Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft
File:                     4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft (raw, json)
Hash identifier:          IIi5/hlkNurc+hQ9zSLQ+7GoxpvxP7v3KNluxraWrWI=
Subject key identifier:   71:50:D5:48:AC:F0:E7:A7:9E:8D:68:23:B6:D9:79:F0:16:1D:D9:82
Authority key identifier: E1:9D:B0:C5:B2:D9:61:0E:F5:86:E9:7F:BA:1F:CA:87:50:06:F3:DA
Certificate issuer:       /CN=e19db0c5b2d9610ef586e97fba1fca875006f3da
Certificate serial:       019778661C6004E0D1AE56690EB8347FF9A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Z2wxbLZYQ71hul_uh_Kh1AG89o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft
Manifest number:          10C5
Signing time:             Mon 16 Jun 2025 11:00:47 +0000
Manifest this update:     Mon 16 Jun 2025 11:00:47 +0000
Manifest next update:     Tue 17 Jun 2025 11:00:47 +0000
Files and hashes:         1: 4Z2wxbLZYQ71hul_uh_Kh1AG89o.crl (hash: fOHnRO5vlm7SZbm+sq9In8DfUw9XmAMnk+rpv+yIzBU=)
                          2: WX9ifdPc509PIWH1MshzaQ9gKs4.roa (hash: N2NEfXL50JrESYal+4AtaFkCctqevfpLSA3CNFTMaFM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Z2wxbLZYQ71hul_uh_Kh1AG89o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:78:66:1c:60:04:e0:d1:ae:56:69:0e:b8:34:7f:f9:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e19db0c5b2d9610ef586e97fba1fca875006f3da
        Validity
            Not Before: Jun 16 11:00:47 2025 GMT
            Not After : Jun 17 11:00:47 2025 GMT
        Subject: CN=7150d548acf0e7a79e8d6823b6d979f0161dd982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3d:c7:47:9b:25:22:77:1a:73:04:85:2b:71:
                    e7:41:1a:75:7b:4d:c6:6b:5b:e0:73:21:02:74:2e:
                    2a:77:71:c2:19:6e:e3:be:d6:af:cf:de:21:60:be:
                    cf:ad:89:99:9e:dc:a3:d8:9f:5c:dd:1a:6a:68:07:
                    9b:70:c9:6e:e1:bc:1d:f7:32:67:8e:39:0a:99:dd:
                    e7:16:bd:06:4b:a5:57:57:a4:5c:73:dd:40:b9:ca:
                    97:9a:6d:5f:d5:a5:d3:6b:ca:f9:e6:a8:28:1c:8f:
                    fd:8b:5f:b6:38:d8:79:ae:0e:66:96:2b:09:f1:29:
                    42:c9:35:91:97:b5:ab:ca:89:3b:0e:af:87:cc:8e:
                    b4:07:6d:d8:63:b8:24:2d:21:2a:63:8f:7f:4b:e7:
                    21:15:7b:d6:cf:b0:bb:12:2b:20:e3:c2:c4:bd:61:
                    91:6d:c2:32:fc:cd:e9:ff:a1:7f:6b:8c:7a:19:b3:
                    ac:32:bb:e7:7b:49:98:6f:e3:90:ac:1d:c3:3e:47:
                    9d:d8:19:a2:10:43:87:8a:8e:92:9e:f9:04:d6:e5:
                    72:8d:66:a5:a2:95:12:df:6a:2f:f1:f6:4b:31:ea:
                    8b:b7:e3:e7:c0:47:65:c9:17:3e:e9:b3:55:cc:ea:
                    38:12:30:1b:1b:7f:cd:f8:ac:7f:90:43:b8:37:18:
                    36:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:50:D5:48:AC:F0:E7:A7:9E:8D:68:23:B6:D9:79:F0:16:1D:D9:82
            X509v3 Authority Key Identifier:
                keyid:E1:9D:B0:C5:B2:D9:61:0E:F5:86:E9:7F:BA:1F:CA:87:50:06:F3:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Z2wxbLZYQ71hul_uh_Kh1AG89o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:c0:34:3d:6b:c6:61:f7:22:89:30:78:25:8a:f2:81:f1:bd:
         49:a0:8e:9d:35:18:59:8b:a1:e5:5c:f3:94:94:73:95:e2:2e:
         fc:b2:95:d8:58:ef:3c:b6:e5:69:2d:d7:53:b6:30:ea:ac:ef:
         82:e2:00:d7:ce:e0:21:0d:09:a2:b7:e1:77:bd:ce:b8:bc:37:
         33:0b:23:53:9a:67:b5:d9:b2:b4:5e:41:b2:58:d1:e7:10:0e:
         17:b2:00:e8:cb:83:db:b6:8a:5e:a2:82:54:ff:d5:a0:5a:d4:
         2f:44:18:67:d1:11:4d:dc:0e:dc:18:7c:b3:0c:f5:bf:08:c1:
         f0:d6:89:ee:f9:6f:04:d0:a9:0f:20:64:3d:8e:0e:5b:c0:0b:
         99:67:fa:12:37:22:4a:bd:6b:13:46:53:ca:11:c2:35:b1:19:
         d4:49:97:0a:9b:6c:e5:90:6e:e9:09:e6:8c:6e:ea:fd:49:47:
         a8:26:e4:f6:81:97:b0:1f:a7:50:f5:db:cf:63:fc:9a:84:0c:
         0e:70:6a:d0:d0:06:ec:6a:84:d1:43:50:aa:33:b8:3d:05:f0:
         6e:e5:b0:09:4c:a5:26:a3:be:9c:cf:58:69:69:4f:3a:90:8f:
         7d:1e:77:09:e9:c4:5c:67:a6:07:9d:53:5f:29:ec:e7:db:b7:
         8f:b1:76:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:06:33 2025 by rpki-client