Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.mft
File:                     jucXwqqWGqxFA_G0hGTfAjPOP6k.mft (raw, json)
Hash identifier:          H9r/V1pOn0ggB2XzEfvor/hO+XHmAwOUzU/s6PZDM4k=
Subject key identifier:   EC:C2:51:EE:38:5F:8D:A7:FD:E8:80:9B:E2:10:75:05:EC:67:96:BE
Authority key identifier: 8E:E7:17:C2:AA:96:1A:AC:45:03:F1:B4:84:64:DF:02:33:CE:3F:A9
Certificate issuer:       /CN=8ee717c2aa961aac4503f1b48464df0233ce3fa9
Certificate serial:       0197790B0983F68A74BFE3DC9FEEAC8C9806
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jucXwqqWGqxFA_G0hGTfAjPOP6k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.mft
Manifest number:          1593
Signing time:             Mon 16 Jun 2025 14:00:55 +0000
Manifest this update:     Mon 16 Jun 2025 14:00:55 +0000
Manifest next update:     Tue 17 Jun 2025 14:00:55 +0000
Files and hashes:         1: jucXwqqWGqxFA_G0hGTfAjPOP6k.crl (hash: g1VXunUMZtmy8NHQlVkHP1sE4IYoEAB4O4hOQ37WuFE=)
                          2: nAc1q3nfY2rahmh9ClFRUbi5r8Q.roa (hash: QqGmTANPkdGPtd0qcxYu7kXnGVs9toB0HFWCS2h8KYs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jucXwqqWGqxFA_G0hGTfAjPOP6k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:79:0b:09:83:f6:8a:74:bf:e3:dc:9f:ee:ac:8c:98:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ee717c2aa961aac4503f1b48464df0233ce3fa9
        Validity
            Not Before: Jun 16 14:00:55 2025 GMT
            Not After : Jun 17 14:00:55 2025 GMT
        Subject: CN=ecc251ee385f8da7fde8809be2107505ec6796be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:00:f4:26:02:46:6e:d2:05:f5:3d:db:7a:62:
                    8b:c6:86:97:b4:c8:c6:b7:84:3c:da:19:6d:8a:11:
                    e5:9c:bd:81:e8:45:d0:7b:dd:58:3d:d0:ab:9c:b2:
                    74:8a:65:f1:82:bd:76:49:5d:c2:af:e6:21:e6:d1:
                    97:b8:0e:d2:88:0c:09:23:8f:67:2b:2e:71:c4:8f:
                    a5:5f:59:68:40:9e:ac:cc:21:7a:24:c1:66:f9:26:
                    d8:04:a6:6f:96:61:e2:8f:ee:21:1b:ad:54:80:62:
                    8a:9d:7d:f3:c2:06:e6:da:70:ea:11:b6:9f:6d:02:
                    e6:a0:38:7f:5d:75:51:f5:cf:4e:1d:c6:89:ce:dc:
                    94:2c:71:fb:9c:eb:39:76:44:1e:fe:ea:a5:5d:15:
                    57:1c:e3:a3:1b:dd:76:37:c9:e8:d6:fd:14:8e:47:
                    f2:b4:86:0a:33:52:cd:4c:a6:28:ad:ea:d5:b5:0d:
                    d8:09:b0:45:98:57:e3:e9:11:8d:f5:4b:5a:99:5e:
                    9f:48:37:d7:ec:3a:fb:fa:71:41:77:90:91:d6:e6:
                    43:b7:9b:b4:29:43:f5:b5:e0:f3:7b:e3:9a:f8:d0:
                    0c:10:1f:92:c2:92:46:bf:20:a4:0c:03:b4:e4:97:
                    a5:ca:3a:36:1d:05:76:56:65:25:2d:aa:3e:42:76:
                    e9:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:C2:51:EE:38:5F:8D:A7:FD:E8:80:9B:E2:10:75:05:EC:67:96:BE
            X509v3 Authority Key Identifier:
                keyid:8E:E7:17:C2:AA:96:1A:AC:45:03:F1:B4:84:64:DF:02:33:CE:3F:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jucXwqqWGqxFA_G0hGTfAjPOP6k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:75:74:ea:71:b0:41:cd:cd:94:a9:01:ed:e6:d4:9e:51:fe:
         63:d6:e3:73:aa:a2:83:d0:7f:12:dc:c6:04:76:6b:9c:29:4e:
         1c:d8:6f:44:b8:f3:f0:42:1b:9c:f6:02:25:87:e6:6f:f4:34:
         45:85:12:e5:c9:11:4d:aa:d0:e8:9f:c3:b3:ea:fb:71:2d:bb:
         65:a1:64:35:be:4f:5e:35:74:b8:3b:c9:40:09:87:64:a9:62:
         be:22:c4:8a:27:36:a2:7d:aa:2a:60:16:50:90:12:dc:ce:15:
         47:e1:ad:75:21:a1:99:1c:d3:12:e7:bf:5b:6d:bb:29:dd:cd:
         a9:07:e8:ff:25:18:73:05:a0:8e:62:dd:93:e3:56:c9:63:d3:
         7c:0c:00:6e:94:6b:2b:ed:c7:6f:a9:96:11:99:a0:f4:ce:14:
         b6:85:ff:f5:d2:88:da:42:de:08:de:b6:39:ad:f3:81:5a:fe:
         8c:68:69:ad:45:2b:5f:fa:21:b4:92:7a:bc:51:c4:33:d8:c4:
         1e:0a:bc:22:19:3a:ed:83:b7:10:d4:59:5d:dc:38:6f:e6:9f:
         cb:7c:0a:cb:37:63:b9:76:f5:e8:be:5b:93:ef:21:27:47:c5:
         ed:75:7f:27:71:49:a3:0a:fb:2e:cd:55:d5:43:20:17:1b:59:
         d0:ad:b3:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 19:27:40 2025 by rpki-client