Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/623aeb-0fc9-403a-8d35-b04cd8a73afc/1/_s7aKggEQpcq6nJV-LM6dg7LMcs.mft
File:                     _s7aKggEQpcq6nJV-LM6dg7LMcs.mft (raw, json)
Hash identifier:          4rUn48ZuxgWuhmGiZmQUsoEGvhUcuka+VrmxTMzJTpg=
Subject key identifier:   C4:4B:10:2C:2D:96:7E:59:AC:7E:0B:D9:B8:3B:76:01:2E:99:EE:0B
Authority key identifier: FE:CE:DA:2A:08:04:42:97:2A:EA:72:55:F8:B3:3A:76:0E:CB:31:CB
Certificate issuer:       /CN=feceda2a080442972aea7255f8b33a760ecb31cb
Certificate serial:       0197B6A0614E1EB03A8D4B9E2B80B6C7909D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_s7aKggEQpcq6nJV-LM6dg7LMcs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/623aeb-0fc9-403a-8d35-b04cd8a73afc/1/_s7aKggEQpcq6nJV-LM6dg7LMcs.mft
Manifest number:          0BBE
Signing time:             Sat 28 Jun 2025 13:00:53 +0000
Manifest this update:     Sat 28 Jun 2025 13:00:53 +0000
Manifest next update:     Sun 29 Jun 2025 13:00:53 +0000
Files and hashes:         1: _s7aKggEQpcq6nJV-LM6dg7LMcs.crl (hash: ILSKFxFoxsZe5HqHNDKIMrxtc2jf5XN2EooBmQHc6+Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/623aeb-0fc9-403a-8d35-b04cd8a73afc/1/_s7aKggEQpcq6nJV-LM6dg7LMcs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/623aeb-0fc9-403a-8d35-b04cd8a73afc/1/_s7aKggEQpcq6nJV-LM6dg7LMcs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_s7aKggEQpcq6nJV-LM6dg7LMcs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a0:61:4e:1e:b0:3a:8d:4b:9e:2b:80:b6:c7:90:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=feceda2a080442972aea7255f8b33a760ecb31cb
        Validity
            Not Before: Jun 28 13:00:53 2025 GMT
            Not After : Jun 29 13:00:53 2025 GMT
        Subject: CN=c44b102c2d967e59ac7e0bd9b83b76012e99ee0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:00:d5:d9:f1:dc:5f:37:69:cf:bb:18:a6:0f:
                    11:f1:7e:5c:84:47:33:f1:f2:90:fa:20:86:4d:13:
                    db:b0:fd:8a:96:4c:49:24:71:ca:5d:f0:ef:c2:7a:
                    2e:22:1d:b9:f8:d9:e9:25:f1:88:54:22:08:8b:d1:
                    6f:b1:77:ff:22:b7:82:0a:56:01:27:ab:d6:87:19:
                    42:20:91:5d:86:c8:19:39:27:cc:58:d2:19:ec:01:
                    24:7b:b3:fc:f2:46:97:ba:78:ea:e3:44:9a:e4:2f:
                    61:d7:c2:bf:d9:8a:b5:96:d4:be:9e:ba:76:49:8e:
                    b0:7f:ac:67:b2:34:45:5e:17:96:61:62:ca:ed:42:
                    cd:de:e1:97:0a:f0:fc:0f:f2:3e:b5:bf:57:49:ba:
                    62:cc:8c:c4:0f:7b:a3:4e:5e:20:0c:34:97:de:c3:
                    bc:44:e9:ab:a7:3a:a0:a7:9e:5a:9a:15:ca:cd:ca:
                    c0:31:73:48:f5:34:37:98:53:e0:78:55:a7:6d:4c:
                    11:ff:63:dd:8d:2a:4b:59:68:62:85:f1:9a:fb:cc:
                    60:24:a1:94:59:ff:ba:d8:07:21:d7:0c:a0:8a:dd:
                    a5:d3:c1:c4:0c:f9:12:7c:9e:4b:51:02:87:9b:15:
                    63:3a:83:fa:bd:bc:1e:d7:fc:2a:82:c6:cb:ec:bb:
                    49:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:4B:10:2C:2D:96:7E:59:AC:7E:0B:D9:B8:3B:76:01:2E:99:EE:0B
            X509v3 Authority Key Identifier:
                keyid:FE:CE:DA:2A:08:04:42:97:2A:EA:72:55:F8:B3:3A:76:0E:CB:31:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_s7aKggEQpcq6nJV-LM6dg7LMcs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/623aeb-0fc9-403a-8d35-b04cd8a73afc/1/_s7aKggEQpcq6nJV-LM6dg7LMcs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/623aeb-0fc9-403a-8d35-b04cd8a73afc/1/_s7aKggEQpcq6nJV-LM6dg7LMcs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:0d:ac:9f:3e:fe:03:94:40:d8:5c:62:7e:16:da:97:46:b1:
         65:7e:47:43:88:ba:76:5d:d1:e3:11:23:15:ff:9f:c0:bc:bb:
         2f:83:83:e8:b5:2f:69:5a:4e:56:77:1e:64:2d:59:bc:70:96:
         7d:41:4a:d9:0a:71:75:83:58:a3:76:97:78:d8:35:b9:c1:af:
         8c:7d:00:dc:9d:2a:57:63:a3:2f:51:ce:8d:e2:2b:da:99:cf:
         6a:3e:7d:a8:d1:f1:f0:ba:47:18:51:f1:44:5a:70:3d:a2:45:
         ec:0d:79:91:ec:82:96:75:97:39:ae:c4:b6:ac:69:01:f1:a0:
         ca:42:cd:c3:f4:29:f3:48:28:28:58:bb:61:f6:75:04:fd:fa:
         af:73:ff:18:98:51:a0:94:5c:23:c9:9c:0c:85:1f:00:a4:80:
         f3:ae:83:06:00:6b:f4:c2:ec:d4:ba:39:0f:41:c3:9e:dc:6c:
         c1:52:c9:ab:cb:07:f0:73:73:75:ad:f7:d6:eb:33:f0:94:ee:
         a3:83:e1:36:26:61:16:b5:20:db:14:5b:5b:d2:22:df:bc:9f:
         49:0d:73:55:9d:43:08:e4:41:87:bf:35:20:0e:10:37:6c:6d:
         f4:40:c6:ca:45:74:1b:78:20:ac:a3:14:29:2a:a0:e0:1d:77:
         0c:1f:01:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:40:49 2025 by rpki-client