Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.mft
File:                     X1Vwzj2C4pVWi3QX1VaqOwYSlhA.mft (raw, json)
Hash identifier:          zmqRkGYd87PvfA6nf86P7ujXJW8jxTL0YXX1RQyVIyc=
Subject key identifier:   F7:EC:14:F0:64:29:83:93:AF:1C:7B:F6:DC:65:28:47:9A:F7:22:4B
Authority key identifier: 5F:55:70:CE:3D:82:E2:95:56:8B:74:17:D5:56:AA:3B:06:12:96:10
Certificate issuer:       /CN=5f5570ce3d82e295568b7417d556aa3b06129610
Certificate serial:       0197B89064D63DE41A4ECA3F372603E11B0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.mft
Manifest number:          0C96
Signing time:             Sat 28 Jun 2025 22:02:40 +0000
Manifest this update:     Sat 28 Jun 2025 22:02:40 +0000
Manifest next update:     Sun 29 Jun 2025 22:02:40 +0000
Files and hashes:         1: X1Vwzj2C4pVWi3QX1VaqOwYSlhA.crl (hash: 00Alrwbj1S/nICnn7I70u5syBvNnyARgnkIw60PIWTM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:90:64:d6:3d:e4:1a:4e:ca:3f:37:26:03:e1:1b:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f5570ce3d82e295568b7417d556aa3b06129610
        Validity
            Not Before: Jun 28 22:02:40 2025 GMT
            Not After : Jun 29 22:02:40 2025 GMT
        Subject: CN=f7ec14f064298393af1c7bf6dc6528479af7224b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:be:0f:dd:1a:06:5e:e6:bd:c8:cc:35:a9:47:
                    14:ec:9f:a1:a0:13:e8:17:e3:6b:b2:1a:f6:9c:ab:
                    7b:59:52:c0:e9:f8:56:6b:8b:93:23:b8:ce:e4:98:
                    11:73:a0:ec:b5:5e:e6:1b:e0:45:7b:0f:cd:2d:3d:
                    ce:14:14:e1:74:f4:23:52:7a:5b:0e:65:dc:d6:64:
                    59:b5:b3:2f:d3:d1:b6:b8:65:ca:62:17:e2:a3:39:
                    b4:c0:2b:28:a6:13:02:ef:4b:ac:e6:00:39:e4:5b:
                    f7:0a:93:c1:3f:f0:48:eb:c2:e8:4c:72:dc:cf:97:
                    22:c8:79:f5:00:88:30:ea:03:6f:89:14:10:ec:8c:
                    07:36:9b:53:6e:48:88:57:e9:9a:c0:bd:5e:7c:24:
                    1f:9a:7f:02:90:27:a1:fc:75:f4:93:17:79:3b:c2:
                    22:87:95:96:5b:27:9a:fb:6a:6e:dc:9f:f0:69:21:
                    75:43:59:a5:2e:8d:4f:0c:c5:d4:59:b7:7e:5b:39:
                    bd:f7:23:d7:12:66:a4:3c:51:b6:21:8c:f5:2c:69:
                    21:7c:bb:79:50:b4:5e:65:79:93:c4:c5:be:9e:5e:
                    a4:08:f9:a4:e7:0a:8a:c2:e1:70:5a:c7:58:81:a4:
                    bd:50:88:d8:ca:17:0d:69:d8:38:27:9a:9b:c6:f5:
                    d7:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:EC:14:F0:64:29:83:93:AF:1C:7B:F6:DC:65:28:47:9A:F7:22:4B
            X509v3 Authority Key Identifier:
                keyid:5F:55:70:CE:3D:82:E2:95:56:8B:74:17:D5:56:AA:3B:06:12:96:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:80:85:c4:5f:2f:3c:34:8e:81:3c:37:c4:ce:ec:74:a2:af:
         50:ca:12:7b:70:c3:36:c7:73:21:a1:ef:d5:46:4e:55:7a:0f:
         47:63:5b:17:38:c9:d0:ff:09:3c:dc:db:49:31:a8:6f:5c:36:
         e4:c8:da:9a:ce:c4:0e:80:e6:8e:f2:4a:d6:e8:d6:56:09:86:
         3b:89:70:a9:5b:7f:57:8e:0c:44:23:b2:c3:cf:bb:e4:7f:3a:
         d9:e8:e2:5a:b4:52:f4:af:d4:25:ff:11:d4:68:d8:a9:4b:b4:
         68:24:14:b2:25:2d:dd:ba:71:1c:65:19:0a:05:11:17:9f:f1:
         01:f7:bc:52:d0:0f:7f:f4:3f:a8:d6:f6:ed:90:18:e1:34:ba:
         ff:be:22:11:36:a9:8c:81:f9:7c:5b:db:58:30:32:a4:c8:d5:
         01:a2:50:8a:4a:f2:7b:28:e5:6b:c0:60:8b:08:33:23:b5:04:
         0e:f9:f0:3b:27:26:88:f0:9c:f7:56:57:47:59:ca:1a:0a:3e:
         e8:93:03:31:2a:fd:b6:f6:09:b5:12:68:f3:0c:3c:9b:87:da:
         b1:1e:72:83:8b:06:71:8e:32:ed:5c:e2:b8:fe:c6:a2:54:ee:
         45:68:6f:f2:27:cd:83:29:c3:56:4c:b9:cb:61:c7:c8:af:c8:
         90:d0:4b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:20:21 2025 by rpki-client