Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/65d6a2-a22c-4e9e-acdf-8e0c6ff00b78/1/RNC2iz7BebNdz_XEZdwtBGGZJ24.mft
File:                     RNC2iz7BebNdz_XEZdwtBGGZJ24.mft (raw, json)
Hash identifier:          XoYq58sVMBL+65sz4D8VDfzmhOf5vGhW9Vjg0JeQrqQ=
Subject key identifier:   0C:56:3B:9C:49:CD:3F:E1:F3:D5:71:85:94:12:77:7A:A0:EB:90:FE
Authority key identifier: 44:D0:B6:8B:3E:C1:79:B3:5D:CF:F5:C4:65:DC:2D:04:61:99:27:6E
Certificate issuer:       /CN=44d0b68b3ec179b35dcff5c465dc2d046199276e
Certificate serial:       01976BF3E8FAE8AC65BFB9233D7DC61B0EF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RNC2iz7BebNdz_XEZdwtBGGZJ24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/65d6a2-a22c-4e9e-acdf-8e0c6ff00b78/1/RNC2iz7BebNdz_XEZdwtBGGZJ24.mft
Manifest number:          158B
Signing time:             Sat 14 Jun 2025 01:00:36 +0000
Manifest this update:     Sat 14 Jun 2025 01:00:36 +0000
Manifest next update:     Sun 15 Jun 2025 01:00:36 +0000
Files and hashes:         1: RNC2iz7BebNdz_XEZdwtBGGZJ24.crl (hash: gY9lzTWUjGplGF1bDptkJ+IZ5EAp9fWDgM+K1EhwydA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/65d6a2-a22c-4e9e-acdf-8e0c6ff00b78/1/RNC2iz7BebNdz_XEZdwtBGGZJ24.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/65d6a2-a22c-4e9e-acdf-8e0c6ff00b78/1/RNC2iz7BebNdz_XEZdwtBGGZJ24.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RNC2iz7BebNdz_XEZdwtBGGZJ24.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:f3:e8:fa:e8:ac:65:bf:b9:23:3d:7d:c6:1b:0e:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44d0b68b3ec179b35dcff5c465dc2d046199276e
        Validity
            Not Before: Jun 14 01:00:36 2025 GMT
            Not After : Jun 15 01:00:36 2025 GMT
        Subject: CN=0c563b9c49cd3fe1f3d571859412777aa0eb90fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:91:7c:15:2a:81:19:f8:57:91:9b:ec:7e:d0:
                    b1:cd:8b:d8:a5:e6:9e:fd:70:a6:75:51:55:32:14:
                    95:e7:5a:70:b3:18:35:3d:83:e8:5e:78:7d:e1:a2:
                    b3:57:90:5f:9a:94:b4:3c:3e:d4:e8:ce:e8:c2:09:
                    5f:7a:f9:f8:c0:fc:fb:a4:b0:a7:5b:1b:76:d1:f8:
                    86:56:e4:47:1c:d4:21:d5:3d:ba:4e:65:ae:08:dd:
                    ab:ff:e5:05:03:c0:26:16:66:f5:5c:f4:06:34:d4:
                    91:8a:bc:2f:0a:51:d3:8c:4b:9d:fc:af:cc:ba:76:
                    5c:fc:5b:7b:70:4a:d2:a1:2d:14:38:98:73:56:cf:
                    19:c2:9b:c0:53:28:4c:97:ff:21:57:0c:a5:c5:98:
                    70:da:ad:8a:27:5a:1f:87:b2:87:53:91:f1:a0:2a:
                    8e:f1:bb:3d:4a:52:d3:cf:29:72:1d:c3:ab:0a:f7:
                    01:e6:cc:70:09:d9:c5:24:56:be:1b:6c:14:f3:ce:
                    55:2c:25:4a:90:a1:71:93:c5:a2:ca:d6:14:1c:25:
                    94:a7:4a:59:11:f8:fc:dc:e3:aa:8c:d1:3e:c9:96:
                    76:11:3d:28:81:55:dd:c3:99:71:6e:c3:4e:1c:21:
                    5a:0a:96:87:85:7c:71:c5:78:90:f4:d3:0b:6f:30:
                    51:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:56:3B:9C:49:CD:3F:E1:F3:D5:71:85:94:12:77:7A:A0:EB:90:FE
            X509v3 Authority Key Identifier:
                keyid:44:D0:B6:8B:3E:C1:79:B3:5D:CF:F5:C4:65:DC:2D:04:61:99:27:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RNC2iz7BebNdz_XEZdwtBGGZJ24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/65d6a2-a22c-4e9e-acdf-8e0c6ff00b78/1/RNC2iz7BebNdz_XEZdwtBGGZJ24.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/65d6a2-a22c-4e9e-acdf-8e0c6ff00b78/1/RNC2iz7BebNdz_XEZdwtBGGZJ24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:14:59:7e:e6:1e:be:c6:39:e3:2c:38:56:a0:ae:0c:49:8e:
         34:fd:68:a8:21:13:1f:b3:ca:fb:44:4d:3b:24:7b:dc:9c:16:
         44:6a:a0:00:72:b7:9e:1a:09:82:67:de:dd:8a:bf:9c:8e:38:
         85:ad:82:57:e1:dc:2c:85:c9:e3:6e:7e:8c:98:ea:90:21:2d:
         ef:06:d0:f0:7c:0c:8b:af:be:bd:33:c2:80:6b:fa:a6:36:93:
         79:f7:4f:5c:54:10:0a:78:5f:9d:ee:6f:4a:fe:2c:bc:a3:45:
         76:6e:57:b9:8b:c8:cd:44:34:d9:85:e1:56:8d:c6:2f:44:a8:
         0b:0a:e7:72:07:aa:fc:6d:20:3e:46:ac:37:51:e9:5b:41:48:
         79:83:6a:a3:9f:e7:29:65:a5:56:5e:7d:52:ae:cc:45:6c:1f:
         5e:92:77:ea:7e:46:23:96:04:14:71:2e:fe:2a:1a:b7:6e:40:
         aa:6b:f0:26:83:76:c9:d1:25:1e:9e:d8:52:a0:7a:2c:8c:4b:
         ea:5c:54:f2:f1:34:5d:4b:a1:59:50:91:58:9c:f5:f3:83:8a:
         ac:69:83:cc:c0:98:cb:dd:37:5d:9c:b7:52:a8:e1:63:e5:40:
         92:99:d1:62:f2:af:8a:f1:3e:f3:f5:2b:95:44:94:5d:ea:4a:
         10:08:f2:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:09:51 2025 by rpki-client