Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/39a3dd-2d26-4753-a180-56d611720224/1/R5jSPWIery3VeYDVoA-8zJhYgvI.mft
File:                     R5jSPWIery3VeYDVoA-8zJhYgvI.mft (raw, json)
Hash identifier:          aobPbAINHVfo43AbilgUaI7q1EDoNjdSaoqHSCjNm60=
Subject key identifier:   A6:90:D5:87:B0:35:55:FD:AE:19:F9:C0:BD:BC:8D:34:1F:F3:01:54
Authority key identifier: 47:98:D2:3D:62:1E:AF:2D:D5:79:80:D5:A0:0F:BC:CC:98:58:82:F2
Certificate issuer:       /CN=4798d23d621eaf2dd57980d5a00fbccc985882f2
Certificate serial:       0197808D689763A7D6B4E7FA7288C9FDBD43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R5jSPWIery3VeYDVoA-8zJhYgvI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/39a3dd-2d26-4753-a180-56d611720224/1/R5jSPWIery3VeYDVoA-8zJhYgvI.mft
Manifest number:          0F94
Signing time:             Wed 18 Jun 2025 01:00:40 +0000
Manifest this update:     Wed 18 Jun 2025 01:00:40 +0000
Manifest next update:     Thu 19 Jun 2025 01:00:40 +0000
Files and hashes:         1: R5jSPWIery3VeYDVoA-8zJhYgvI.crl (hash: xJF6BMQn67ZuISJWOVQkpGeLnzPe191bIBP3koeGInA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/39a3dd-2d26-4753-a180-56d611720224/1/R5jSPWIery3VeYDVoA-8zJhYgvI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/39a3dd-2d26-4753-a180-56d611720224/1/R5jSPWIery3VeYDVoA-8zJhYgvI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R5jSPWIery3VeYDVoA-8zJhYgvI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 22:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:80:8d:68:97:63:a7:d6:b4:e7:fa:72:88:c9:fd:bd:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4798d23d621eaf2dd57980d5a00fbccc985882f2
        Validity
            Not Before: Jun 18 01:00:40 2025 GMT
            Not After : Jun 19 01:00:40 2025 GMT
        Subject: CN=a690d587b03555fdae19f9c0bdbc8d341ff30154
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bc:6d:1a:e7:5a:33:31:98:79:d6:79:a7:5d:
                    47:7f:8d:31:52:d6:bf:34:e6:81:48:12:b2:34:55:
                    c4:0c:43:5d:82:76:96:48:39:89:3f:3b:38:d9:87:
                    86:1b:75:50:0a:19:58:f4:03:18:6c:f2:06:c0:60:
                    f7:1d:51:bf:76:0d:d6:b4:93:d7:d3:79:39:ee:78:
                    b7:ca:06:b8:51:f3:cc:ff:66:1d:b4:85:17:18:2d:
                    fe:2f:04:f1:d4:fd:e0:8e:84:74:c3:b4:bc:26:48:
                    0e:9a:54:59:38:7b:6b:44:cb:66:3b:0e:60:ba:8e:
                    10:44:08:7b:87:aa:b5:41:47:3c:00:af:63:57:18:
                    29:79:95:55:c6:f7:d2:d4:06:d4:98:b6:ca:e9:98:
                    9d:15:72:bf:64:51:9f:5d:d1:5f:d0:6c:22:de:04:
                    8b:05:fc:46:36:73:16:3c:60:bf:87:5d:63:15:eb:
                    b0:cd:18:d9:fa:f5:9e:ee:a6:09:57:3b:05:62:df:
                    52:98:c5:a5:2d:43:57:30:f3:61:0c:51:c2:c1:3b:
                    82:51:ee:29:31:df:7d:ee:df:9b:9f:d1:90:49:c3:
                    7e:b3:54:e5:c3:33:14:03:0f:33:54:76:99:2b:dd:
                    4c:87:08:3e:d6:35:c5:b2:3b:8b:52:b2:de:86:09:
                    4c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:90:D5:87:B0:35:55:FD:AE:19:F9:C0:BD:BC:8D:34:1F:F3:01:54
            X509v3 Authority Key Identifier:
                keyid:47:98:D2:3D:62:1E:AF:2D:D5:79:80:D5:A0:0F:BC:CC:98:58:82:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R5jSPWIery3VeYDVoA-8zJhYgvI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/39a3dd-2d26-4753-a180-56d611720224/1/R5jSPWIery3VeYDVoA-8zJhYgvI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/39a3dd-2d26-4753-a180-56d611720224/1/R5jSPWIery3VeYDVoA-8zJhYgvI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:f8:8a:92:e3:52:a3:9f:5b:36:3e:1c:86:17:18:8c:bd:78:
         75:ad:d0:24:8d:55:dd:cd:49:cd:91:fb:66:91:61:c7:ce:18:
         f9:ad:5a:7f:f5:d2:98:83:3e:57:b4:c0:38:68:ef:58:f8:56:
         b9:45:1f:79:16:8e:cd:f5:ad:de:85:0d:95:79:b7:c1:13:e5:
         c0:0a:22:70:c7:e5:f9:21:2b:03:6e:7c:a4:51:52:d9:99:8d:
         cf:a8:cf:72:e7:f3:51:0e:ec:53:f6:b0:1b:12:2e:16:34:9a:
         9f:3e:ee:df:49:1c:7c:15:30:b3:d5:63:bf:09:bc:83:2f:f8:
         7a:89:18:eb:9c:88:91:68:75:a5:c8:d1:a5:32:5f:23:e0:21:
         2b:b2:1e:5f:8c:18:1d:86:d5:82:ce:9c:6f:1b:53:9a:6a:e7:
         19:91:34:45:cf:be:8c:7b:57:80:36:3d:74:ba:84:dc:44:19:
         0b:52:06:e2:e4:0a:f4:5d:98:89:92:e2:9b:93:0a:ea:9c:bb:
         36:ab:8e:34:d9:54:34:83:48:22:db:fd:2b:d4:2c:5d:c8:ec:
         3a:16:b0:90:8f:97:5f:65:0d:cf:ff:f6:35:b1:95:ac:c0:ed:
         c3:13:a2:f6:d0:cf:0f:6f:fa:80:c8:fa:5d:81:13:45:01:89:
         33:41:6c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 05:23:45 2025 by rpki-client