Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/b6462f-cc72-4f69-96f4-8bca0561b72d/1/d_M68l-VqylxEYjp_-pQzMshHXY.mft
File:                     d_M68l-VqylxEYjp_-pQzMshHXY.mft (raw, json)
Hash identifier:          sM61rT/TE14vCrAw3y1xIqSmAl2pGjBve6yBtfHj8tY=
Subject key identifier:   3B:45:96:75:D7:CE:17:B1:9B:F3:BA:65:38:58:D5:38:8D:23:2C:33
Authority key identifier: 77:F3:3A:F2:5F:95:AB:29:71:11:88:E9:FF:EA:50:CC:CB:21:1D:76
Certificate issuer:       /CN=77f33af25f95ab29711188e9ffea50cccb211d76
Certificate serial:       01976C98F756E1D33CB39F72DB2A94BEF20B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d_M68l-VqylxEYjp_-pQzMshHXY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/b6462f-cc72-4f69-96f4-8bca0561b72d/1/d_M68l-VqylxEYjp_-pQzMshHXY.mft
Manifest number:          0D04
Signing time:             Sat 14 Jun 2025 04:00:53 +0000
Manifest this update:     Sat 14 Jun 2025 04:00:53 +0000
Manifest next update:     Sun 15 Jun 2025 04:00:53 +0000
Files and hashes:         1: d_M68l-VqylxEYjp_-pQzMshHXY.crl (hash: 5MvBrgyEP1Mcm0sfIn4EG/zd1EB0RxNoged8C9XTPw4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/b6462f-cc72-4f69-96f4-8bca0561b72d/1/d_M68l-VqylxEYjp_-pQzMshHXY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/b6462f-cc72-4f69-96f4-8bca0561b72d/1/d_M68l-VqylxEYjp_-pQzMshHXY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d_M68l-VqylxEYjp_-pQzMshHXY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:98:f7:56:e1:d3:3c:b3:9f:72:db:2a:94:be:f2:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77f33af25f95ab29711188e9ffea50cccb211d76
        Validity
            Not Before: Jun 14 04:00:53 2025 GMT
            Not After : Jun 15 04:00:53 2025 GMT
        Subject: CN=3b459675d7ce17b19bf3ba653858d5388d232c33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:ab:7b:00:35:65:d5:93:1e:5f:37:75:65:d6:
                    aa:36:39:4e:13:f3:08:26:44:60:7d:78:9b:73:bc:
                    80:d3:e1:e5:33:bc:c5:9b:1f:e9:ae:51:7c:75:61:
                    fd:5b:e9:df:6d:1f:5c:ee:7d:20:56:1d:1c:f3:9b:
                    86:02:06:ef:69:0c:91:f4:df:ce:c3:5a:6a:80:ab:
                    90:55:58:4d:f6:cc:b3:35:40:7c:30:0c:44:cd:9f:
                    5a:14:1d:f7:5e:a7:bc:c0:c2:5f:aa:04:c1:93:65:
                    c0:af:3e:c1:c9:5a:cf:9a:eb:a0:51:25:63:4d:d0:
                    47:0d:97:86:12:a3:e2:fc:50:ad:ff:82:23:58:b0:
                    1f:43:05:3c:1b:91:86:72:11:50:4c:55:55:36:fa:
                    39:2f:3a:99:d3:63:3e:84:11:02:ca:34:52:03:ca:
                    c3:60:3a:10:a2:74:19:e4:43:26:bb:b0:30:e0:b2:
                    06:3a:67:ee:27:f8:9a:18:2f:76:38:79:d4:70:b6:
                    1e:56:af:57:66:90:a7:7d:a9:fc:d5:78:c5:b9:39:
                    d8:f4:be:c5:3b:23:e5:e5:30:43:97:f4:83:52:28:
                    d0:9f:b9:dd:ff:3b:82:d9:5f:f9:3a:0f:6f:0a:26:
                    2d:3b:4e:bc:3d:6e:24:b0:94:57:ed:21:f9:70:ae:
                    95:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:45:96:75:D7:CE:17:B1:9B:F3:BA:65:38:58:D5:38:8D:23:2C:33
            X509v3 Authority Key Identifier:
                keyid:77:F3:3A:F2:5F:95:AB:29:71:11:88:E9:FF:EA:50:CC:CB:21:1D:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_M68l-VqylxEYjp_-pQzMshHXY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b6462f-cc72-4f69-96f4-8bca0561b72d/1/d_M68l-VqylxEYjp_-pQzMshHXY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b6462f-cc72-4f69-96f4-8bca0561b72d/1/d_M68l-VqylxEYjp_-pQzMshHXY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:7c:eb:97:ce:b8:b9:63:b4:be:0b:5d:21:56:c4:ef:16:3e:
         5d:9d:b0:5d:8a:35:eb:cc:86:c2:d6:7f:1b:22:e4:0f:05:5f:
         29:be:a8:02:ee:58:34:45:7c:50:5a:af:ef:4e:30:52:e6:9d:
         41:6c:91:ef:f1:09:ce:51:b1:58:14:86:11:d3:3a:6a:1f:de:
         60:8e:79:0c:42:38:76:db:a3:3b:8f:f4:4b:95:70:4d:48:88:
         fd:cb:d3:fb:44:d3:cc:50:32:aa:59:30:d9:9d:25:9b:40:71:
         7d:2f:db:46:4e:6f:05:93:c6:b7:39:90:9b:a0:59:9f:cc:ff:
         9c:0e:8f:58:36:34:17:2b:21:11:67:07:3b:4f:ba:fa:d0:ee:
         93:25:a1:46:97:ae:5f:45:6d:6c:3d:3d:d2:31:91:fb:60:84:
         42:34:08:7f:67:3b:f3:b4:63:73:8e:63:34:f1:d8:79:1d:2f:
         1c:1a:0c:85:5f:9b:2a:ed:60:9d:07:c9:d2:d0:c3:e3:cf:c9:
         57:d7:48:12:c8:9f:04:3f:14:9d:43:8d:7a:df:50:9b:b4:f6:
         ff:b9:82:fc:97:17:ea:c4:59:c4:d6:4a:6d:eb:e5:00:fd:1c:
         98:1f:7a:9f:b7:52:73:71:0a:d3:4b:8b:9c:96:6c:3e:24:7e:
         8c:b2:f9:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:06:19 2025 by rpki-client