Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft
File:                     m7S5jjWbTJLDEYP790kjjmtvCMI.mft (raw, json)
Hash identifier:          3wJD/CV+LD2L2KGWsa8IRUNFS0Gt/iyye0McHnAwLjY=
Subject key identifier:   05:14:B9:3D:2E:2C:94:3E:3E:2E:B4:C5:45:B5:E1:ED:4D:24:70:54
Authority key identifier: 9B:B4:B9:8E:35:9B:4C:92:C3:11:83:FB:F7:49:23:8E:6B:6F:08:C2
Certificate issuer:       /CN=9bb4b98e359b4c92c31183fbf749238e6b6f08c2
Certificate serial:       0197C426320E3E3F9CC27922E3E455E8F0F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m7S5jjWbTJLDEYP790kjjmtvCMI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft
Manifest number:          15B9
Signing time:             Tue 01 Jul 2025 04:02:06 +0000
Manifest this update:     Tue 01 Jul 2025 04:02:06 +0000
Manifest next update:     Wed 02 Jul 2025 04:02:06 +0000
Files and hashes:         1: m7S5jjWbTJLDEYP790kjjmtvCMI.crl (hash: bG4SQ2KxsUCazIZ/N+/Fv/g6djV3XG+g1FHERdN6hqE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m7S5jjWbTJLDEYP790kjjmtvCMI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 01 Jul 2025 23:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c4:26:32:0e:3e:3f:9c:c2:79:22:e3:e4:55:e8:f0:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bb4b98e359b4c92c31183fbf749238e6b6f08c2
        Validity
            Not Before: Jul  1 04:02:06 2025 GMT
            Not After : Jul  2 04:02:06 2025 GMT
        Subject: CN=0514b93d2e2c943e3e2eb4c545b5e1ed4d247054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:dc:88:fa:49:f5:ee:9b:2b:2a:55:78:30:70:
                    a6:b4:c3:44:eb:bf:9f:49:8f:a5:2d:e6:57:99:73:
                    7b:98:c0:b4:3c:01:e9:10:e3:23:49:18:db:0e:b3:
                    43:93:17:72:39:f3:ac:d9:85:68:ef:17:43:81:85:
                    f1:cf:d3:e5:f8:76:d9:27:9a:80:a7:32:7d:e7:c1:
                    7e:9b:cd:e4:db:f4:d1:f2:4c:51:b4:31:46:50:33:
                    b6:30:f0:cc:14:84:57:92:08:7a:a4:f6:c2:9c:a3:
                    e9:95:cf:78:ee:15:1d:cb:f1:05:a6:85:fa:de:1c:
                    a8:bd:c3:6a:d7:c1:2b:64:e3:4b:28:bf:bc:73:7a:
                    88:ad:34:06:73:eb:a8:55:77:78:dd:3f:e5:b8:18:
                    8d:27:67:11:75:0e:ef:07:20:18:56:3b:b9:76:35:
                    47:ff:ac:63:1b:75:d7:9f:26:94:3a:2e:fd:c8:1e:
                    ef:30:c9:24:51:da:73:1d:4f:21:bd:f6:c9:32:98:
                    fd:fc:a7:be:6d:ca:24:2f:f3:da:b3:69:39:09:ca:
                    aa:d4:ff:dd:d4:23:82:0c:89:1d:0d:35:57:79:ec:
                    60:21:3b:8c:9e:71:f4:78:02:95:50:74:12:57:d8:
                    12:d4:82:98:f8:d3:6c:de:40:9a:fe:28:07:f4:52:
                    f5:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:14:B9:3D:2E:2C:94:3E:3E:2E:B4:C5:45:B5:E1:ED:4D:24:70:54
            X509v3 Authority Key Identifier:
                keyid:9B:B4:B9:8E:35:9B:4C:92:C3:11:83:FB:F7:49:23:8E:6B:6F:08:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7S5jjWbTJLDEYP790kjjmtvCMI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:08:dd:2e:1c:cb:40:41:02:36:fd:5a:1b:11:00:5f:2a:40:
         4c:08:d6:7b:cd:fa:3f:fa:68:d5:91:64:39:b2:ec:34:32:1c:
         07:82:46:0e:fe:7e:16:63:28:a7:52:1c:92:ef:5a:7d:08:95:
         e5:2b:d0:86:3d:78:d1:81:01:1d:0c:7d:1d:9d:8e:6a:c4:48:
         7a:a4:48:c0:1d:5d:65:23:68:4b:31:30:74:38:25:6b:0a:b5:
         14:7b:ef:db:fa:96:f9:59:31:70:13:29:18:58:6d:c7:48:be:
         51:9b:6c:f0:89:9c:7e:67:12:53:b3:c7:e4:d9:56:08:1e:80:
         5f:63:6e:4a:f9:f5:2e:71:aa:08:dd:86:ef:5a:5b:1e:c4:14:
         1d:39:dd:da:93:3b:71:ee:8e:fd:9c:73:06:f4:9e:26:08:a5:
         c9:65:1b:37:41:10:df:0d:04:bc:22:ad:3c:b2:12:c3:e0:7c:
         d8:0f:f0:b2:a4:d1:21:b5:e0:ab:9d:b0:f1:db:8c:f9:c4:40:
         c9:c1:09:71:8e:cb:d2:46:5e:76:77:ec:d3:26:04:f5:97:b7:
         14:01:2f:54:b1:ce:db:c4:79:90:ba:45:04:f6:ca:f7:df:00:
         b3:05:c2:fc:d1:7d:48:42:7b:03:d1:78:bd:30:83:76:85:47:
         64:75:b1:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 05:44:11 2025 by rpki-client