Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/857a83-6ed0-41c6-bdd6-707db2524e6b/1/Ad0iu63J75fJwaOGG21rTE3dhoc.mft
File:                     Ad0iu63J75fJwaOGG21rTE3dhoc.mft (raw, json)
Hash identifier:          0y9VAzkNZRkjPVCLM5SMSWeuJeNRf/2/9VmvoaiH0Co=
Subject key identifier:   74:B4:E5:8A:42:C4:17:B9:FD:A4:89:A3:A5:A3:C5:6B:D0:DC:22:A2
Authority key identifier: 01:DD:22:BB:AD:C9:EF:97:C9:C1:A3:86:1B:6D:6B:4C:4D:DD:86:87
Certificate issuer:       /CN=01dd22bbadc9ef97c9c1a3861b6d6b4c4ddd8687
Certificate serial:       0196553898FB9B25F6AC0692BA27B1A3B311
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ad0iu63J75fJwaOGG21rTE3dhoc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/857a83-6ed0-41c6-bdd6-707db2524e6b/1/Ad0iu63J75fJwaOGG21rTE3dhoc.mft
Manifest number:          0EEF
Signing time:             Sun 20 Apr 2025 22:01:34 +0000
Manifest this update:     Sun 20 Apr 2025 22:01:34 +0000
Manifest next update:     Mon 21 Apr 2025 22:01:34 +0000
Files and hashes:         1: Ad0iu63J75fJwaOGG21rTE3dhoc.crl (hash: JfL0PpePM1GfpGFs8ov+E7Osk2DsodR8QXmYThMgHt4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/857a83-6ed0-41c6-bdd6-707db2524e6b/1/Ad0iu63J75fJwaOGG21rTE3dhoc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/857a83-6ed0-41c6-bdd6-707db2524e6b/1/Ad0iu63J75fJwaOGG21rTE3dhoc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ad0iu63J75fJwaOGG21rTE3dhoc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:55:38:98:fb:9b:25:f6:ac:06:92:ba:27:b1:a3:b3:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01dd22bbadc9ef97c9c1a3861b6d6b4c4ddd8687
        Validity
            Not Before: Apr 20 22:01:34 2025 GMT
            Not After : Apr 21 22:01:34 2025 GMT
        Subject: CN=74b4e58a42c417b9fda489a3a5a3c56bd0dc22a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:73:9c:19:23:d9:a5:f9:e4:67:bd:a4:9c:7a:
                    10:cb:dd:f5:26:de:8e:38:fd:61:55:a0:3c:e2:f2:
                    f1:3d:17:7d:26:d1:1d:d9:ce:99:d9:e1:4d:39:33:
                    90:97:01:1a:a3:42:01:a2:4e:97:b9:16:3f:d4:56:
                    3c:9f:cb:0b:a8:e4:c2:99:b3:29:e1:af:4b:98:92:
                    f1:80:93:94:da:77:59:bc:24:9e:71:8f:bf:2b:f2:
                    2c:96:45:18:cf:07:8e:34:5f:a5:98:61:6f:6f:b8:
                    5b:71:70:ac:19:9b:43:41:ef:0f:b7:f1:aa:46:90:
                    67:95:d1:c7:a1:33:b7:31:4e:f3:9b:2a:80:4c:c6:
                    f1:10:2a:4c:84:e6:bb:11:03:99:af:5f:31:f3:d6:
                    60:bc:df:54:4a:78:86:5a:31:12:53:97:a7:00:38:
                    d8:a3:85:67:e7:bd:4a:d1:69:9d:7c:f5:fc:09:71:
                    a3:81:b9:b0:dd:b6:99:ac:77:ef:d5:a7:b8:b3:69:
                    d2:60:99:e6:78:d0:36:22:7c:a2:28:ed:fd:be:02:
                    f6:da:d0:61:3d:95:a7:39:65:22:f2:56:28:ac:69:
                    06:01:d6:0a:e1:68:ab:8e:fc:30:bf:12:d7:d9:88:
                    84:bf:d9:0a:74:9e:e4:2e:25:a4:49:c9:05:56:a3:
                    6c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:B4:E5:8A:42:C4:17:B9:FD:A4:89:A3:A5:A3:C5:6B:D0:DC:22:A2
            X509v3 Authority Key Identifier:
                keyid:01:DD:22:BB:AD:C9:EF:97:C9:C1:A3:86:1B:6D:6B:4C:4D:DD:86:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ad0iu63J75fJwaOGG21rTE3dhoc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/857a83-6ed0-41c6-bdd6-707db2524e6b/1/Ad0iu63J75fJwaOGG21rTE3dhoc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/857a83-6ed0-41c6-bdd6-707db2524e6b/1/Ad0iu63J75fJwaOGG21rTE3dhoc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:86:16:94:d5:ee:3f:af:f4:39:cc:bb:00:d2:ef:3b:0b:67:
         be:50:33:bb:10:a1:e5:d4:f8:85:ae:9c:6c:c1:a8:32:04:5f:
         a0:30:13:27:f7:25:8e:c3:4d:d5:6a:5a:2f:d7:0a:8c:86:4b:
         a2:a6:46:87:c2:dc:2d:f2:bf:06:aa:4c:2e:0c:a1:92:ab:52:
         77:40:76:19:0b:63:98:06:59:83:63:80:d4:fe:22:3f:e4:93:
         36:7f:00:02:f9:80:4b:7c:4c:0f:d3:3e:0e:e0:9c:1d:ed:cd:
         13:30:a7:4c:6b:df:96:40:7b:41:3d:ab:62:60:61:d9:50:6a:
         28:ea:a9:49:7b:1e:43:54:b8:eb:d1:46:2a:38:e4:e4:8c:67:
         12:4a:25:8e:a9:99:07:d5:da:c4:19:5a:d7:2d:17:4a:fb:aa:
         ce:b5:3e:c5:b6:34:f4:0e:30:3d:80:21:e3:2e:b3:06:c6:3d:
         db:02:15:cc:48:76:9b:a3:a9:fb:7f:22:0a:18:f1:20:3e:ab:
         a8:b0:b3:bf:02:5c:7e:72:a5:64:6e:b1:5a:09:92:08:41:d7:
         54:ef:d2:0a:82:02:3c:85:80:f9:a1:7a:7e:c2:11:a8:6b:04:
         36:a0:1d:16:d7:1e:a7:96:13:ec:18:69:f4:17:e0:24:e2:70:
         7d:80:e3:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:47:14 2025 by rpki-client