Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.mft
File:                     RPXBZ5XtiCVQC69Xp6cFtRN1qL4.mft (raw, json)
Hash identifier:          wDlxb6N9/qipTd3rpz/hAx0WiX1EOXu035Uhet/+P+I=
Subject key identifier:   14:7B:2F:6F:88:BD:7E:C1:2A:B2:5D:CA:87:42:33:C9:B0:D2:12:5C
Authority key identifier: 44:F5:C1:67:95:ED:88:25:50:0B:AF:57:A7:A7:05:B5:13:75:A8:BE
Certificate issuer:       /CN=44f5c16795ed8825500baf57a7a705b51375a8be
Certificate serial:       0197B6A0579DA8433E76B44835824B7EF8AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.mft
Manifest number:          15B2
Signing time:             Sat 28 Jun 2025 13:00:50 +0000
Manifest this update:     Sat 28 Jun 2025 13:00:50 +0000
Manifest next update:     Sun 29 Jun 2025 13:00:50 +0000
Files and hashes:         1: RPXBZ5XtiCVQC69Xp6cFtRN1qL4.crl (hash: we9L3sKCcAfDCcFFs1S9HGK0TrllBdEvxqcrbdVctpI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a0:57:9d:a8:43:3e:76:b4:48:35:82:4b:7e:f8:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44f5c16795ed8825500baf57a7a705b51375a8be
        Validity
            Not Before: Jun 28 13:00:50 2025 GMT
            Not After : Jun 29 13:00:50 2025 GMT
        Subject: CN=147b2f6f88bd7ec12ab25dca874233c9b0d2125c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6f:07:fa:7d:c9:1a:c7:96:df:8d:73:8f:ad:
                    8c:b2:b3:88:81:1e:03:72:f9:a3:af:d6:6a:a5:d0:
                    c3:32:47:46:72:17:65:f5:b1:30:43:65:4d:5d:51:
                    f5:95:16:8e:97:2e:97:78:5a:e7:35:37:ea:23:8b:
                    7d:48:8f:1d:86:ed:9e:f5:eb:3d:a2:14:dc:47:9a:
                    e3:76:5c:6f:99:96:23:da:b3:ef:c6:42:53:9d:6c:
                    29:8f:f8:ee:92:8a:f6:94:ff:e2:be:81:e3:9c:f1:
                    9b:0e:b6:f2:16:36:11:54:b0:06:bd:d8:ba:b2:e8:
                    2a:8c:00:23:d6:e6:77:ab:b2:a1:9a:3d:53:53:c9:
                    65:e6:59:35:d8:41:a2:a3:80:8e:4a:c6:5b:60:c0:
                    aa:11:1f:ba:53:22:25:7c:4b:23:c6:7e:e3:8e:0f:
                    a1:7b:19:f0:fe:7c:17:08:dc:1e:c1:6f:f6:ed:00:
                    80:9c:cd:32:5e:ef:ec:cb:1e:db:3d:32:60:ec:60:
                    e3:47:19:33:5d:96:93:a7:7b:db:e1:82:d2:06:71:
                    ed:68:b1:91:66:07:2a:06:f2:74:89:3d:b2:d5:34:
                    20:c0:b0:18:cc:76:b2:21:b6:c0:fb:cd:5f:d2:e7:
                    cc:50:e5:02:89:3a:08:1d:7c:d6:32:11:e1:30:b9:
                    e3:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:7B:2F:6F:88:BD:7E:C1:2A:B2:5D:CA:87:42:33:C9:B0:D2:12:5C
            X509v3 Authority Key Identifier:
                keyid:44:F5:C1:67:95:ED:88:25:50:0B:AF:57:A7:A7:05:B5:13:75:A8:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:f1:32:30:c7:9b:60:b2:cc:87:fb:07:9f:dc:06:db:4f:23:
         e9:33:fa:85:6b:5d:6e:12:72:ef:52:3b:ef:0f:0b:2a:86:3e:
         b3:e6:80:84:0c:15:16:59:01:ed:2a:00:35:9a:26:15:48:e6:
         3c:99:87:54:4f:cc:52:78:b0:43:c8:c5:8d:1c:12:ca:c8:1a:
         b0:f3:9e:0a:ec:9d:d2:ce:17:2a:d9:cf:29:64:94:14:18:45:
         3b:d3:f8:48:40:8a:bc:91:2a:31:fa:49:2a:f4:f9:1e:c4:11:
         51:90:2c:09:8b:b4:16:5b:de:84:75:5f:2b:e5:38:76:7d:74:
         ee:30:84:9e:10:5d:ab:3b:58:ee:f8:05:19:db:ad:47:88:de:
         29:08:b0:28:ae:90:12:04:a5:21:8e:be:5e:ca:2e:89:db:a6:
         01:73:6a:77:5d:ef:b9:dc:d3:df:45:1c:2f:49:52:42:fc:35:
         c3:a2:a5:3f:9c:2d:e2:6a:22:37:0f:c0:ce:f4:3b:11:d5:ce:
         ab:c0:d0:c2:49:19:88:99:72:1e:24:75:53:01:cf:20:24:80:
         b2:08:ca:0b:48:5c:4e:fe:79:3a:45:17:b5:4c:d3:dd:c8:34:
         1a:d0:01:d6:35:c9:15:9d:ff:7a:2b:53:a4:6a:9f:3e:28:c4:
         04:1b:96:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:06:07 2025 by rpki-client