Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.mft
File:                     91sCopx2blsTs-sXapccEt3h1M4.mft (raw, json)
Hash identifier:          COXbxgX8CcPUuRpXDx/ZwIKMQ5PI2u3xM+qmSsZ56OA=
Subject key identifier:   AB:D0:4E:0F:86:8A:73:00:5A:6F:05:AA:FA:ED:BE:85:BC:93:DB:31
Authority key identifier: F7:5B:02:A2:9C:76:6E:5B:13:B3:EB:17:6A:97:1C:12:DD:E1:D4:CE
Certificate issuer:       /CN=f75b02a29c766e5b13b3eb176a971c12dde1d4ce
Certificate serial:       0197B7B2EF80CD6C778E4BA3490BCF1AF95B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/91sCopx2blsTs-sXapccEt3h1M4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.mft
Manifest number:          113C
Signing time:             Sat 28 Jun 2025 18:00:46 +0000
Manifest this update:     Sat 28 Jun 2025 18:00:46 +0000
Manifest next update:     Sun 29 Jun 2025 18:00:46 +0000
Files and hashes:         1: 91sCopx2blsTs-sXapccEt3h1M4.crl (hash: NF0MguoBicTD3dlBNqMBLa9vLE1iAjFSm0l6xAzMr4s=)
                          2: IKYkPycoZ16me6Kb0OaEhELdyLo.roa (hash: Um/+K1DsE/fHN8bVJfVKmH+mN7B9+NKyvrFzBu4jUT0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/91sCopx2blsTs-sXapccEt3h1M4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:b2:ef:80:cd:6c:77:8e:4b:a3:49:0b:cf:1a:f9:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f75b02a29c766e5b13b3eb176a971c12dde1d4ce
        Validity
            Not Before: Jun 28 18:00:46 2025 GMT
            Not After : Jun 29 18:00:46 2025 GMT
        Subject: CN=abd04e0f868a73005a6f05aafaedbe85bc93db31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ef:db:bc:9b:e0:1f:2e:c6:c9:ce:2e:28:d9:
                    0e:22:9d:b8:c2:b0:3d:ba:e0:c2:3e:d9:cf:8b:a1:
                    5e:30:c8:7b:4b:47:95:93:77:da:06:38:c9:99:e9:
                    9f:94:e3:0b:82:f6:74:d3:56:e0:d6:0e:6a:ff:f4:
                    f2:31:2f:91:b3:9e:33:d4:e6:a6:86:8d:4b:98:f5:
                    e3:b6:0f:37:a3:e9:17:3d:fe:79:91:bf:f2:49:c0:
                    7a:8a:83:68:99:54:40:81:c7:17:78:3d:11:c4:56:
                    41:c2:10:1d:d1:e9:ff:82:c1:ee:1f:84:94:53:f1:
                    f2:3a:8e:d5:c3:ee:bf:c3:2f:c2:1b:1f:f8:c0:46:
                    1d:79:73:94:fe:d5:37:24:90:cc:21:7f:6a:3e:26:
                    f1:dc:8b:7e:3a:c2:b2:f1:9d:dc:f9:a3:6b:08:b5:
                    23:33:96:56:fc:30:cf:0b:4d:54:25:af:50:73:4e:
                    56:54:98:9f:b5:31:ee:97:a0:64:4a:9f:41:c9:b4:
                    22:2f:ac:14:63:26:30:7c:a4:f8:fb:a9:68:a5:0a:
                    1d:c3:bc:fa:7f:0d:7f:ec:bc:98:27:b1:4f:fc:b6:
                    ab:7e:0f:46:b2:78:44:90:60:af:c9:ad:5a:ec:80:
                    1b:d0:ae:1b:9a:18:a5:67:63:b8:16:3f:9b:89:fb:
                    24:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:D0:4E:0F:86:8A:73:00:5A:6F:05:AA:FA:ED:BE:85:BC:93:DB:31
            X509v3 Authority Key Identifier:
                keyid:F7:5B:02:A2:9C:76:6E:5B:13:B3:EB:17:6A:97:1C:12:DD:E1:D4:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/91sCopx2blsTs-sXapccEt3h1M4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:8d:04:3e:86:2c:de:2d:eb:db:95:cc:f3:1f:b4:01:df:08:
         5d:46:9b:86:53:b9:b2:e5:9f:58:23:6d:72:99:12:77:0f:4b:
         69:04:69:2a:37:1c:7e:2c:48:51:9d:0d:61:9d:43:da:f1:9c:
         90:cd:22:1d:f3:cc:65:00:41:95:08:19:97:bb:d0:fb:cc:f9:
         90:48:3b:b5:d9:a8:b5:96:e2:cf:e4:60:13:86:e2:6b:1c:cc:
         7b:6e:93:f2:a1:8a:86:0c:22:20:0c:7f:bb:d1:89:04:bb:58:
         52:3b:64:5a:7e:e9:29:47:78:b7:63:ba:18:02:0d:dd:53:fd:
         4c:bf:71:85:3d:e5:b7:24:e8:85:41:52:94:5e:b8:f2:a9:62:
         71:20:8a:75:02:cf:f0:0c:05:02:97:cd:0e:4d:29:76:b3:c1:
         c9:be:81:7e:eb:67:61:8e:6c:07:1f:46:2b:64:e8:a5:94:fa:
         65:26:08:06:d7:a4:a4:c1:c6:f9:cf:82:a6:ea:59:bc:05:6e:
         c2:21:18:9c:3d:9c:c6:d6:dc:bd:93:24:36:57:ff:f2:8b:2b:
         98:60:40:47:50:6a:b3:14:19:a7:1d:9c:e4:5d:3b:3d:4b:af:
         93:c8:8f:ea:59:6f:e4:bc:27:85:36:f6:0a:40:f4:fe:e7:b8:
         f8:94:75:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:04:29 2025 by rpki-client