Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/9188a4-7c7b-4e19-84ce-5b4905a28d83/1/Zz5yIBSrbED084ns_Kyu_7tjBM8.mft
File:                     Zz5yIBSrbED084ns_Kyu_7tjBM8.mft (raw, json)
Hash identifier:          ybwaAPKVNSX5QrumWPR/c1UPxFGhYzWIif2d5nRj3f0=
Subject key identifier:   AF:9F:CE:9C:19:10:69:95:C4:4D:DD:40:EF:06:C9:E1:03:3F:CC:EE
Authority key identifier: 67:3E:72:20:14:AB:6C:40:F4:F3:89:EC:FC:AC:AE:FF:BB:63:04:CF
Certificate issuer:       /CN=673e722014ab6c40f4f389ecfcacaeffbb6304cf
Certificate serial:       01976960826A626C9636A17DEB193ACB6F68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zz5yIBSrbED084ns_Kyu_7tjBM8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/9188a4-7c7b-4e19-84ce-5b4905a28d83/1/Zz5yIBSrbED084ns_Kyu_7tjBM8.mft
Manifest number:          06BF
Signing time:             Fri 13 Jun 2025 13:00:21 +0000
Manifest this update:     Fri 13 Jun 2025 13:00:21 +0000
Manifest next update:     Sat 14 Jun 2025 13:00:21 +0000
Files and hashes:         1: Zz5yIBSrbED084ns_Kyu_7tjBM8.crl (hash: xWW6kG6eenDBvcLW4MGr3LkZ6COC3Ua4ESfMDdXy110=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/9188a4-7c7b-4e19-84ce-5b4905a28d83/1/Zz5yIBSrbED084ns_Kyu_7tjBM8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/9188a4-7c7b-4e19-84ce-5b4905a28d83/1/Zz5yIBSrbED084ns_Kyu_7tjBM8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zz5yIBSrbED084ns_Kyu_7tjBM8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:60:82:6a:62:6c:96:36:a1:7d:eb:19:3a:cb:6f:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=673e722014ab6c40f4f389ecfcacaeffbb6304cf
        Validity
            Not Before: Jun 13 13:00:21 2025 GMT
            Not After : Jun 14 13:00:21 2025 GMT
        Subject: CN=af9fce9c19106995c44ddd40ef06c9e1033fccee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:68:3c:3f:65:78:21:fe:0c:22:56:c6:fd:f7:
                    bb:a4:8a:ad:c9:c0:11:3e:bc:60:83:24:87:9d:52:
                    4b:00:49:48:6c:c0:f1:f5:1e:85:d3:9b:09:c7:b4:
                    bf:ed:24:fa:69:44:58:2c:c6:f2:c3:08:80:95:ec:
                    b8:6b:25:6e:97:be:f4:11:11:10:51:37:e8:9e:9f:
                    69:39:d4:c8:55:82:e7:da:fd:1e:93:6d:8f:7a:8b:
                    25:17:6a:cb:60:2c:18:21:c4:d5:18:76:88:b6:44:
                    c7:96:7c:14:74:c4:69:b2:94:3a:15:ec:4c:67:32:
                    ca:2a:aa:5d:7a:23:d1:a7:13:32:23:4e:6c:de:1e:
                    5c:57:8d:67:42:ff:ec:b3:6f:02:52:b7:74:39:b4:
                    54:02:4f:2b:7e:43:74:c8:11:74:f5:3e:c6:be:56:
                    31:d9:2f:26:b6:e7:69:45:b3:53:ae:46:11:3b:09:
                    bc:42:d5:c2:bf:1d:7c:2e:4d:ee:03:7e:5f:05:89:
                    fc:db:af:da:0f:64:36:f8:be:54:70:e3:0c:e7:a2:
                    ad:72:d1:30:99:eb:e9:8a:01:47:d6:ef:11:64:7f:
                    06:d2:22:a1:1b:0d:c2:ab:f8:1d:4a:b2:87:15:8f:
                    4e:39:89:6e:cc:a6:e6:95:c0:b4:be:8f:3e:c0:51:
                    62:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:9F:CE:9C:19:10:69:95:C4:4D:DD:40:EF:06:C9:E1:03:3F:CC:EE
            X509v3 Authority Key Identifier:
                keyid:67:3E:72:20:14:AB:6C:40:F4:F3:89:EC:FC:AC:AE:FF:BB:63:04:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zz5yIBSrbED084ns_Kyu_7tjBM8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/9188a4-7c7b-4e19-84ce-5b4905a28d83/1/Zz5yIBSrbED084ns_Kyu_7tjBM8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/9188a4-7c7b-4e19-84ce-5b4905a28d83/1/Zz5yIBSrbED084ns_Kyu_7tjBM8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:76:14:94:07:85:bc:0b:3c:78:fa:e0:06:bc:a5:bc:28:6c:
         39:fe:8e:ca:17:d5:de:56:ad:79:ff:a4:06:e7:aa:63:f0:3d:
         b0:7c:4c:d8:42:54:5f:75:1c:12:4f:75:c8:81:dd:03:71:17:
         42:cb:d0:bb:d9:f3:1e:5a:20:46:a3:1e:29:fe:b9:1c:7c:ed:
         c8:b0:be:d8:bb:ef:de:13:02:3b:a2:0a:ab:49:2b:3d:08:15:
         cd:6b:d1:73:7d:0c:6a:ec:26:4d:1f:6f:04:5d:f6:13:b8:b2:
         44:c2:18:2a:89:a3:91:a4:08:27:ee:cd:4c:b9:e5:5d:22:9f:
         1c:b7:f4:bb:00:a9:40:16:7a:6e:99:91:a1:9a:6e:e9:05:dd:
         04:3b:f2:41:35:c9:4e:e6:a9:f6:8c:ec:84:ea:ae:e3:97:5a:
         5b:de:87:76:52:f1:ee:fc:71:99:19:56:4e:cd:f3:53:2c:21:
         18:c0:39:a9:42:d3:b5:3e:9d:aa:a5:82:d7:ae:01:c4:95:7d:
         8c:71:de:cf:22:7b:ea:3a:6c:cf:ec:2c:76:9c:62:03:ab:54:
         41:ee:26:fa:0b:0f:9a:ad:06:61:80:58:b9:34:56:e1:14:37:
         62:6f:2c:4b:43:c8:6e:e9:f4:ec:b5:dd:ef:6b:c5:69:af:76:
         fb:d4:13:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 20:17:25 2025 by rpki-client