Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/4bf4c5-02ac-4346-afbc-e879a6027907/1/sqvUconMbNnByAJ0KiztUMY0vTs.mft
File:                     sqvUconMbNnByAJ0KiztUMY0vTs.mft (raw, json)
Hash identifier:          gmfHyYMzkht9MlHFv3T7SYytBz0uCqhmUHyGkWr8Be8=
Subject key identifier:   28:04:12:B5:E2:43:CC:76:85:AA:27:55:46:80:44:C7:2C:6A:86:EF
Authority key identifier: B2:AB:D4:72:89:CC:6C:D9:C1:C8:02:74:2A:2C:ED:50:C6:34:BD:3B
Certificate issuer:       /CN=b2abd47289cc6cd9c1c802742a2ced50c634bd3b
Certificate serial:       0197C501720AC099B742C45F4F062C3CD13A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sqvUconMbNnByAJ0KiztUMY0vTs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/4bf4c5-02ac-4346-afbc-e879a6027907/1/sqvUconMbNnByAJ0KiztUMY0vTs.mft
Manifest number:          0790
Signing time:             Tue 01 Jul 2025 08:01:35 +0000
Manifest this update:     Tue 01 Jul 2025 08:01:35 +0000
Manifest next update:     Wed 02 Jul 2025 08:01:35 +0000
Files and hashes:         1: sqvUconMbNnByAJ0KiztUMY0vTs.crl (hash: moMIg9Wsldf0VwuCd/m+bZTNtv6G21tdd8UJ+Yfoa2c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/4bf4c5-02ac-4346-afbc-e879a6027907/1/sqvUconMbNnByAJ0KiztUMY0vTs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/4bf4c5-02ac-4346-afbc-e879a6027907/1/sqvUconMbNnByAJ0KiztUMY0vTs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sqvUconMbNnByAJ0KiztUMY0vTs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 02 Jul 2025 08:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c5:01:72:0a:c0:99:b7:42:c4:5f:4f:06:2c:3c:d1:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2abd47289cc6cd9c1c802742a2ced50c634bd3b
        Validity
            Not Before: Jul  1 08:01:35 2025 GMT
            Not After : Jul  2 08:01:35 2025 GMT
        Subject: CN=280412b5e243cc7685aa2755468044c72c6a86ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6c:7c:86:1a:ce:41:aa:1a:14:4a:61:72:cb:
                    af:30:6b:c9:a8:72:02:56:13:78:50:6f:13:22:8c:
                    79:9f:2a:87:5e:4c:bf:0c:3b:a7:db:37:42:79:c6:
                    0f:e3:cc:63:8e:38:26:15:b8:b8:75:9c:f9:91:34:
                    a5:53:30:e7:53:7e:ea:f4:00:bd:0e:71:19:74:14:
                    c4:e5:bd:86:1d:46:4b:9a:87:1f:ca:fe:94:28:90:
                    ba:47:4a:3f:bb:7b:e0:4c:38:2f:75:81:93:b0:9b:
                    77:8b:ff:b1:7f:c7:de:25:f9:15:68:51:c1:5b:35:
                    d6:29:8b:51:ac:51:4b:0a:b6:21:09:b4:43:ba:a0:
                    ea:0d:26:a1:d9:a9:0b:86:3a:c8:6d:a8:45:c0:4a:
                    36:a1:38:f3:5d:05:e8:fc:50:ed:ca:db:ff:a6:97:
                    5a:fc:ca:df:12:83:4c:b8:53:4f:de:f4:cc:73:2e:
                    6d:ff:04:e0:d9:2b:e5:81:42:9d:91:37:ea:ce:97:
                    c2:93:dd:0c:c7:9e:26:81:70:8f:40:bc:1e:e5:ae:
                    3b:5d:aa:1a:0a:91:3e:ee:bc:4b:c6:90:bb:ae:cb:
                    59:13:0e:dd:70:1a:6e:17:9f:ae:db:fc:d7:55:79:
                    91:85:88:f9:09:f3:84:e2:11:f0:c7:91:5f:6e:58:
                    b3:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:04:12:B5:E2:43:CC:76:85:AA:27:55:46:80:44:C7:2C:6A:86:EF
            X509v3 Authority Key Identifier:
                keyid:B2:AB:D4:72:89:CC:6C:D9:C1:C8:02:74:2A:2C:ED:50:C6:34:BD:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sqvUconMbNnByAJ0KiztUMY0vTs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4bf4c5-02ac-4346-afbc-e879a6027907/1/sqvUconMbNnByAJ0KiztUMY0vTs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4bf4c5-02ac-4346-afbc-e879a6027907/1/sqvUconMbNnByAJ0KiztUMY0vTs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:9b:55:ff:6b:9b:5d:8b:e5:f8:f9:f9:7f:e1:eb:b8:c3:34:
         18:ae:26:ce:23:71:61:1a:97:ec:40:63:7d:5c:78:f6:33:67:
         90:01:f2:d3:06:ea:81:e8:5f:83:ac:55:74:46:c4:a5:a6:3c:
         95:d6:e1:b3:0a:4a:a0:d6:26:95:dd:06:21:03:55:a0:01:84:
         b5:d7:bb:d8:f3:7c:fd:15:4f:d3:9d:cb:c8:e3:5a:42:7d:a0:
         4e:0b:c6:ae:45:74:8e:1b:3a:f5:43:b4:e2:9c:3b:9f:94:a0:
         2e:37:bc:80:e9:3d:64:d4:6f:bd:40:8d:dd:26:94:59:14:50:
         f0:0e:fe:bd:f6:1b:d8:70:98:98:6a:9f:f1:58:b8:5a:ed:bf:
         09:a8:54:12:7e:5d:b5:7d:eb:e7:e5:94:76:55:d5:74:57:f4:
         7a:3e:ac:aa:d6:f0:6a:8b:da:8a:81:77:ba:60:6b:1a:6f:79:
         f7:e7:f4:c9:29:23:ff:56:27:46:08:02:1f:88:c7:ef:2f:93:
         34:c3:03:af:b2:a8:bf:e1:da:cf:cf:ab:1d:65:e8:c6:53:48:
         93:8b:64:ed:5f:ba:0d:56:d3:aa:b3:61:14:74:7f:cc:b7:d4:
         29:7e:fa:15:bb:59:42:cd:ba:a7:2b:54:5e:9b:93:1f:55:bf:
         5c:c0:39:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 18:32:43 2025 by rpki-client