Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/f756cf-0628-4f72-a117-bbe073bf6a64/1/OWN43jPRC4yw-AhitkkaTenP_N8.mft
File:                     OWN43jPRC4yw-AhitkkaTenP_N8.mft (raw, json)
Hash identifier:          BQ+ZN2r0q3tC377Afo2VXSjBlEkvJfBwiJmsbfNzFaI=
Subject key identifier:   E5:8D:ED:7D:9B:89:70:AB:38:52:83:88:7C:B5:CB:85:48:A9:8C:B9
Authority key identifier: 39:63:78:DE:33:D1:0B:8C:B0:F8:08:62:B6:49:1A:4D:E9:CF:FC:DF
Certificate issuer:       /CN=396378de33d10b8cb0f80862b6491a4de9cffcdf
Certificate serial:       0197B96B1548CB8BF896916744DF0FAA6CE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OWN43jPRC4yw-AhitkkaTenP_N8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/f756cf-0628-4f72-a117-bbe073bf6a64/1/OWN43jPRC4yw-AhitkkaTenP_N8.mft
Manifest number:          053B
Signing time:             Sun 29 Jun 2025 02:01:32 +0000
Manifest this update:     Sun 29 Jun 2025 02:01:32 +0000
Manifest next update:     Mon 30 Jun 2025 02:01:32 +0000
Files and hashes:         1: OWN43jPRC4yw-AhitkkaTenP_N8.crl (hash: 5wHS87vZw0Vx1YDDsAdAkaSmcsumjTNV7M02GOJZfDE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/f756cf-0628-4f72-a117-bbe073bf6a64/1/OWN43jPRC4yw-AhitkkaTenP_N8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/f756cf-0628-4f72-a117-bbe073bf6a64/1/OWN43jPRC4yw-AhitkkaTenP_N8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OWN43jPRC4yw-AhitkkaTenP_N8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 00:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b9:6b:15:48:cb:8b:f8:96:91:67:44:df:0f:aa:6c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=396378de33d10b8cb0f80862b6491a4de9cffcdf
        Validity
            Not Before: Jun 29 02:01:32 2025 GMT
            Not After : Jun 30 02:01:32 2025 GMT
        Subject: CN=e58ded7d9b8970ab385283887cb5cb8548a98cb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:17:0a:5e:7a:9d:48:cc:f4:89:92:50:74:a4:
                    65:fe:3c:2e:6d:c5:b4:5e:13:da:9c:89:89:3b:cc:
                    c8:80:a6:ee:96:5a:af:be:0a:69:03:75:e6:e4:e1:
                    bc:d7:4a:68:51:91:dc:82:d8:ff:e3:5f:80:4a:53:
                    60:05:0e:8f:65:c4:e6:f8:0f:80:fb:80:de:81:c9:
                    44:45:25:08:4a:47:3d:73:3d:f8:13:7a:31:49:27:
                    96:04:aa:13:39:51:db:f4:5c:f0:d2:13:c1:a0:c1:
                    fa:27:7d:fd:12:b3:a6:77:40:08:ba:02:2c:eb:a8:
                    0f:71:d6:3a:dd:75:80:0c:95:88:79:08:6c:cc:4c:
                    dc:e1:9b:20:28:54:3e:12:bd:b9:21:e1:ba:3e:65:
                    a7:a8:33:bb:e2:90:69:e9:64:e5:22:ba:a9:b8:c3:
                    ea:7d:15:fa:26:5e:91:aa:69:ca:ba:49:de:72:9f:
                    f0:07:e9:2a:08:70:59:0a:2b:31:be:c3:93:39:ff:
                    42:6e:3d:6e:ea:c0:46:ce:ff:0b:a2:d4:b8:4d:c2:
                    7a:b8:bb:b6:e0:c6:a4:69:a8:80:fe:f8:f9:bc:16:
                    f3:c6:72:fd:a9:79:ea:45:d2:07:0e:8b:e7:41:7f:
                    10:16:b5:ef:61:47:c0:79:da:c5:e3:c7:f4:0d:ab:
                    8a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:8D:ED:7D:9B:89:70:AB:38:52:83:88:7C:B5:CB:85:48:A9:8C:B9
            X509v3 Authority Key Identifier:
                keyid:39:63:78:DE:33:D1:0B:8C:B0:F8:08:62:B6:49:1A:4D:E9:CF:FC:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OWN43jPRC4yw-AhitkkaTenP_N8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f756cf-0628-4f72-a117-bbe073bf6a64/1/OWN43jPRC4yw-AhitkkaTenP_N8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f756cf-0628-4f72-a117-bbe073bf6a64/1/OWN43jPRC4yw-AhitkkaTenP_N8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:30:80:04:c8:a1:5b:85:6c:bd:bd:9b:11:7c:e4:61:11:d6:
         85:6b:92:01:37:ef:80:05:38:02:bc:af:de:1f:33:7d:ac:e8:
         91:c9:00:5a:3e:bf:a1:79:79:48:18:1e:58:41:14:f3:8c:00:
         25:a5:7d:2b:4f:61:0f:aa:aa:93:f1:6b:2b:ff:f7:00:54:cf:
         c1:2a:15:67:a0:4c:91:81:06:e8:54:41:43:cb:c8:67:ea:12:
         61:4e:9e:45:e4:8b:23:f6:ea:b2:d6:84:40:56:a7:0a:bc:57:
         ea:99:c7:aa:22:cf:41:e4:2b:31:3b:ad:59:40:0b:a9:dc:af:
         d7:23:d3:ab:92:83:35:4a:5b:9d:38:8f:db:5f:55:38:97:41:
         1c:45:ef:a2:e2:36:8a:35:98:4e:df:81:21:2e:34:a6:76:18:
         08:d0:4f:ae:24:07:f8:c9:74:c7:61:78:8d:e4:65:44:8d:cd:
         7b:04:a7:34:06:d9:8d:9f:00:51:d9:e4:7b:48:00:d4:de:c4:
         1a:54:ac:aa:8c:88:81:4f:02:e6:56:4c:23:a6:bf:84:48:01:
         f2:ec:47:0d:f1:fa:3c:ac:b4:35:60:2b:79:91:c5:a8:4c:c0:
         4e:1b:ba:af:7d:47:e3:ed:0e:f7:59:36:2b:4d:4f:d6:06:aa:
         74:a6:94:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:06:23 2025 by rpki-client