Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.mft
File:                     sQQLwlH-AmafV_6lcnQ6N6z71Vc.mft (raw, json)
Hash identifier:          2+8nPyKvDLaM4zWkXXcf+SLwRqc1tqcyOfHO0RchHwI=
Subject key identifier:   C8:A3:4B:F6:44:BD:85:F6:F1:2E:B6:66:CF:E8:9C:7F:7E:F9:96:B0
Authority key identifier: B1:04:0B:C2:51:FE:02:66:9F:57:FE:A5:72:74:3A:37:AC:FB:D5:57
Certificate issuer:       /CN=b1040bc251fe02669f57fea572743a37acfbd557
Certificate serial:       01976BF3F0BA5ED40487F69493E7661AEE3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sQQLwlH-AmafV_6lcnQ6N6z71Vc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.mft
Manifest number:          0734
Signing time:             Sat 14 Jun 2025 01:00:38 +0000
Manifest this update:     Sat 14 Jun 2025 01:00:38 +0000
Manifest next update:     Sun 15 Jun 2025 01:00:38 +0000
Files and hashes:         1: sQQLwlH-AmafV_6lcnQ6N6z71Vc.crl (hash: Ll3+qIUZXcdoR/rgWD/vrsAjzoT+lZr4deZroU5d0NM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sQQLwlH-AmafV_6lcnQ6N6z71Vc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:f3:f0:ba:5e:d4:04:87:f6:94:93:e7:66:1a:ee:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1040bc251fe02669f57fea572743a37acfbd557
        Validity
            Not Before: Jun 14 01:00:38 2025 GMT
            Not After : Jun 15 01:00:38 2025 GMT
        Subject: CN=c8a34bf644bd85f6f12eb666cfe89c7f7ef996b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2a:3a:41:31:d0:de:8b:62:3e:78:30:ea:26:
                    d4:52:e2:0a:56:54:99:59:af:8b:ca:83:b9:12:32:
                    73:c6:cb:91:7a:95:6c:f8:be:c0:e4:16:f8:54:e0:
                    71:de:47:4d:1a:fd:e6:e4:33:44:42:03:5f:3e:98:
                    28:33:7a:3b:a1:e0:20:fd:ca:c0:6f:c7:ae:29:26:
                    a4:27:c3:ed:eb:f0:dc:68:8f:4e:0a:b3:d2:a1:cd:
                    f5:e6:2d:8b:0d:a2:cd:f8:13:a3:af:b8:5d:35:c8:
                    55:52:6b:35:1e:ff:7e:26:21:fb:77:c3:eb:40:4c:
                    a4:27:c8:d1:13:f6:22:98:e5:b0:65:09:7f:bf:2f:
                    8d:92:d5:92:87:67:20:71:b5:a0:a8:48:36:6e:9e:
                    d6:a1:2c:08:aa:78:82:46:6a:ec:c0:07:3d:7b:cc:
                    42:fb:e6:11:68:52:ea:54:e8:eb:fb:04:29:12:54:
                    ff:c6:16:8a:37:62:ca:eb:d0:d8:d0:4a:e6:3f:8a:
                    b1:4b:46:df:6b:1b:92:09:ed:00:bc:9c:22:2c:f6:
                    60:45:77:a1:fb:54:90:76:8a:6e:d4:ea:a0:36:01:
                    86:f3:1c:6d:08:01:72:9d:d5:2d:28:d9:6d:e0:92:
                    69:55:96:67:e0:c7:dc:ab:f5:ca:d3:39:67:92:8d:
                    1d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:A3:4B:F6:44:BD:85:F6:F1:2E:B6:66:CF:E8:9C:7F:7E:F9:96:B0
            X509v3 Authority Key Identifier:
                keyid:B1:04:0B:C2:51:FE:02:66:9F:57:FE:A5:72:74:3A:37:AC:FB:D5:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQQLwlH-AmafV_6lcnQ6N6z71Vc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:fa:e2:0a:f2:6b:50:02:93:a3:df:fa:f8:24:71:dd:43:c5:
         bf:b9:fe:04:b4:de:ca:59:7b:13:29:46:9d:2a:e5:d2:76:64:
         e3:06:29:4d:2c:cf:82:8b:12:b4:92:1d:f7:1a:3f:11:eb:3d:
         9d:7a:5c:9b:c2:8f:9f:42:b0:b4:c3:46:b7:03:16:a7:d2:d4:
         a8:eb:45:7e:65:13:b7:bf:a2:d3:7b:c7:98:ed:20:7d:3c:f0:
         2d:3e:30:fe:03:bb:50:6d:42:05:80:bb:6a:c5:dc:6e:cf:33:
         3e:78:18:b9:e4:d5:07:f5:03:fb:c0:ab:3d:9f:2d:15:9c:84:
         b2:bb:75:93:36:91:a7:34:0a:7b:4b:03:3a:a9:69:a3:92:02:
         11:1a:1e:f4:bf:09:fa:df:45:11:58:60:ff:9f:af:2d:62:9e:
         da:24:93:4f:bf:62:fd:69:c6:43:0d:b7:d3:ef:9a:1f:e5:52:
         21:6c:4b:1e:47:6a:79:d9:b8:e2:5d:9e:03:0f:4f:ce:3b:ed:
         55:31:33:cd:95:89:23:5e:92:d7:c3:9a:46:af:28:47:4b:a6:
         7b:2a:e7:d9:06:d5:27:61:0b:e3:ca:35:f5:e5:be:a2:b1:68:
         44:18:0d:1c:65:14:8f:b7:1d:9e:b3:e2:e7:11:8f:84:d7:9f:
         45:d9:57:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:15:28 2025 by rpki-client