Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.mft
File:                     56O9FwjGXepO6UGEnEbbQ-Z5Erk.mft (raw, json)
Hash identifier:          lmFCDStLATv1Uv6nIv8P0G0vwHGNWzAfmhEIJod26RA=
Subject key identifier:   4B:FF:F6:3F:FB:86:5F:39:92:01:83:18:A9:AE:FC:DA:28:2F:77:15
Authority key identifier: E7:A3:BD:17:08:C6:5D:EA:4E:E9:41:84:9C:46:DB:43:E6:79:12:B9
Certificate issuer:       /CN=e7a3bd1708c65dea4ee941849c46db43e67912b9
Certificate serial:       0196575CCDAD849AEC2EDD30ED863482282B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/56O9FwjGXepO6UGEnEbbQ-Z5Erk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.mft
Manifest number:          1C
Signing time:             Mon 21 Apr 2025 08:00:21 +0000
Manifest this update:     Mon 21 Apr 2025 08:00:21 +0000
Manifest next update:     Tue 22 Apr 2025 08:00:21 +0000
Files and hashes:         1: 56O9FwjGXepO6UGEnEbbQ-Z5Erk.crl (hash: 8SYQRYVmCx7/00wYpDxgsUAnXigIWGUv1DT6j8SJzlQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/56O9FwjGXepO6UGEnEbbQ-Z5Erk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 08:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:57:5c:cd:ad:84:9a:ec:2e:dd:30:ed:86:34:82:28:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7a3bd1708c65dea4ee941849c46db43e67912b9
        Validity
            Not Before: Apr 21 08:00:21 2025 GMT
            Not After : Apr 22 08:00:21 2025 GMT
        Subject: CN=4bfff63ffb865f3992018318a9aefcda282f7715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1f:d9:ed:d9:9f:a6:8b:01:91:8a:30:d5:be:
                    0b:7e:76:5d:e8:86:1d:74:b0:b2:b3:6b:9a:eb:06:
                    ba:25:79:31:db:55:89:d4:c2:24:45:9a:37:b1:43:
                    2b:5e:58:e9:ec:b1:d9:6f:9e:8f:c6:a1:a9:fe:ba:
                    67:25:78:20:7c:69:48:4c:75:7b:14:c6:72:d6:67:
                    7e:db:c9:5c:de:4f:14:d1:45:02:ac:f1:9f:0d:d7:
                    3a:47:76:cf:b4:30:89:e5:5a:26:4e:2c:4b:d7:98:
                    f9:e6:34:3f:b9:3a:9a:27:49:09:54:5f:ee:3b:8e:
                    53:3d:96:f6:a6:a6:06:7b:70:b8:10:35:bd:82:53:
                    9c:5b:ca:8e:b0:c1:17:0b:d2:27:91:7b:9f:f7:0f:
                    a5:de:64:5a:62:d8:61:97:53:9a:a1:16:f5:4e:df:
                    82:48:f1:12:3b:0c:74:d3:0b:fb:66:df:c8:7a:04:
                    83:4f:ed:b5:a2:d8:fb:c8:07:4a:80:cf:e0:c2:bd:
                    c6:83:cd:f9:fc:62:d8:bf:b8:87:dd:d4:9b:ca:22:
                    11:a5:ac:d1:44:f8:e5:73:a1:29:28:5b:d9:f5:e8:
                    2d:8e:fe:f8:f2:2a:fa:e3:d8:42:86:c0:a3:2c:0a:
                    b6:d1:bd:9d:65:44:8a:5d:19:e0:a3:c0:33:72:4a:
                    1a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:FF:F6:3F:FB:86:5F:39:92:01:83:18:A9:AE:FC:DA:28:2F:77:15
            X509v3 Authority Key Identifier:
                keyid:E7:A3:BD:17:08:C6:5D:EA:4E:E9:41:84:9C:46:DB:43:E6:79:12:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/56O9FwjGXepO6UGEnEbbQ-Z5Erk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:f0:74:ca:f4:9e:75:be:36:ba:69:f7:34:36:c3:6c:3b:d5:
         c3:51:ad:4d:20:12:6f:70:af:8b:55:72:4c:41:d3:1f:63:27:
         44:9c:6c:74:4a:ee:c2:7d:d6:4f:a3:0d:ad:1f:92:f6:ab:22:
         2c:c5:b8:31:b1:26:41:eb:15:ee:44:97:b6:df:8c:28:31:40:
         3d:30:0c:13:d8:d8:85:0a:ec:19:2e:3d:a7:f3:87:d6:69:94:
         ab:11:dd:94:b5:4e:af:8d:f0:79:79:12:ce:9c:5d:10:22:79:
         a9:c1:25:62:b4:df:b2:55:91:02:5a:3d:f1:89:bb:e6:6c:2c:
         7b:82:51:2f:b6:ce:ec:5c:f2:6a:2d:82:0b:58:09:99:66:51:
         3d:2b:00:a5:63:2f:fc:24:b4:59:5a:e4:e1:b5:d0:20:d1:3f:
         78:ec:96:ad:fc:18:41:b4:78:9d:e5:52:a5:a2:9b:01:45:fd:
         ad:da:f8:64:b1:a0:d5:8b:4a:c8:45:04:14:83:21:19:2a:f6:
         65:13:61:b5:11:5d:70:c4:1e:9a:63:80:c7:87:32:37:ec:da:
         f6:1f:c6:a5:bc:c7:90:2f:52:18:9e:0c:79:28:7c:12:61:1b:
         d3:9e:4b:09:03:ea:14:b4:8d:a3:43:20:fb:ca:49:cb:23:03:
         ae:8a:3c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:03:30 2025 by rpki-client