Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/4eae11-8dc8-4aa0-87fb-1bcbb106ecfb/1/0z3ubd_dv6ge6rxEHFPnAvklgWU.mft
File:                     0z3ubd_dv6ge6rxEHFPnAvklgWU.mft (raw, json)
Hash identifier:          Zk/J+v8CEzUIrCumFtgKJ6YrbnPwozadpwY9cAR2oYg=
Subject key identifier:   8B:F0:9F:08:C6:66:CA:98:19:96:CE:D0:CB:BE:4C:30:18:4C:E2:0B
Authority key identifier: D3:3D:EE:6D:DF:DD:BF:A8:1E:EA:BC:44:1C:53:E7:02:F9:25:81:65
Certificate issuer:       /CN=d33dee6ddfddbfa81eeabc441c53e702f9258165
Certificate serial:       01976A05858926269C5232D66F87EF418E25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0z3ubd_dv6ge6rxEHFPnAvklgWU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/4eae11-8dc8-4aa0-87fb-1bcbb106ecfb/1/0z3ubd_dv6ge6rxEHFPnAvklgWU.mft
Manifest number:          134F
Signing time:             Fri 13 Jun 2025 16:00:36 +0000
Manifest this update:     Fri 13 Jun 2025 16:00:36 +0000
Manifest next update:     Sat 14 Jun 2025 16:00:36 +0000
Files and hashes:         1: 0z3ubd_dv6ge6rxEHFPnAvklgWU.crl (hash: l2x41QSiqABAD544HPw7SJ5tqX12PgVbScgEez7uGjQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/4eae11-8dc8-4aa0-87fb-1bcbb106ecfb/1/0z3ubd_dv6ge6rxEHFPnAvklgWU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/4eae11-8dc8-4aa0-87fb-1bcbb106ecfb/1/0z3ubd_dv6ge6rxEHFPnAvklgWU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0z3ubd_dv6ge6rxEHFPnAvklgWU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6a:05:85:89:26:26:9c:52:32:d6:6f:87:ef:41:8e:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d33dee6ddfddbfa81eeabc441c53e702f9258165
        Validity
            Not Before: Jun 13 16:00:36 2025 GMT
            Not After : Jun 14 16:00:36 2025 GMT
        Subject: CN=8bf09f08c666ca981996ced0cbbe4c30184ce20b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:94:24:99:76:a6:ca:39:84:51:fd:f8:4e:75:
                    08:9a:0a:fb:08:31:ac:2e:61:c4:64:f8:b7:d7:db:
                    8d:0b:a5:bc:6f:42:8c:34:69:36:12:26:26:0a:20:
                    5b:e9:2c:db:76:ce:0f:ed:d7:ba:e7:6f:df:b8:11:
                    40:ac:a3:35:d2:47:1a:2f:a4:6f:78:bd:6f:63:0c:
                    a6:85:d5:8c:3c:e1:f3:7a:ca:71:ae:07:90:d2:b6:
                    5f:62:36:c0:6e:23:bb:b7:a2:3a:ab:95:07:19:05:
                    8c:09:24:f7:7c:97:10:11:34:19:bd:d5:f9:ce:f8:
                    76:7b:d6:93:66:ae:cf:c4:85:46:3e:d4:ea:0e:a2:
                    ac:70:c8:47:cd:44:30:77:ba:22:1c:65:81:b9:87:
                    54:09:c8:7b:d4:93:d4:63:68:2f:7e:e6:2b:6b:7e:
                    ed:46:bb:f9:97:8d:c6:12:03:84:4e:94:49:f8:72:
                    b9:13:7a:fc:25:b7:ab:9e:8e:26:9e:e6:6c:ab:ac:
                    44:54:11:27:16:6e:b4:dc:e0:f9:75:7a:3e:e7:1e:
                    63:75:ee:98:20:bd:5d:4f:5a:e5:e2:19:dd:15:5d:
                    c6:98:b9:d9:f8:b9:87:54:a9:57:5f:0c:e6:9b:71:
                    7b:4e:95:f9:43:77:f8:b3:55:3a:e4:fb:b7:1d:d0:
                    1c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:F0:9F:08:C6:66:CA:98:19:96:CE:D0:CB:BE:4C:30:18:4C:E2:0B
            X509v3 Authority Key Identifier:
                keyid:D3:3D:EE:6D:DF:DD:BF:A8:1E:EA:BC:44:1C:53:E7:02:F9:25:81:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0z3ubd_dv6ge6rxEHFPnAvklgWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4eae11-8dc8-4aa0-87fb-1bcbb106ecfb/1/0z3ubd_dv6ge6rxEHFPnAvklgWU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4eae11-8dc8-4aa0-87fb-1bcbb106ecfb/1/0z3ubd_dv6ge6rxEHFPnAvklgWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:bd:d9:6d:c0:9b:ea:2d:6f:48:16:b7:81:94:ec:32:fe:e9:
         ce:80:02:a1:3f:02:69:d3:57:52:ff:0d:4f:ab:55:cf:24:6d:
         ff:43:e6:e1:f9:26:70:10:fa:a8:e4:91:ba:3c:25:a0:c9:76:
         d5:fc:42:59:90:4f:a8:98:03:8c:b9:66:69:d1:2f:40:f8:35:
         ef:31:67:0f:80:aa:26:b9:05:7d:5b:9a:42:a0:7d:a4:fe:16:
         36:af:70:e1:5c:27:72:02:4d:89:ff:2b:5c:1a:6d:a0:29:d0:
         a6:48:0b:f9:ce:28:c1:61:66:50:9b:93:bd:f8:40:45:b3:9f:
         7a:36:62:ca:77:24:a9:39:a7:26:9d:67:f7:58:1e:8c:e3:16:
         89:30:05:18:83:c8:c1:8a:fd:56:76:de:65:6f:9c:59:44:91:
         50:bc:b3:66:b4:27:16:ad:a8:30:59:35:58:c7:96:f1:b0:59:
         08:69:4f:52:93:7c:49:5b:e1:2e:c3:78:c2:6b:70:2e:fc:b8:
         69:c3:50:ec:1f:03:22:57:a0:da:2c:56:9d:ba:89:80:3d:13:
         fe:bc:d9:4b:bf:20:09:78:3c:cf:5e:cd:29:9e:01:a9:a8:f0:
         47:7b:20:0d:91:7e:d9:da:b5:bb:18:0e:8a:69:86:3e:ff:56:
         b8:8f:6e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:06:59 2025 by rpki-client