Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.mft
File:                     Ef7lYBzyOOHdeSGsnYgpbizM3og.mft (raw, json)
Hash identifier:          g7Wes1qwBhsY0KRgHaxxThqcIdbJ3pSA6m3LOBlNaBU=
Subject key identifier:   F1:9D:1F:BA:68:27:EC:CB:00:27:9C:3E:BC:13:51:50:F5:80:F2:7A
Authority key identifier: 11:FE:E5:60:1C:F2:38:E1:DD:79:21:AC:9D:88:29:6E:2C:CC:DE:88
Certificate issuer:       /CN=11fee5601cf238e1dd7921ac9d88296e2cccde88
Certificate serial:       01976A05C96B8E05A8FC25B533D50FD3D7F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ef7lYBzyOOHdeSGsnYgpbizM3og.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.mft
Manifest number:          0F5C
Signing time:             Fri 13 Jun 2025 16:00:53 +0000
Manifest this update:     Fri 13 Jun 2025 16:00:53 +0000
Manifest next update:     Sat 14 Jun 2025 16:00:53 +0000
Files and hashes:         1: Ef7lYBzyOOHdeSGsnYgpbizM3og.crl (hash: zwgQOZtQnVXOgl/YCLlDKkzYGiVKJUbJ9jAmQhfXTIA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ef7lYBzyOOHdeSGsnYgpbizM3og.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6a:05:c9:6b:8e:05:a8:fc:25:b5:33:d5:0f:d3:d7:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11fee5601cf238e1dd7921ac9d88296e2cccde88
        Validity
            Not Before: Jun 13 16:00:53 2025 GMT
            Not After : Jun 14 16:00:53 2025 GMT
        Subject: CN=f19d1fba6827eccb00279c3ebc135150f580f27a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:29:ee:c0:7d:9f:ab:96:da:d4:60:fa:0e:35:
                    d9:be:4f:bc:51:37:ec:b5:37:94:d0:77:2c:8c:a0:
                    e1:dd:28:88:d0:53:6c:d4:a7:4b:12:59:4c:f3:e2:
                    cf:a9:a5:a7:ff:3e:5b:ca:89:c7:64:95:68:1e:fe:
                    6b:57:36:15:a2:55:ce:58:9a:df:1b:3d:73:b2:d1:
                    91:79:6a:df:f7:cf:ce:93:3f:be:9b:aa:06:50:1e:
                    96:43:3f:26:14:d7:d6:f8:49:8b:31:96:e5:cd:9e:
                    f6:33:e8:76:15:fa:24:9e:78:be:37:11:d3:c6:9a:
                    2b:8f:6a:b0:02:fb:6d:8c:b2:65:06:7e:3b:ce:20:
                    1f:19:a8:2a:93:ba:46:4d:f3:ab:db:a6:37:a4:56:
                    17:29:a1:35:5f:59:cf:7f:92:fc:ea:f1:9b:85:04:
                    11:1a:bf:c0:4a:76:e0:0b:ba:ce:23:07:83:09:fa:
                    14:68:07:0a:01:c1:9e:1a:0d:fa:e1:9a:52:ac:3a:
                    40:a0:22:cb:c0:17:4c:2a:c5:0e:e8:06:d2:3a:a3:
                    a1:f9:0c:e0:53:cd:e8:cf:5d:d2:88:82:55:a0:86:
                    1f:94:43:58:f8:38:ca:5c:30:ec:a5:29:71:c9:6a:
                    87:a9:02:08:44:d8:8b:c5:44:15:d3:22:e7:31:49:
                    a8:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:9D:1F:BA:68:27:EC:CB:00:27:9C:3E:BC:13:51:50:F5:80:F2:7A
            X509v3 Authority Key Identifier:
                keyid:11:FE:E5:60:1C:F2:38:E1:DD:79:21:AC:9D:88:29:6E:2C:CC:DE:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ef7lYBzyOOHdeSGsnYgpbizM3og.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:5e:10:7c:54:8d:cb:9f:a6:56:73:a1:f1:7d:5a:97:64:3d:
         09:04:62:45:d4:81:e4:4c:e9:72:05:e9:6d:9f:5b:17:be:b5:
         4d:bb:53:fc:ea:38:1d:38:ee:3d:ad:09:28:12:5f:fe:a0:4e:
         c8:a1:0e:dc:da:e0:45:9e:fc:11:5a:68:78:46:71:9c:09:2d:
         cf:42:c9:c1:10:de:4f:4a:6d:ca:b0:fa:60:ee:85:be:76:af:
         9e:04:73:88:a2:d7:8e:db:7f:f0:da:15:5a:ac:e3:53:04:a7:
         41:f2:bd:4d:18:ae:e0:93:61:d5:8c:bd:34:34:f3:dd:35:dc:
         3d:1b:c4:d1:e9:10:4b:a8:b5:02:4f:a8:7f:30:56:87:1f:61:
         9e:ec:5b:f1:c2:a3:e0:c4:c7:ec:88:64:5b:f4:83:90:f7:bb:
         df:87:d2:02:97:f9:02:50:b9:5f:43:d7:fc:c3:8b:2c:aa:de:
         01:e8:6c:81:75:1c:ce:a6:80:a9:e4:e2:ed:51:e6:3f:2d:a0:
         44:e1:53:10:30:73:db:7a:48:29:5d:f2:1e:c1:ee:25:d3:10:
         94:2c:b9:80:48:5c:57:55:3c:a8:4e:63:2e:b0:0a:8e:f4:b1:
         91:34:9b:dc:6c:8f:89:fa:a7:fd:a6:d1:5c:e6:36:e5:75:68:
         89:8e:43:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:55:45 2025 by rpki-client