Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/bdd92e-3b11-416f-ae93-46ea656bf389/1/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.mft
File:                     l7bLSIQc5Rmyg1nK8bzjQOM2ge8.mft (raw, json)
Hash identifier:          8pacH0iTL+Y6KFBG4RaFGbaK2dh1AfBN5QPoVNEKojw=
Subject key identifier:   61:6E:2C:6F:A2:00:DE:2B:88:2F:CF:60:2F:92:50:5B:15:56:36:F1
Authority key identifier: 97:B6:CB:48:84:1C:E5:19:B2:83:59:CA:F1:BC:E3:40:E3:36:81:EF
Certificate issuer:       /CN=97b6cb48841ce519b28359caf1bce340e33681ef
Certificate serial:       0197B77C2F40AA76EE67D97860BF168A36C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/bdd92e-3b11-416f-ae93-46ea656bf389/1/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.mft
Manifest number:          0760
Signing time:             Sat 28 Jun 2025 17:00:58 +0000
Manifest this update:     Sat 28 Jun 2025 17:00:58 +0000
Manifest next update:     Sun 29 Jun 2025 17:00:58 +0000
Files and hashes:         1: l7bLSIQc5Rmyg1nK8bzjQOM2ge8.crl (hash: Y1uztdbyRz/9/KT7stc+ZmaIxmnb453JAmUuJZSiGR0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/bdd92e-3b11-416f-ae93-46ea656bf389/1/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/bdd92e-3b11-416f-ae93-46ea656bf389/1/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:2f:40:aa:76:ee:67:d9:78:60:bf:16:8a:36:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97b6cb48841ce519b28359caf1bce340e33681ef
        Validity
            Not Before: Jun 28 17:00:58 2025 GMT
            Not After : Jun 29 17:00:58 2025 GMT
        Subject: CN=616e2c6fa200de2b882fcf602f92505b155636f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:be:30:a6:6d:de:d5:c0:99:ec:6b:3f:ac:76:
                    f8:8c:36:6f:f9:be:b1:6a:2c:7b:1a:e7:c4:c6:f2:
                    f2:39:58:86:27:46:66:64:b7:e9:93:0a:13:e7:15:
                    51:56:5d:02:b1:6b:6d:c4:5d:9c:12:32:7f:7f:ab:
                    80:2c:38:6f:79:91:49:34:d6:3f:4e:4b:df:3d:47:
                    cb:59:37:d2:79:de:fc:97:1c:b2:a8:19:dd:97:28:
                    10:1c:ae:46:4a:1d:95:34:cb:8f:d1:ca:fa:c9:dc:
                    21:b6:ba:b4:45:4f:bc:1c:7f:59:10:b7:77:77:a1:
                    56:44:99:e0:37:6b:df:6b:a0:47:f5:55:9c:48:2f:
                    95:de:f9:50:e4:bf:73:3d:8f:44:ca:c1:2a:19:31:
                    f8:d8:46:54:5d:d8:45:27:4a:49:64:4c:e9:5f:57:
                    20:aa:81:81:ad:87:de:2f:37:42:fc:e2:04:fc:2d:
                    7b:67:50:2a:e0:90:58:3d:71:de:c6:d0:b3:94:3a:
                    38:3b:97:0a:9b:82:9d:d7:45:a0:d1:aa:6c:8a:1e:
                    eb:50:da:cc:00:d1:16:81:2f:a6:bb:3b:dd:61:33:
                    9c:a9:d5:ef:d0:d6:38:4d:c3:01:8f:9a:c0:5a:9c:
                    03:fe:60:b5:f6:ef:10:4d:da:ea:fe:a3:b5:a6:73:
                    0d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:6E:2C:6F:A2:00:DE:2B:88:2F:CF:60:2F:92:50:5B:15:56:36:F1
            X509v3 Authority Key Identifier:
                keyid:97:B6:CB:48:84:1C:E5:19:B2:83:59:CA:F1:BC:E3:40:E3:36:81:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/bdd92e-3b11-416f-ae93-46ea656bf389/1/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/bdd92e-3b11-416f-ae93-46ea656bf389/1/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:1d:cf:dd:1b:a3:98:5a:9f:dc:08:68:4e:81:d0:cd:26:74:
         be:1b:7d:06:bb:83:75:29:50:c6:07:2b:5e:a5:dc:03:fa:d7:
         1d:b1:a5:95:41:82:bd:d0:ed:17:70:e9:24:0a:f4:b5:b1:0e:
         f3:86:bc:b4:67:c2:a7:64:5d:2d:6c:4b:fb:01:dc:4c:02:25:
         7a:07:af:a4:57:b1:7d:f9:ac:c5:5a:93:ae:ba:c5:0a:d4:cd:
         33:2c:c2:41:09:10:5b:4f:c0:c8:eb:a2:7f:b3:33:ef:42:40:
         5c:f7:54:30:2a:56:ce:67:17:ee:87:71:41:86:ee:45:aa:e8:
         1d:4e:fc:53:30:49:d6:63:46:c1:3c:ef:5e:d8:dd:44:30:ab:
         02:dc:74:70:51:ed:52:e3:92:29:39:15:05:0d:d8:e0:76:95:
         fa:bf:78:73:17:6f:f5:aa:21:da:df:e7:a2:7b:2a:64:4c:d9:
         17:38:b7:41:0b:81:51:b3:cf:96:04:79:03:05:0c:c4:ec:61:
         a0:fc:67:4e:25:97:a3:03:b8:80:9b:bb:30:4d:d0:24:f3:e0:
         61:cd:87:6e:60:dd:01:69:f3:a7:d8:d9:fa:11:f0:ff:c5:2b:
         32:63:1f:9c:2b:64:c6:d0:0e:e5:28:af:a2:90:9b:e1:0a:87:
         91:15:47:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:17:25 2025 by rpki-client