Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c09c64-0baf-4b07-8d29-473851709c58/1/curcen7OR31fTXdyQ7YPK7u3VgM.mft
File:                     curcen7OR31fTXdyQ7YPK7u3VgM.mft (raw, json)
Hash identifier:          awZG3IJ0PIs6wxrdqhyYaF4sF36/1BYOYnNYVrgAqqM=
Subject key identifier:   62:53:95:02:83:04:2F:23:60:65:86:3B:B6:F5:FE:83:F3:93:B6:DB
Authority key identifier: 72:EA:DC:7A:7E:CE:47:7D:5F:4D:77:72:43:B6:0F:2B:BB:B7:56:03
Certificate issuer:       /CN=72eadc7a7ece477d5f4d777243b60f2bbbb75603
Certificate serial:       01977F0D69F17177779BEF5344A3FC2A150E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/curcen7OR31fTXdyQ7YPK7u3VgM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/c09c64-0baf-4b07-8d29-473851709c58/1/curcen7OR31fTXdyQ7YPK7u3VgM.mft
Manifest number:          0802
Signing time:             Tue 17 Jun 2025 18:01:14 +0000
Manifest this update:     Tue 17 Jun 2025 18:01:14 +0000
Manifest next update:     Wed 18 Jun 2025 18:01:14 +0000
Files and hashes:         1: curcen7OR31fTXdyQ7YPK7u3VgM.crl (hash: wSfUFzNaGroECG34hBhuCO8RZ2APgQc/aUlfcarN2zU=)
                          2: mFFNgz0LoOIjeTT2_r0-wBPyYQM.roa (hash: 8oKdatfS4ydJsathXE08ETrnAsR4fEoI1qYHumOim1w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/c09c64-0baf-4b07-8d29-473851709c58/1/curcen7OR31fTXdyQ7YPK7u3VgM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/c09c64-0baf-4b07-8d29-473851709c58/1/curcen7OR31fTXdyQ7YPK7u3VgM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/curcen7OR31fTXdyQ7YPK7u3VgM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 18:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7f:0d:69:f1:71:77:77:9b:ef:53:44:a3:fc:2a:15:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72eadc7a7ece477d5f4d777243b60f2bbbb75603
        Validity
            Not Before: Jun 17 18:01:14 2025 GMT
            Not After : Jun 18 18:01:14 2025 GMT
        Subject: CN=6253950283042f236065863bb6f5fe83f393b6db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:6d:24:dc:f2:d2:04:e5:3e:1c:e8:91:c0:3f:
                    63:eb:db:1d:8b:da:07:58:f2:d8:84:13:7f:87:4f:
                    85:85:8d:04:5a:5a:c4:01:8a:c3:d4:31:20:fa:62:
                    f5:b1:c6:1d:f7:f1:cf:4a:8b:3c:92:ad:af:63:58:
                    98:8d:ab:d0:a6:88:f1:d4:c5:6f:81:24:8f:f3:ca:
                    8a:d9:df:7b:89:39:67:29:7b:93:51:92:5b:3b:2b:
                    81:a7:3a:c0:d0:45:08:b0:28:0f:b9:6f:8e:a5:b5:
                    04:b2:d1:f7:cd:78:8f:3b:b2:b0:eb:9d:ed:12:ac:
                    cd:c1:99:72:28:55:5d:e1:44:1a:69:ac:e9:b6:2d:
                    5e:7b:a7:cb:e9:16:0b:67:49:a6:28:85:11:fc:da:
                    ec:7e:52:c5:43:dd:c8:75:7c:47:2a:d9:90:ad:31:
                    8b:19:40:dd:36:e6:ee:22:f9:31:63:ce:48:a6:9b:
                    75:70:d5:8f:b3:ea:53:ab:86:7a:89:d1:89:90:59:
                    1f:0a:73:aa:38:9d:25:e0:ce:21:29:9f:7b:9d:09:
                    5b:17:24:4c:c9:d8:88:c9:db:f9:df:50:a1:be:bb:
                    79:da:63:87:ab:be:56:9f:f6:5d:cc:b3:1f:63:08:
                    15:52:b4:b6:d9:c9:96:1a:4c:69:69:a5:40:39:7b:
                    08:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:53:95:02:83:04:2F:23:60:65:86:3B:B6:F5:FE:83:F3:93:B6:DB
            X509v3 Authority Key Identifier:
                keyid:72:EA:DC:7A:7E:CE:47:7D:5F:4D:77:72:43:B6:0F:2B:BB:B7:56:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/curcen7OR31fTXdyQ7YPK7u3VgM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c09c64-0baf-4b07-8d29-473851709c58/1/curcen7OR31fTXdyQ7YPK7u3VgM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c09c64-0baf-4b07-8d29-473851709c58/1/curcen7OR31fTXdyQ7YPK7u3VgM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:be:ef:da:2e:ed:6d:8c:4b:13:da:ee:5d:71:14:93:c6:63:
         6b:c4:64:a8:37:ff:dc:a7:10:83:8f:39:e1:93:b3:3b:a2:b3:
         59:97:28:04:77:ae:35:dd:95:c4:ae:08:f4:52:f3:1c:4d:8e:
         46:a7:ee:fe:c6:3c:62:f8:9f:66:62:d9:99:5d:34:f1:3e:58:
         88:cd:70:c7:e8:ee:16:e8:bf:a9:45:73:43:3a:27:1e:fc:19:
         df:61:11:4d:28:65:f4:0e:28:61:f1:07:79:ea:8f:b3:5c:be:
         86:8f:08:87:d6:15:cd:7a:4b:66:0a:f0:ac:a1:65:0c:45:aa:
         e0:4a:72:e3:08:31:6b:d7:67:a3:fe:25:b3:ce:fd:6a:13:d2:
         d3:d6:b7:b7:5b:40:5a:de:6d:b3:67:74:ae:49:1e:04:44:a8:
         94:2a:5f:36:00:35:3b:c9:2d:f7:3a:09:09:b4:ac:e6:d8:02:
         58:b0:3e:f3:8d:09:22:ac:3f:89:4b:23:2d:c3:77:54:98:6b:
         bb:41:e2:d3:f3:71:e7:86:6a:3a:00:24:dc:84:d9:96:c8:72:
         5c:2e:eb:b2:43:df:68:b7:9a:0a:3b:d6:c4:3c:88:4e:b2:67:
         b6:61:dd:e7:22:19:75:28:2f:43:47:25:7c:c3:90:e6:0c:b8:
         65:62:0a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 01:53:47 2025 by rpki-client