Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/18c259-ba03-43a8-bf2c-4936f02fc760/1/aXE7HKgNhb8WGCF_qS29R6NcW44.mft
File:                     aXE7HKgNhb8WGCF_qS29R6NcW44.mft (raw, json)
Hash identifier:          +fDgSkq4yMT2XxaAqD6fhYhOhfs3O7c9XUflWalVqHY=
Subject key identifier:   FF:99:16:08:A2:19:4A:C6:E8:85:21:2A:D1:BE:67:96:12:C8:60:EB
Authority key identifier: 69:71:3B:1C:A8:0D:85:BF:16:18:21:7F:A9:2D:BD:47:A3:5C:5B:8E
Certificate issuer:       /CN=69713b1ca80d85bf1618217fa92dbd47a35c5b8e
Certificate serial:       01976929D4C432C9A78C8F8722208F1D740A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aXE7HKgNhb8WGCF_qS29R6NcW44.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/18c259-ba03-43a8-bf2c-4936f02fc760/1/aXE7HKgNhb8WGCF_qS29R6NcW44.mft
Manifest number:          46
Signing time:             Fri 13 Jun 2025 12:00:38 +0000
Manifest this update:     Fri 13 Jun 2025 12:00:38 +0000
Manifest next update:     Sat 14 Jun 2025 12:00:38 +0000
Files and hashes:         1: aXE7HKgNhb8WGCF_qS29R6NcW44.crl (hash: Seiq1s0pb/z2Ym7LHyKJ90RgGr9Uf/eB8POHBs27T0I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/18c259-ba03-43a8-bf2c-4936f02fc760/1/aXE7HKgNhb8WGCF_qS29R6NcW44.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/18c259-ba03-43a8-bf2c-4936f02fc760/1/aXE7HKgNhb8WGCF_qS29R6NcW44.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aXE7HKgNhb8WGCF_qS29R6NcW44.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 12:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:29:d4:c4:32:c9:a7:8c:8f:87:22:20:8f:1d:74:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69713b1ca80d85bf1618217fa92dbd47a35c5b8e
        Validity
            Not Before: Jun 13 12:00:38 2025 GMT
            Not After : Jun 14 12:00:38 2025 GMT
        Subject: CN=ff991608a2194ac6e885212ad1be679612c860eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c8:ed:b3:bb:10:3c:c9:df:27:c6:0e:6d:aa:
                    e6:6a:40:28:b7:39:d3:a5:a4:bd:c3:e3:8d:7e:70:
                    a5:d4:35:b8:46:3d:52:05:e5:c1:a3:c7:91:a8:3b:
                    cc:a1:06:d5:87:4e:95:1a:e5:93:de:85:e8:e8:81:
                    95:c8:f8:91:b8:97:aa:03:94:18:b8:cc:ac:42:f1:
                    e7:af:aa:17:81:d1:bc:22:c1:de:52:c5:fb:95:f6:
                    ed:8d:de:75:a4:56:bc:8b:91:8a:4e:ef:59:f0:04:
                    3c:f8:4e:af:7f:a4:5d:40:13:61:c1:c0:1a:dd:a9:
                    2f:46:a8:fd:06:fd:ca:66:5f:06:35:d1:f4:be:30:
                    37:d8:dc:1e:43:33:91:ed:1b:b2:0a:44:b1:6a:0c:
                    a7:c8:d0:e6:55:dd:be:3f:af:e2:4d:62:38:8c:70:
                    98:6f:48:71:66:da:a9:2e:27:38:a7:6c:1b:22:ab:
                    c5:36:35:05:5b:31:31:0b:be:2c:22:df:df:af:f5:
                    f0:8b:4f:55:28:5a:ac:b3:bb:98:d2:0d:6e:c9:c0:
                    f4:52:6b:b9:61:48:c5:c4:ff:7e:1a:4f:b7:fe:3f:
                    61:00:ab:08:31:30:42:10:33:49:27:1c:e1:89:7e:
                    be:11:52:71:51:86:50:2d:a4:a8:59:24:59:d6:f1:
                    6b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:99:16:08:A2:19:4A:C6:E8:85:21:2A:D1:BE:67:96:12:C8:60:EB
            X509v3 Authority Key Identifier:
                keyid:69:71:3B:1C:A8:0D:85:BF:16:18:21:7F:A9:2D:BD:47:A3:5C:5B:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXE7HKgNhb8WGCF_qS29R6NcW44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/18c259-ba03-43a8-bf2c-4936f02fc760/1/aXE7HKgNhb8WGCF_qS29R6NcW44.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/18c259-ba03-43a8-bf2c-4936f02fc760/1/aXE7HKgNhb8WGCF_qS29R6NcW44.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:8f:83:38:06:ee:8a:db:d7:91:e7:aa:df:86:ce:92:d4:54:
         48:15:4c:e9:d4:35:b8:66:b7:3d:8e:ed:72:91:15:5f:ec:a7:
         79:37:df:d3:44:70:9f:4a:ad:07:fe:5b:39:b9:75:ef:fc:40:
         e1:f9:bc:c4:70:33:be:40:9b:0b:ac:df:09:94:86:6e:2a:f0:
         31:19:df:cc:27:44:31:9b:39:31:95:34:90:7c:d7:0b:70:5d:
         54:fc:82:47:9f:35:ab:ef:ee:4e:0e:80:d5:6e:5e:86:e6:49:
         5d:f5:fd:1c:68:eb:99:9d:c4:bf:dc:e9:f8:70:1d:63:0d:c0:
         2d:18:73:1a:46:a9:c1:e6:5b:e9:75:b8:83:60:76:ca:02:c6:
         4d:38:df:6d:20:50:ef:20:22:ee:f9:b0:b4:a0:c4:63:c2:10:
         ca:e0:43:51:20:92:d4:b0:0d:ed:2e:78:b5:28:46:9a:f4:01:
         97:5c:2c:6f:88:d8:19:2d:8a:64:af:94:63:eb:3c:eb:64:c7:
         99:8c:62:bb:01:64:d8:74:5d:ff:84:5a:ae:70:66:79:a6:38:
         c6:43:c0:65:08:a3:f3:56:1e:95:f3:1c:b0:cc:31:d2:74:c0:
         9b:3e:20:31:de:4a:2a:9e:28:b6:cf:bc:ba:60:42:f3:b3:a2:
         2d:7a:ba:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpKdTEMsmnjI+HIiCPHXQKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NzEzYjFjYTgwZDg1YmYxNjE4MjE3ZmE5MmRiZDQ3YTM1
YzViOGUwHhcNMjUwNjEzMTIwMDM4WhcNMjUwNjE0MTIwMDM4WjAzMTEwLwYDVQQD
EyhmZjk5MTYwOGEyMTk0YWM2ZTg4NTIxMmFkMWJlNjc5NjEyYzg2MGViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycjts7sQPMnfJ8YObarmakAotznT
paS9w+ONfnCl1DW4Rj1SBeXBo8eRqDvMoQbVh06VGuWT3oXo6IGVyPiRuJeqA5QY
uMysQvHnr6oXgdG8IsHeUsX7lfbtjd51pFa8i5GKTu9Z8AQ8+E6vf6RdQBNhwcAa
3akvRqj9Bv3KZl8GNdH0vjA32NweQzOR7RuyCkSxagynyNDmVd2+P6/iTWI4jHCY
b0hxZtqpLic4p2wbIqvFNjUFWzExC74sIt/fr/Xwi09VKFqss7uY0g1uycD0Umu5
YUjFxP9+Gk+3/j9hAKsIMTBCEDNJJxzhiX6+EVJxUYZQLaSoWSRZ1vFr6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP+ZFgiiGUrG6IUhKtG+Z5YSyGDrMB8GA1UdIwQY
MBaAFGlxOxyoDYW/Fhghf6ktvUejXFuOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVhFN0hLZ05oYjhXR0NGX3FTMjlSNk5jVzQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xOGMyNTktYmEwMy00M2E4LWJmMmMt
NDkzNmYwMmZjNzYwLzEvYVhFN0hLZ05oYjhXR0NGX3FTMjlSNk5jVzQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8xOGMyNTktYmEwMy00M2E4LWJmMmMtNDkzNmYwMmZjNzYw
LzEvYVhFN0hLZ05oYjhXR0NGX3FTMjlSNk5jVzQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApY+DOAbu
itvXkeeq34bOktRUSBVM6dQ1uGa3PY7tcpEVX+yneTff00Rwn0qtB/5bObl17/xA
4fm8xHAzvkCbC6zfCZSGbirwMRnfzCdEMZs5MZU0kHzXC3BdVPyCR581q+/uTg6A
1W5ehuZJXfX9HGjrmZ3Ev9zp+HAdYw3ALRhzGkapweZb6XW4g2B2ygLGTTjfbSBQ
7yAi7vmwtKDEY8IQyuBDUSCS1LAN7S54tShGmvQBl1wsb4jYGS2KZK+UY+s862TH
mYxiuwFk2HRd/4RarnBmeaY4xkPAZQij81YelfMcsMwx0nTAmz4gMd5KKp4ots+8
umBC87OiLXq6XQ==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:11:26 2025 by rpki-client