Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.mft
File:                     639rU_mItXcyDvKJM4Cl6oJLauQ.mft (raw, json)
Hash identifier:          6KRIi/RyVUcs8kRuilNk+0i8vJ87qv35M429tRBjo6k=
Subject key identifier:   18:B9:75:D1:83:76:55:A5:50:3D:C5:0B:B0:49:93:B2:23:A6:3B:B2
Authority key identifier: EB:7F:6B:53:F9:88:B5:77:32:0E:F2:89:33:80:A5:EA:82:4B:6A:E4
Certificate issuer:       /CN=eb7f6b53f988b577320ef2893380a5ea824b6ae4
Certificate serial:       0197B6A16A11B15757CC0316347654B765B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/639rU_mItXcyDvKJM4Cl6oJLauQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.mft
Manifest number:          15B2
Signing time:             Sat 28 Jun 2025 13:02:01 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:01 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:01 +0000
Files and hashes:         1: 639rU_mItXcyDvKJM4Cl6oJLauQ.crl (hash: bbvgHGq6SAwaw+MJi+wv/X2j4hjtSzy0eoJfO8ZRPjU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/639rU_mItXcyDvKJM4Cl6oJLauQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:02:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:6a:11:b1:57:57:cc:03:16:34:76:54:b7:65:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb7f6b53f988b577320ef2893380a5ea824b6ae4
        Validity
            Not Before: Jun 28 13:02:01 2025 GMT
            Not After : Jun 29 13:02:01 2025 GMT
        Subject: CN=18b975d1837655a5503dc50bb04993b223a63bb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1b:ed:d9:c5:61:e6:c4:84:c6:9e:98:48:8f:
                    e1:8e:93:4e:e5:18:94:d4:41:b1:22:a0:2c:86:9e:
                    3c:09:2d:de:14:d7:92:23:c0:07:fe:62:80:e6:2f:
                    a7:d9:75:ec:e8:ce:8b:79:1e:18:ba:c2:55:e2:3a:
                    7d:59:46:5b:72:cc:de:7e:a4:22:a8:9c:e0:e2:68:
                    d1:8c:01:df:bf:91:9a:eb:d8:bf:54:70:15:0c:cf:
                    98:6e:53:dd:33:0d:14:48:3e:5d:98:f0:fc:61:93:
                    bd:85:f0:e2:55:29:53:fe:40:5d:ad:0b:b7:0e:bc:
                    dd:71:f1:4f:d7:8d:c4:6f:5f:61:4e:6b:5c:a7:25:
                    a2:6e:01:06:3b:62:5d:08:db:1d:d9:69:59:8d:80:
                    9b:60:fd:9c:98:95:60:28:62:f7:cf:5a:b8:e4:7b:
                    c3:1a:87:ff:b5:71:ce:e7:d0:a6:07:d8:84:a5:eb:
                    6c:72:ce:b2:3e:fd:0e:fb:c3:db:64:0a:8a:97:01:
                    39:20:9a:25:18:02:db:34:8a:01:9d:80:df:f0:dc:
                    44:e3:83:e4:40:43:29:44:c6:0d:38:8b:5f:27:bf:
                    ee:95:c2:1b:8e:c4:43:d3:f7:68:1d:ca:f4:b2:22:
                    90:65:bc:d9:dd:93:a5:52:7d:3c:0e:4a:22:e5:80:
                    64:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:B9:75:D1:83:76:55:A5:50:3D:C5:0B:B0:49:93:B2:23:A6:3B:B2
            X509v3 Authority Key Identifier:
                keyid:EB:7F:6B:53:F9:88:B5:77:32:0E:F2:89:33:80:A5:EA:82:4B:6A:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/639rU_mItXcyDvKJM4Cl6oJLauQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:4c:af:ed:50:97:c4:9d:b0:9d:59:52:08:64:5e:7a:2b:a7:
         53:da:88:b2:0a:c9:d2:5c:e3:48:f4:03:c7:81:99:f4:9a:ea:
         83:95:09:7b:a8:73:92:90:dd:e5:a5:a4:14:33:1b:b1:ee:c3:
         15:08:17:2d:b9:2a:ba:60:d4:c3:ac:1a:e1:d5:a9:d5:bf:d9:
         26:6a:c8:8e:ec:bc:d6:6f:60:3e:29:ee:7c:0f:8b:91:3a:0f:
         fd:57:5a:69:9b:44:cb:56:75:c0:55:a5:31:d1:3f:b7:0c:c9:
         ef:29:80:5e:0b:58:12:05:76:b7:63:46:7f:7f:07:a1:c2:bf:
         a1:87:33:e5:87:61:7e:67:ef:06:1c:7f:4a:99:d1:00:e3:05:
         cc:bf:f8:6e:8e:b2:75:f6:be:88:c4:06:42:e5:23:9f:b5:da:
         d6:aa:bf:ad:ea:81:a0:d1:45:93:ae:00:f2:ed:90:bb:8e:eb:
         12:b5:d0:72:e2:15:66:61:13:3a:7f:00:03:77:0c:cb:e8:16:
         6f:04:da:29:f4:8c:c8:cf:c4:00:59:89:2c:16:6e:07:db:76:
         24:2d:a7:87:be:e4:8e:9a:33:31:c7:bb:72:9b:b9:df:bb:0d:
         f7:ee:3c:b2:65:47:94:33:5b:41:a8:76:54:1b:96:11:86:05:
         16:cb:d6:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:39:43 2025 by rpki-client