Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft
File:                     1-cEFknmJ7EHAiQOtjNVqidrovl0.mft (raw, json)
Hash identifier:          BgvQhhZx31oqKSCN5b6+jUWX+cp5niwPl3VpjTINCUo=
Subject key identifier:   26:3E:A6:6E:7F:6D:75:5A:C4:E1:79:25:DA:45:14:91:A1:42:00:8D
Authority key identifier: F9:C1:05:92:79:89:EC:41:C0:89:03:AD:8C:D5:6A:89:DA:E8:BE:5D
Certificate issuer:       /CN=f9c105927989ec41c08903ad8cd56a89dae8be5d
Certificate serial:       0197B88FF608F1440A415A980F41A8FE8BAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-cEFknmJ7EHAiQOtjNVqidrovl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft
Manifest number:          15B3
Signing time:             Sat 28 Jun 2025 22:02:11 +0000
Manifest this update:     Sat 28 Jun 2025 22:02:11 +0000
Manifest next update:     Sun 29 Jun 2025 22:02:11 +0000
Files and hashes:         1: 1-cEFknmJ7EHAiQOtjNVqidrovl0.crl (hash: op8+7TQPOa2vwu7ZiWlAm3ydDh4MuPpFs28oZYpOaZQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-cEFknmJ7EHAiQOtjNVqidrovl0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:8f:f6:08:f1:44:0a:41:5a:98:0f:41:a8:fe:8b:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9c105927989ec41c08903ad8cd56a89dae8be5d
        Validity
            Not Before: Jun 28 22:02:11 2025 GMT
            Not After : Jun 29 22:02:11 2025 GMT
        Subject: CN=263ea66e7f6d755ac4e17925da451491a142008d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:20:97:a2:50:51:80:3a:9c:ff:07:cb:12:09:
                    bf:6b:d1:d9:f3:a8:c5:7b:fb:bb:66:54:af:3a:95:
                    8b:0b:45:06:8c:e0:b2:6e:78:4a:f3:12:02:78:79:
                    f6:93:2c:e7:c7:d6:a0:df:63:0a:d4:ca:3a:2e:0f:
                    94:72:d1:82:5e:e3:32:a7:9c:12:e4:ea:8f:3d:a4:
                    cc:73:21:77:a4:6a:ab:4e:45:e2:0b:9a:a9:ed:46:
                    d1:ba:43:7b:05:f8:c9:b3:bc:72:c8:3c:dd:b3:de:
                    34:32:62:8a:8b:57:d8:2b:fd:b4:2f:8b:32:e2:8a:
                    59:04:79:49:69:f2:a2:4e:89:ef:a4:ad:42:a2:d6:
                    1d:66:68:32:b3:7b:73:37:42:4d:55:b1:57:72:41:
                    da:e7:a2:27:40:03:8c:6e:55:6f:a4:3a:ea:12:b7:
                    29:ae:c9:40:29:e8:e2:80:c8:f6:23:5e:de:1e:43:
                    9e:22:3f:5d:49:59:07:6c:f1:b5:58:aa:a8:dc:bc:
                    b7:d7:1f:65:d3:8d:2f:f0:a7:de:52:36:79:b5:fc:
                    c7:66:1b:bd:b2:74:1b:fa:c3:77:95:bb:1c:6b:0f:
                    29:3d:41:27:db:7b:50:75:9f:40:04:c4:f4:de:51:
                    e5:50:ad:06:d5:2e:f7:75:53:6b:2c:3a:73:9a:b2:
                    c6:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:3E:A6:6E:7F:6D:75:5A:C4:E1:79:25:DA:45:14:91:A1:42:00:8D
            X509v3 Authority Key Identifier:
                keyid:F9:C1:05:92:79:89:EC:41:C0:89:03:AD:8C:D5:6A:89:DA:E8:BE:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cEFknmJ7EHAiQOtjNVqidrovl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:51:bf:e5:48:16:87:2d:69:fb:23:7f:2d:88:cf:3f:07:12:
         2d:8b:92:c8:64:91:98:df:4e:aa:31:da:73:e0:7f:88:69:65:
         27:52:86:ad:5a:04:83:7c:d4:df:c5:59:fd:b6:8f:16:ca:d7:
         11:2a:01:d3:86:56:f9:07:f1:a3:db:7e:27:70:92:65:61:26:
         25:42:00:a4:e9:28:27:3d:61:17:f2:81:db:f0:ce:a7:38:f9:
         0b:01:12:c9:a1:55:98:98:8e:b9:eb:dd:4a:b6:78:b3:da:44:
         f9:60:d2:9e:38:e4:c6:36:6b:50:3e:92:d9:ff:c4:f6:c1:80:
         63:70:e2:0e:92:15:0b:ee:9a:b7:1a:b8:f8:6d:72:b0:d1:5b:
         a2:77:14:5e:11:a5:db:a6:78:cb:b9:e5:65:0f:6e:09:98:c1:
         49:11:8d:71:98:b6:f9:4f:79:98:aa:a5:cf:95:f3:1e:ea:ba:
         c9:a5:47:7e:e3:28:9c:e6:d0:1d:22:d3:cc:68:0d:b6:7c:e6:
         10:69:c0:24:24:9d:fb:15:7f:ec:7f:0c:f6:92:2c:3a:d2:95:
         fa:4d:51:24:17:fc:30:f2:2b:f0:9a:1e:39:5e:ed:68:6d:14:
         7e:e3:6d:de:18:38:99:92:2e:4c:e5:9d:6b:66:64:f0:7e:76:
         66:fd:f8:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:21:08 2025 by rpki-client