Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.mft
File:                     AoDVqrjuctqjUocfunLspFGnDtw.mft (raw, json)
Hash identifier:          NSWwa6mewmdt2osqvuY/IaeB8t2RtRke9qEUJYb9Gkk=
Subject key identifier:   16:1A:D2:6C:EA:9F:A7:EA:3B:06:DF:5C:D2:69:24:B2:09:20:07:C2
Authority key identifier: 02:80:D5:AA:B8:EE:72:DA:A3:52:87:1F:BA:72:EC:A4:51:A7:0E:DC
Certificate issuer:       /CN=0280d5aab8ee72daa352871fba72eca451a70edc
Certificate serial:       0197B7EA5FC7F7437E35820592DE96F83343
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AoDVqrjuctqjUocfunLspFGnDtw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.mft
Manifest number:          086F
Signing time:             Sat 28 Jun 2025 19:01:19 +0000
Manifest this update:     Sat 28 Jun 2025 19:01:19 +0000
Manifest next update:     Sun 29 Jun 2025 19:01:19 +0000
Files and hashes:         1: AoDVqrjuctqjUocfunLspFGnDtw.crl (hash: gchFiDwuahbqizPJsl/9wHf3sZ8Wlz4/VTyqIRUyuOo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AoDVqrjuctqjUocfunLspFGnDtw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:ea:5f:c7:f7:43:7e:35:82:05:92:de:96:f8:33:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0280d5aab8ee72daa352871fba72eca451a70edc
        Validity
            Not Before: Jun 28 19:01:19 2025 GMT
            Not After : Jun 29 19:01:19 2025 GMT
        Subject: CN=161ad26cea9fa7ea3b06df5cd26924b2092007c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f9:c9:76:1a:51:a2:b7:1c:46:0f:3d:52:d1:
                    b5:a5:5a:6c:8e:10:fe:e6:f1:e3:47:d5:0f:db:ac:
                    73:aa:9a:ee:6c:d3:a6:c4:5e:3e:96:1b:47:b4:da:
                    6a:12:81:52:bc:96:7e:1f:53:04:02:60:34:58:12:
                    98:ec:92:4a:d4:8f:d5:a5:c6:84:3c:db:c3:32:b3:
                    c6:9f:18:e0:2b:e5:88:71:a3:41:c9:1e:20:7c:6e:
                    0d:8a:8c:13:c6:bd:6a:f9:2c:fa:6c:d8:37:34:88:
                    12:ac:79:2d:08:ba:85:94:1b:7e:f3:00:45:ee:d2:
                    d3:ce:07:73:93:b9:44:f5:1e:ed:4c:fa:6a:08:57:
                    bc:9b:ae:2e:ea:2f:67:83:6c:a7:f1:d6:40:51:46:
                    86:ad:7f:c6:2c:21:2a:35:d6:87:0b:9c:41:40:66:
                    bc:b6:0e:df:b8:85:5e:d4:51:26:d9:54:52:6f:6b:
                    f9:e0:5d:6d:18:89:f8:21:49:7a:6e:53:e0:b1:38:
                    78:f0:f9:63:3b:a3:57:a5:83:d7:af:5a:d9:d2:af:
                    f3:0a:62:b9:3c:97:25:64:11:31:e0:cd:ca:f0:a2:
                    41:42:0f:ad:1e:18:29:96:91:55:b7:3a:35:d6:1b:
                    a1:41:45:12:e3:2b:3f:15:d1:5b:22:df:47:06:b6:
                    ee:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:1A:D2:6C:EA:9F:A7:EA:3B:06:DF:5C:D2:69:24:B2:09:20:07:C2
            X509v3 Authority Key Identifier:
                keyid:02:80:D5:AA:B8:EE:72:DA:A3:52:87:1F:BA:72:EC:A4:51:A7:0E:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoDVqrjuctqjUocfunLspFGnDtw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:17:f1:19:bc:93:63:8c:39:84:e5:23:4f:2b:98:96:a3:58:
         5f:80:33:b8:42:09:d9:8c:12:1a:92:e0:6e:72:21:1d:0f:0a:
         f3:79:ec:1a:ba:08:2c:6b:50:df:b5:50:f7:a0:db:cd:96:01:
         a2:78:2a:a9:9b:38:92:ab:32:5d:68:6f:9a:a1:2f:00:92:04:
         be:d4:8e:c2:33:4b:9c:46:d5:0e:b1:80:92:4e:85:42:7e:da:
         aa:14:69:e7:37:a9:84:05:da:90:e9:31:1a:dd:1c:f2:ae:00:
         30:72:95:a6:c9:38:21:92:c6:4c:5a:80:9d:f1:77:4c:a9:1b:
         96:d5:15:98:5b:ff:bc:0f:85:ad:00:17:07:a7:3d:d7:a1:20:
         d6:af:a4:8d:61:22:57:d6:f0:ea:ad:1f:2f:d1:e6:c5:2d:ed:
         9d:a8:c2:a1:ce:68:7f:5f:3e:84:5a:be:bc:33:6f:34:ac:8d:
         ff:17:83:b5:20:18:eb:e4:48:c3:68:7b:f6:f5:d6:af:22:97:
         42:93:02:5d:81:f4:ca:db:6d:10:5a:ce:89:27:51:6f:5b:72:
         bf:86:b6:44:54:db:3c:61:d9:3a:7c:a6:c8:f7:93:0d:ef:74:
         d2:74:51:11:d5:43:51:ec:f6:aa:3b:4c:52:42:09:dd:45:31:
         cf:f5:82:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:17:35 2025 by rpki-client