Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/992bac-27c8-44fc-a43f-7e384aa10621/1/R0APQz0S1oqeufakK688jFKVyFI.mft
File:                     R0APQz0S1oqeufakK688jFKVyFI.mft (raw, json)
Hash identifier:          F2j0/t+v68DoBQNUpfzDfE2+l7Rez7eIVnPunLK0xeo=
Subject key identifier:   C5:EC:50:36:8E:65:84:62:C9:B8:ED:12:AD:9C:82:2A:2B:5C:D2:0E
Authority key identifier: 47:40:0F:43:3D:12:D6:8A:9E:B9:F6:A4:2B:AF:3C:8C:52:95:C8:52
Certificate issuer:       /CN=47400f433d12d68a9eb9f6a42baf3c8c5295c852
Certificate serial:       0197B7455855412314817FFCFEA3D3A459ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R0APQz0S1oqeufakK688jFKVyFI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/992bac-27c8-44fc-a43f-7e384aa10621/1/R0APQz0S1oqeufakK688jFKVyFI.mft
Manifest number:          12AC
Signing time:             Sat 28 Jun 2025 16:01:04 +0000
Manifest this update:     Sat 28 Jun 2025 16:01:04 +0000
Manifest next update:     Sun 29 Jun 2025 16:01:04 +0000
Files and hashes:         1: R0APQz0S1oqeufakK688jFKVyFI.crl (hash: GUdcCT4WqNtAO3kPqBemUYM9RkY3P8t+pybzlonTStM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/992bac-27c8-44fc-a43f-7e384aa10621/1/R0APQz0S1oqeufakK688jFKVyFI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/992bac-27c8-44fc-a43f-7e384aa10621/1/R0APQz0S1oqeufakK688jFKVyFI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R0APQz0S1oqeufakK688jFKVyFI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:58:55:41:23:14:81:7f:fc:fe:a3:d3:a4:59:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47400f433d12d68a9eb9f6a42baf3c8c5295c852
        Validity
            Not Before: Jun 28 16:01:04 2025 GMT
            Not After : Jun 29 16:01:04 2025 GMT
        Subject: CN=c5ec50368e658462c9b8ed12ad9c822a2b5cd20e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:86:6b:5f:0a:ca:f7:a5:23:8f:98:e8:d9:8a:
                    81:ed:4d:30:67:12:97:be:2d:71:d3:a5:30:c1:45:
                    9a:8e:52:b4:cd:17:95:05:f6:b5:4f:6a:9e:88:0b:
                    5f:3a:26:ae:36:74:06:26:ca:62:a4:34:92:40:ec:
                    49:54:ea:a3:d7:44:f7:f8:d3:20:1d:03:59:f5:71:
                    84:4f:e6:03:3c:e4:07:8a:4d:74:d5:04:26:aa:1d:
                    c5:7a:76:51:19:88:e4:23:37:d8:da:ec:53:1d:b1:
                    7e:ca:08:29:89:61:f6:52:3f:f6:ab:92:a4:e6:68:
                    9e:1f:7c:b2:83:08:d1:ef:f9:09:de:ce:09:ba:14:
                    ce:72:d0:9c:7e:88:68:89:52:e6:3a:ce:d3:f8:d4:
                    61:e6:c6:4a:db:7b:dc:06:c0:6e:73:fe:a5:26:fe:
                    cc:df:3d:49:6a:ce:70:b5:84:c8:92:55:ed:c9:07:
                    b8:3d:f5:c4:02:e7:3c:b8:1b:40:2d:b8:a3:7c:61:
                    52:27:3d:f3:36:8e:4f:87:5f:78:e8:a5:bf:c8:5e:
                    fb:49:89:ba:28:ee:ab:6e:2f:2b:9c:c7:48:8f:ed:
                    9e:6a:70:4e:0e:03:6d:ef:ef:ad:ed:f3:96:21:d7:
                    08:6e:ef:b4:95:75:61:7e:91:de:7a:bf:ed:c6:c6:
                    81:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:EC:50:36:8E:65:84:62:C9:B8:ED:12:AD:9C:82:2A:2B:5C:D2:0E
            X509v3 Authority Key Identifier:
                keyid:47:40:0F:43:3D:12:D6:8A:9E:B9:F6:A4:2B:AF:3C:8C:52:95:C8:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0APQz0S1oqeufakK688jFKVyFI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/992bac-27c8-44fc-a43f-7e384aa10621/1/R0APQz0S1oqeufakK688jFKVyFI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/992bac-27c8-44fc-a43f-7e384aa10621/1/R0APQz0S1oqeufakK688jFKVyFI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:46:f7:20:22:7a:59:49:62:dd:7b:38:be:00:ff:25:b7:21:
         a4:71:57:07:4d:d3:61:5e:05:8b:d8:23:89:06:bf:3d:82:2e:
         ed:fc:05:22:b5:e4:47:ef:7b:2f:8e:bf:3a:db:f1:e0:43:6a:
         69:73:f2:a1:3e:bd:87:8c:14:a0:c2:6c:2c:61:69:5c:20:fc:
         93:0e:d5:f7:0e:2a:82:5e:aa:25:6a:d2:91:8e:57:9d:6f:0e:
         b1:06:76:1d:04:c8:9c:05:8b:9d:c5:48:bf:a6:91:6b:5f:f3:
         28:83:3b:27:36:de:fd:83:53:81:e5:be:15:f8:32:32:b3:b2:
         72:a2:80:cd:f2:c3:b1:fa:11:ae:8c:70:d9:c1:33:5f:3c:1b:
         3a:f1:59:d4:c5:9d:e3:19:93:28:2f:26:17:b0:21:34:a7:cc:
         4b:5f:ba:6a:85:41:6e:5d:53:d3:ae:a3:f1:ce:54:de:00:5b:
         c3:8b:e2:65:b2:65:2f:a6:ff:b5:20:2a:d4:7d:d6:4a:4e:42:
         24:ed:0a:67:96:cc:fe:7c:bc:a4:15:b2:d7:54:3c:8c:b5:eb:
         e0:26:03:b4:22:0f:e4:57:ba:65:72:bf:89:af:dd:c7:3f:04:
         11:0f:e8:d1:09:45:18:1c:15:4c:82:18:cb:57:05:a2:36:57:
         e1:b4:85:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:09:31 2025 by rpki-client