Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/6cb081-8a7d-4024-ae85-9c4cb3bd925e/1/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.mft
File:                     vJ9arpo3Z27gp3Ev8xDdCwpvIsY.mft (raw, json)
Hash identifier:          GywaJBr+I1n0b5RHb7lyDOlFZ+glsJTSyd7p9e0O+7w=
Subject key identifier:   24:6A:50:24:0D:13:9A:35:1C:34:F9:73:53:D6:51:C8:E7:43:28:E4
Authority key identifier: BC:9F:5A:AE:9A:37:67:6E:E0:A7:71:2F:F3:10:DD:0B:0A:6F:22:C6
Certificate issuer:       /CN=bc9f5aae9a37676ee0a7712ff310dd0b0a6f22c6
Certificate serial:       0197B6A07EDB4FEB4876509B206FC9A312B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/6cb081-8a7d-4024-ae85-9c4cb3bd925e/1/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.mft
Manifest number:          15B1
Signing time:             Sat 28 Jun 2025 13:01:00 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:00 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:00 +0000
Files and hashes:         1: vJ9arpo3Z27gp3Ev8xDdCwpvIsY.crl (hash: lDpq8L8wEZlLM97QWJWj5mqN6oenRKbBGNs9zQnIgMg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/6cb081-8a7d-4024-ae85-9c4cb3bd925e/1/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/6cb081-8a7d-4024-ae85-9c4cb3bd925e/1/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a0:7e:db:4f:eb:48:76:50:9b:20:6f:c9:a3:12:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc9f5aae9a37676ee0a7712ff310dd0b0a6f22c6
        Validity
            Not Before: Jun 28 13:01:00 2025 GMT
            Not After : Jun 29 13:01:00 2025 GMT
        Subject: CN=246a50240d139a351c34f97353d651c8e74328e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:7a:9e:91:9a:71:9b:91:87:14:9f:df:cc:e6:
                    d7:7f:df:ed:66:46:b0:34:1c:73:ba:37:ea:e0:10:
                    65:6f:9c:d4:0b:d4:17:2c:d8:59:19:c3:1c:42:07:
                    12:f7:6a:d7:3b:80:c5:6b:27:4c:6d:a4:12:fe:6d:
                    07:55:31:91:68:b8:9e:31:b5:fa:16:f7:92:7e:e7:
                    c2:05:4b:5f:03:6a:95:f5:6c:5e:60:85:70:ad:d3:
                    c0:04:10:3b:ed:17:76:5a:0b:cb:43:dc:37:06:be:
                    06:cd:b2:e5:98:a3:99:1e:ce:e8:6e:ba:2c:bc:74:
                    6a:af:26:b4:9f:51:7d:69:ea:b4:01:73:42:4b:46:
                    ab:b3:a1:2f:af:c9:42:31:2e:42:52:9f:fd:5d:85:
                    b3:6a:5a:98:c9:d8:05:85:e4:46:98:3f:a6:f9:c5:
                    e8:55:3b:b5:94:b8:af:f7:91:60:9c:f5:fb:ae:bd:
                    45:4e:ec:1c:43:57:39:fb:cb:2e:07:29:b5:de:ad:
                    a5:42:90:3f:59:9d:96:52:80:85:be:8c:94:d0:8a:
                    7b:03:0e:7b:d2:6f:ad:93:96:3d:8b:87:59:5f:88:
                    1c:bc:26:56:0c:d9:c8:11:3c:d6:7d:9a:fd:7b:a6:
                    40:cc:7e:6c:5e:92:30:06:31:4a:4e:a8:94:05:9c:
                    a6:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:6A:50:24:0D:13:9A:35:1C:34:F9:73:53:D6:51:C8:E7:43:28:E4
            X509v3 Authority Key Identifier:
                keyid:BC:9F:5A:AE:9A:37:67:6E:E0:A7:71:2F:F3:10:DD:0B:0A:6F:22:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6cb081-8a7d-4024-ae85-9c4cb3bd925e/1/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6cb081-8a7d-4024-ae85-9c4cb3bd925e/1/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:73:2f:a8:ea:4d:74:bb:c2:14:a7:a2:01:b5:55:bd:a6:6b:
         f7:1e:e1:57:d1:3d:82:e1:e0:4a:87:af:09:88:71:6a:1b:dc:
         e4:3b:43:22:49:5c:d6:a1:dc:6d:82:da:89:e7:be:6b:88:05:
         c0:f2:a9:2c:eb:65:9d:80:7d:ec:f1:3b:06:a8:f7:2c:cd:7d:
         8f:2b:a8:ca:81:fb:c5:44:a1:07:51:9d:94:5a:94:5d:20:c6:
         f5:f3:9b:44:1e:71:e7:f0:8e:fd:79:57:b7:93:0e:52:9b:f6:
         42:2b:b2:ec:1f:d7:c0:ae:b2:84:52:7d:63:e3:b7:1a:3c:df:
         00:62:3d:59:b1:22:45:c6:d4:e1:c4:b3:0e:46:b0:6f:fe:d9:
         f4:d1:d9:43:28:09:aa:16:cd:39:f6:09:b0:35:4b:8d:80:56:
         34:09:ac:8f:40:a2:1b:12:9a:ed:1c:9a:26:3c:60:9b:31:ba:
         10:de:b8:37:cf:25:55:e3:74:a3:0c:4f:95:5f:14:d6:84:04:
         e1:23:23:09:e4:d9:ea:2b:07:a5:46:23:94:40:c3:fe:2b:25:
         fd:ca:e5:ae:30:56:90:f3:21:a2:32:cb:38:8f:b8:45:64:67:
         2f:7b:3f:c0:43:0a:7e:3b:6c:c0:e1:7a:34:d4:fa:bb:d7:ae:
         19:5a:38:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:43:19 2025 by rpki-client