Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/e1c29a-a936-490b-9607-6f39cc6722c2/1/SBVxyrg7M5yGCR7HR8ITX85PZYc.mft
File:                     SBVxyrg7M5yGCR7HR8ITX85PZYc.mft (raw, json)
Hash identifier:          ToIQ9hBk9HRvF9zXsolCxamOJY4uf5lBb20P29G99gA=
Subject key identifier:   7F:2F:6A:78:F2:53:E1:F3:3F:C5:CA:E9:62:86:04:3B:CA:7E:08:69
Authority key identifier: 48:15:71:CA:B8:3B:33:9C:86:09:1E:C7:47:C2:13:5F:CE:4F:65:87
Certificate issuer:       /CN=481571cab83b339c86091ec747c2135fce4f6587
Certificate serial:       0197B74528E74A926A6D3CB301B0380FEB42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SBVxyrg7M5yGCR7HR8ITX85PZYc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/e1c29a-a936-490b-9607-6f39cc6722c2/1/SBVxyrg7M5yGCR7HR8ITX85PZYc.mft
Manifest number:          1459
Signing time:             Sat 28 Jun 2025 16:00:52 +0000
Manifest this update:     Sat 28 Jun 2025 16:00:52 +0000
Manifest next update:     Sun 29 Jun 2025 16:00:52 +0000
Files and hashes:         1: SBVxyrg7M5yGCR7HR8ITX85PZYc.crl (hash: zCfhuFZvBFOtPv+UT6OE3T0/5ozZ92V31zFwlgW56xA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/e1c29a-a936-490b-9607-6f39cc6722c2/1/SBVxyrg7M5yGCR7HR8ITX85PZYc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/e1c29a-a936-490b-9607-6f39cc6722c2/1/SBVxyrg7M5yGCR7HR8ITX85PZYc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SBVxyrg7M5yGCR7HR8ITX85PZYc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:28:e7:4a:92:6a:6d:3c:b3:01:b0:38:0f:eb:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481571cab83b339c86091ec747c2135fce4f6587
        Validity
            Not Before: Jun 28 16:00:52 2025 GMT
            Not After : Jun 29 16:00:52 2025 GMT
        Subject: CN=7f2f6a78f253e1f33fc5cae96286043bca7e0869
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:27:3d:33:03:b1:86:33:03:fa:da:9d:65:8f:
                    f1:e5:a6:c3:f9:dc:83:4c:20:14:3a:c9:98:65:04:
                    1f:14:f2:38:1a:5b:aa:dc:27:e1:57:af:87:6b:fe:
                    dc:78:2e:44:20:c7:7a:2c:f3:21:87:5d:a1:3c:b4:
                    f2:33:35:f3:fa:42:d7:1f:e1:41:cb:77:ff:d7:eb:
                    e1:5b:e0:aa:57:54:6f:5d:06:9d:04:b1:8f:f9:19:
                    8d:fc:53:bb:5a:35:45:b3:af:e1:94:41:3a:d1:da:
                    dd:ac:4e:c7:cb:95:1c:84:6a:65:95:44:53:f6:9f:
                    71:a8:08:ad:85:37:87:a8:43:3e:bd:d0:1b:92:57:
                    5f:7c:26:9c:7a:c3:c5:bc:7d:6e:fd:0c:02:ce:91:
                    a2:59:48:f6:d6:f1:be:40:66:f0:ec:01:aa:19:ba:
                    41:29:cf:47:25:0b:b5:af:83:45:3e:20:59:e3:9c:
                    1f:18:a1:b2:e7:01:5f:f8:a6:2e:4f:07:bb:a3:34:
                    04:e7:fe:a5:42:2a:aa:a7:b3:42:d2:78:61:88:b5:
                    94:2c:3d:90:ac:86:5b:7c:c7:cc:16:11:df:df:db:
                    bf:a8:d2:cc:d2:f7:6b:98:bb:a7:2d:0b:f1:7b:ef:
                    b6:d6:fb:c1:8f:51:34:26:50:83:8d:51:82:75:c3:
                    7d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:2F:6A:78:F2:53:E1:F3:3F:C5:CA:E9:62:86:04:3B:CA:7E:08:69
            X509v3 Authority Key Identifier:
                keyid:48:15:71:CA:B8:3B:33:9C:86:09:1E:C7:47:C2:13:5F:CE:4F:65:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBVxyrg7M5yGCR7HR8ITX85PZYc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e1c29a-a936-490b-9607-6f39cc6722c2/1/SBVxyrg7M5yGCR7HR8ITX85PZYc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e1c29a-a936-490b-9607-6f39cc6722c2/1/SBVxyrg7M5yGCR7HR8ITX85PZYc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:97:da:4f:42:6a:31:d4:ce:10:9b:9f:60:58:a0:5b:dd:37:
         f9:c8:55:fe:d8:56:09:7f:b6:b0:f3:8f:43:34:65:df:57:dc:
         43:dd:ab:a4:79:09:7d:cc:22:ce:1f:d7:af:35:fd:41:53:b8:
         f7:3b:69:1e:6e:28:b1:a8:b7:18:b4:40:58:35:a4:4c:dc:ae:
         24:cd:96:bb:ba:14:4d:ca:ac:97:ef:46:bf:56:a4:38:89:37:
         07:e8:a8:aa:5f:ad:d5:70:d5:6a:cd:7d:83:f5:95:a7:63:92:
         d9:60:07:36:fd:1c:65:99:39:d7:33:c8:3b:33:a6:5f:d2:ef:
         83:29:cc:49:79:90:17:aa:db:ed:15:3d:bd:44:ea:d3:b7:e0:
         be:e6:c4:22:0f:73:90:24:a9:08:60:f0:0e:74:c8:77:e8:64:
         86:1b:41:1f:2f:64:ec:9f:b6:16:1e:11:76:bf:ef:78:f8:df:
         4b:a6:e8:46:9e:0b:77:31:ff:04:28:96:95:ee:40:97:73:03:
         9f:55:87:32:b0:af:55:d8:b5:e5:62:c4:ad:ab:bf:8f:c8:58:
         6a:96:6b:d2:32:a3:40:0a:28:8b:50:e8:eb:a5:f3:75:dd:68:
         17:7f:a2:2b:40:f1:4f:6c:f5:95:83:7d:af:c0:96:3d:6b:1d:
         67:b6:23:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:48:02 2025 by rpki-client