8:
         5b:39:25:ea:63:1b:5c:58:54:9e:64:13:2c:c6:b0:76:89:c8:
         15:65:76:2d:7d:f4:a3:ab:8a:49:d3:d6:e8:0b:31:a1:de:3c:
         69:6e:ac:9a:43:98:15:fd:ee:25:86:01:32:4f:0b:d1:e1:39:
         b2:65:20:aa:14:34:08:1b:1f:aa:53:e2:a9:a3:e2:b0:cb:dd:
         7c:ff:c7:1d:1c:99:98:b1:66:74:17:b7:ed:cd:3e:54:ca:b4:
         13:16:a5:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:26:37 2025 by rpki-client