Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft
File:                     m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft (raw, json)
Hash identifier:          g+gys/nM7+caxNFWxzKrHouwUYQ7NVYAJzYZ0VHJyqw=
Subject key identifier:   56:7E:E7:11:88:82:64:40:6C:D3:AD:54:C8:51:39:BA:2B:AE:21:A0
Authority key identifier: 9B:E7:F8:92:2A:B8:46:A2:98:19:EA:82:4B:B1:C6:1B:06:E3:13:B0
Certificate issuer:       /CN=9be7f8922ab846a29819ea824bb1c61b06e313b0
Certificate serial:       0197B77C321370D2F3248134F8C536842ABB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m-f4kiq4RqKYGeqCS7HGGwbjE7A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft
Manifest number:          081B
Signing time:             Sat 28 Jun 2025 17:00:59 +0000
Manifest this update:     Sat 28 Jun 2025 17:00:59 +0000
Manifest next update:     Sun 29 Jun 2025 17:00:59 +0000
Files and hashes:         1: m-f4kiq4RqKYGeqCS7HGGwbjE7A.crl (hash: cZuQSRa2rL/DiN6U7S9ley9VPEYSNgGq78l6unYKTOk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m-f4kiq4RqKYGeqCS7HGGwbjE7A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:32:13:70:d2:f3:24:81:34:f8:c5:36:84:2a:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9be7f8922ab846a29819ea824bb1c61b06e313b0
        Validity
            Not Before: Jun 28 17:00:59 2025 GMT
            Not After : Jun 29 17:00:59 2025 GMT
        Subject: CN=567ee711888264406cd3ad54c85139ba2bae21a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e3:70:36:2a:cd:c9:d1:c5:cc:0e:df:a4:a6:
                    36:be:c5:a8:7c:d8:9d:e1:9c:22:75:3d:4c:ac:f5:
                    3f:d7:63:02:df:11:a9:a6:e4:e7:c3:67:ef:06:a5:
                    99:6b:d3:90:de:bd:e1:f0:44:51:58:ac:67:02:55:
                    cb:2f:25:b7:74:d7:b7:08:0d:04:44:41:e7:83:3b:
                    a1:d2:e4:55:fa:0b:4c:16:af:18:de:64:0a:72:d0:
                    a6:aa:c0:0a:03:30:91:dc:3f:84:aa:97:b2:9c:62:
                    be:18:6e:3a:06:68:04:d6:3f:42:28:16:df:31:88:
                    c4:25:de:9b:5b:a6:0b:49:02:82:89:d4:10:53:2f:
                    dd:b0:7a:8d:50:87:82:8a:eb:a4:e2:6c:41:98:21:
                    97:36:12:77:9d:ac:fc:9f:1e:8f:4e:0b:58:b2:c2:
                    35:ed:8b:4e:28:cd:99:60:0b:26:0f:3f:d5:31:20:
                    eb:da:23:be:19:b0:e8:31:7b:a6:22:1e:ec:d3:8a:
                    f3:bc:b3:38:a1:90:85:11:fc:63:d8:79:c1:36:f2:
                    a1:55:fb:86:18:c7:61:01:eb:f8:4a:8f:de:a8:a2:
                    1f:71:ca:16:67:30:70:a4:c9:2f:9a:85:2b:89:47:
                    f7:9f:c6:2e:1c:0f:53:1a:b5:af:c2:f8:ed:31:2e:
                    99:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:7E:E7:11:88:82:64:40:6C:D3:AD:54:C8:51:39:BA:2B:AE:21:A0
            X509v3 Authority Key Identifier:
                keyid:9B:E7:F8:92:2A:B8:46:A2:98:19:EA:82:4B:B1:C6:1B:06:E3:13:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-f4kiq4RqKYGeqCS7HGGwbjE7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:0b:1a:72:d7:fe:dc:87:72:4f:af:52:ed:78:ca:b2:31:f6:
         f3:5f:75:fd:49:e8:d8:40:ea:95:30:cc:49:6b:19:72:d7:42:
         5b:e7:bf:08:95:b9:02:2f:f5:bb:87:29:02:ff:e4:15:bf:48:
         33:6e:e3:fc:e7:a3:78:7b:32:95:70:10:b4:7d:31:01:5a:83:
         31:01:14:94:70:31:24:8a:a9:0e:50:62:a9:34:f0:e3:8a:1c:
         80:f9:b8:f5:47:d0:76:32:70:eb:08:dc:62:5e:b4:27:bc:d8:
         b7:b8:4b:01:1c:10:eb:64:1d:19:9a:a7:23:5f:c6:2c:58:70:
         e0:16:75:93:55:6c:b3:71:c6:28:0d:fa:45:59:38:7a:38:64:
         3f:f2:72:18:6f:95:25:1b:4b:8c:73:93:3d:b6:c7:6c:74:a9:
         c7:8d:02:44:a6:4c:65:99:34:d7:6c:a3:e4:5a:ee:b3:35:36:
         8f:d8:7f:52:00:d0:bb:7f:9e:a3:ca:6e:a5:7c:14:f5:f4:16:
         7b:30:a0:46:8a:a0:31:5b:55:e6:c1:af:75:7e:e9:83:8d:ba:
         90:9f:9a:07:42:e1:96:cf:8a:2e:0d:52:a1:e6:9d:9e:bc:86:
         74:af:9d:9e:ed:a3:7a:96:d1:1a:63:8b:6f:a0:bd:da:06:d3:
         92:b0:ba:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:27:00 2025 by rpki-client