Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.mft
File:                     k0UD3V9q0KYOe0A6WmQq3kYZljw.mft (raw, json)
Hash identifier:          N7KtOqzi0PWUXFnVlymUqwtAQmcn900TDbbMi0ASC3U=
Subject key identifier:   49:FB:8F:70:98:C0:67:E7:54:B0:7A:B3:A8:A0:6D:ED:09:4B:33:94
Authority key identifier: 93:45:03:DD:5F:6A:D0:A6:0E:7B:40:3A:5A:64:2A:DE:46:19:96:3C
Certificate issuer:       /CN=934503dd5f6ad0a60e7b403a5a642ade4619963c
Certificate serial:       0197CD28D069F03C755C0DD6B00EAC653821
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k0UD3V9q0KYOe0A6WmQq3kYZljw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.mft
Manifest number:          10BF
Signing time:             Wed 02 Jul 2025 22:01:33 +0000
Manifest this update:     Wed 02 Jul 2025 22:01:33 +0000
Manifest next update:     Thu 03 Jul 2025 22:01:33 +0000
Files and hashes:         1: k0UD3V9q0KYOe0A6WmQq3kYZljw.crl (hash: hx1zJrWDtDA2ldDZIwn1P/oGlFzbuVTKoHDwi/98tLs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k0UD3V9q0KYOe0A6WmQq3kYZljw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 20:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:cd:28:d0:69:f0:3c:75:5c:0d:d6:b0:0e:ac:65:38:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934503dd5f6ad0a60e7b403a5a642ade4619963c
        Validity
            Not Before: Jul  2 22:01:33 2025 GMT
            Not After : Jul  3 22:01:33 2025 GMT
        Subject: CN=49fb8f7098c067e754b07ab3a8a06ded094b3394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f9:ff:1a:b4:0c:16:01:17:99:51:e1:d8:8a:
                    a8:3a:36:50:b7:8c:49:d4:ad:41:2c:23:33:de:b5:
                    f0:f5:ad:2a:39:cb:95:58:a9:f4:ff:64:a8:e4:a5:
                    2d:6b:0a:f5:38:e2:89:2b:2e:b1:a1:bd:83:43:18:
                    1e:85:1a:f2:41:39:14:c1:85:77:77:4e:02:b4:80:
                    1e:75:4a:6e:95:0a:2b:35:32:ee:68:8d:68:b8:84:
                    4d:4a:cc:57:13:46:dc:b8:41:97:f3:70:05:9b:bf:
                    7b:08:54:43:ea:20:d1:fb:b6:ca:0b:0c:f1:d0:93:
                    b1:2e:f3:64:da:c4:b6:aa:8d:d6:0a:eb:d4:44:a2:
                    55:af:5b:09:1c:71:cd:05:ed:5d:de:ac:ca:e6:0a:
                    34:3d:dc:3e:f7:af:a7:b5:98:d0:15:07:da:c5:d1:
                    f4:f4:7d:41:17:7c:6d:d9:53:45:31:b7:d8:a8:30:
                    b2:28:ec:df:cd:04:c1:2d:35:30:58:16:0e:f5:76:
                    d3:7f:10:1b:dc:cf:96:d1:67:42:8a:89:18:88:ce:
                    e4:6c:c5:37:9e:a9:5b:14:eb:f9:0b:c8:47:c8:d9:
                    a6:02:0a:c5:54:5f:ae:f5:f4:91:8c:fe:f5:2a:f3:
                    1a:19:47:61:74:5f:59:b1:37:04:9b:07:a3:6b:30:
                    2f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:FB:8F:70:98:C0:67:E7:54:B0:7A:B3:A8:A0:6D:ED:09:4B:33:94
            X509v3 Authority Key Identifier:
                keyid:93:45:03:DD:5F:6A:D0:A6:0E:7B:40:3A:5A:64:2A:DE:46:19:96:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k0UD3V9q0KYOe0A6WmQq3kYZljw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:33:67:d3:0b:09:4c:ad:b6:0e:91:fc:d6:9a:ba:26:e8:07:
         d6:25:17:16:36:f0:a3:2c:6d:ba:d6:3d:6a:bb:64:ea:30:66:
         dd:08:39:69:16:2d:b1:c5:ca:ed:90:a6:80:5a:bf:00:0f:c0:
         df:bc:95:4b:58:6b:98:98:49:e8:00:56:cc:92:a2:46:43:d0:
         56:17:6a:15:75:e5:fb:68:9d:5a:0e:b0:75:16:a5:ec:af:55:
         da:cc:98:7b:3a:9c:57:bc:c8:33:dd:eb:d7:42:de:e0:02:08:
         f6:75:1a:7d:81:57:40:67:c2:22:03:08:fa:9b:1f:26:84:df:
         be:c9:4d:7e:ed:e3:49:b5:94:d9:bd:4b:f7:4d:40:6c:87:dd:
         9f:d0:35:5f:9b:92:42:1f:b1:b5:08:f3:3b:ff:31:a9:cc:6f:
         5b:cd:60:63:32:1b:0b:a0:23:69:d4:5e:88:49:35:64:10:b1:
         28:82:c0:71:8c:72:ea:3d:f8:ba:39:02:8f:7e:27:94:e3:62:
         95:c0:8b:da:3b:a6:00:d5:8e:2a:1d:51:8d:03:87:78:48:5f:
         3f:1e:a4:b2:d6:04:df:22:bb:be:c9:c8:93:02:dc:9d:b7:e1:
         d4:42:89:19:25:7c:1c:90:f2:9b:41:cd:11:31:ae:3a:37:bd:
         de:05:aa:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 00:58:03 2025 by rpki-client