Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/c0f652-5c1c-4afa-86f7-98d613b8ddbd/1/MWxm5C6ILUAfr6K_pCru56dEZ3c.mft
File:                     MWxm5C6ILUAfr6K_pCru56dEZ3c.mft (raw, json)
Hash identifier:          A77mlEA2qYijqNsuKTvWETf00JIE0BAUDzuFZBliiDU=
Subject key identifier:   7D:19:F4:5E:F6:F0:AB:BC:B5:F4:D7:7C:97:B6:CA:75:AF:7B:CA:76
Authority key identifier: 31:6C:66:E4:2E:88:2D:40:1F:AF:A2:BF:A4:2A:EE:E7:A7:44:67:77
Certificate issuer:       /CN=316c66e42e882d401fafa2bfa42aeee7a7446777
Certificate serial:       0197BA7D276079A96829E946E8EC78D31561
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MWxm5C6ILUAfr6K_pCru56dEZ3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/c0f652-5c1c-4afa-86f7-98d613b8ddbd/1/MWxm5C6ILUAfr6K_pCru56dEZ3c.mft
Manifest number:          1517
Signing time:             Sun 29 Jun 2025 07:00:53 +0000
Manifest this update:     Sun 29 Jun 2025 07:00:53 +0000
Manifest next update:     Mon 30 Jun 2025 07:00:53 +0000
Files and hashes:         1: MWxm5C6ILUAfr6K_pCru56dEZ3c.crl (hash: L/LWNNb112DUeRY5QGata9uwHaEXrHo0IRVThUvRv8Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/c0f652-5c1c-4afa-86f7-98d613b8ddbd/1/MWxm5C6ILUAfr6K_pCru56dEZ3c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/c0f652-5c1c-4afa-86f7-98d613b8ddbd/1/MWxm5C6ILUAfr6K_pCru56dEZ3c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MWxm5C6ILUAfr6K_pCru56dEZ3c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 04:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:ba:7d:27:60:79:a9:68:29:e9:46:e8:ec:78:d3:15:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=316c66e42e882d401fafa2bfa42aeee7a7446777
        Validity
            Not Before: Jun 29 07:00:53 2025 GMT
            Not After : Jun 30 07:00:53 2025 GMT
        Subject: CN=7d19f45ef6f0abbcb5f4d77c97b6ca75af7bca76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ef:40:a2:7a:9e:1a:02:9b:fc:06:1a:82:12:
                    2a:43:5e:cc:91:8d:5c:09:a5:70:d6:a8:14:66:46:
                    bb:cf:38:1e:74:cb:23:9d:9d:57:6a:ed:7e:cf:6d:
                    ff:ea:bd:f5:30:50:a7:e3:33:93:74:bf:0c:86:45:
                    5b:a8:51:39:2c:ac:32:3f:21:fe:4f:09:e2:65:93:
                    55:c7:a8:37:da:b4:35:d8:ec:cd:40:9c:71:55:95:
                    4d:88:ba:47:63:88:66:74:fa:bc:8c:dc:ca:bf:ae:
                    25:ed:fa:7f:d6:e1:b8:87:cd:46:1f:73:6b:cc:6c:
                    57:41:2d:8f:39:f7:5f:f2:9f:cf:b0:51:81:91:7d:
                    8a:6b:70:df:93:66:dc:ef:80:06:87:6b:8e:e6:b9:
                    55:36:01:6e:11:be:5b:fd:00:cf:ef:54:00:ae:57:
                    58:ed:a4:8c:93:f3:42:67:dd:b8:99:15:15:ef:85:
                    a2:e9:a5:79:a1:26:50:49:fe:d8:12:6f:e0:58:6d:
                    a7:b4:3b:36:29:50:27:4e:36:c2:a2:7f:8e:f6:9e:
                    15:66:fd:5b:17:79:ca:5b:78:8d:56:54:bd:a9:38:
                    9f:ef:54:63:69:b7:ce:f0:55:c5:52:94:3a:31:67:
                    44:ac:6d:11:c2:23:c4:f7:41:af:11:d8:d8:7c:49:
                    49:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:19:F4:5E:F6:F0:AB:BC:B5:F4:D7:7C:97:B6:CA:75:AF:7B:CA:76
            X509v3 Authority Key Identifier:
                keyid:31:6C:66:E4:2E:88:2D:40:1F:AF:A2:BF:A4:2A:EE:E7:A7:44:67:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MWxm5C6ILUAfr6K_pCru56dEZ3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c0f652-5c1c-4afa-86f7-98d613b8ddbd/1/MWxm5C6ILUAfr6K_pCru56dEZ3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c0f652-5c1c-4afa-86f7-98d613b8ddbd/1/MWxm5C6ILUAfr6K_pCru56dEZ3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:2a:45:e9:38:bb:cb:36:35:2c:2b:7b:74:04:b4:22:be:48:
         cd:33:49:8b:94:72:bf:58:b9:fd:f0:97:19:47:f8:54:a1:71:
         40:23:2a:34:31:ee:e1:94:8f:09:58:32:34:11:69:91:d3:fc:
         ab:bf:db:b4:41:8e:35:d0:31:6d:c8:dd:3c:b7:eb:28:b8:67:
         3c:22:85:a9:06:09:36:f3:fc:c1:0d:fc:80:ee:53:86:d4:6a:
         cf:31:b6:e0:4a:1e:29:33:7a:92:46:21:c5:ef:c3:ea:db:37:
         21:bb:c2:58:ac:11:b2:f1:8d:73:19:0e:63:7f:39:69:23:4e:
         75:91:0f:02:89:dd:eb:8b:87:52:df:55:52:66:1a:14:91:45:
         4d:b9:7e:7a:f0:5e:3d:6c:57:97:ab:1e:2f:38:30:31:30:a0:
         2f:d6:cd:56:ea:a1:ed:25:83:6a:0e:4c:b5:5a:13:09:a8:fe:
         59:a2:11:e1:7f:53:1a:b1:1b:a3:70:b7:57:e3:38:e7:d6:31:
         17:39:c9:3f:9d:5c:ea:31:b3:5a:f7:67:e5:e3:e4:c2:cb:44:
         00:c3:02:5d:85:23:af:06:db:01:63:b8:1b:71:b2:9f:24:6a:
         fb:4e:21:a6:7c:26:ee:84:8a:67:b8:07:dc:4b:03:5b:12:15:
         f7:c6:81:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:24:56 2025 by rpki-client