Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft
File:                     8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft (raw, json)
Hash identifier:          PPtOkLu+dqcmVlQbY35UybEI2wnOeOuybofxzbAjhCU=
Subject key identifier:   C3:E1:84:2E:37:19:62:17:35:7A:56:69:48:A4:4A:7B:1C:92:A3:58
Authority key identifier: F0:97:60:CF:11:EF:2B:86:21:87:B0:5E:5D:75:1C:73:4C:63:4B:45
Certificate issuer:       /CN=f09760cf11ef2b862187b05e5d751c734c634b45
Certificate serial:       01965D965509FF35BE75396E7DE452A51AC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft
Manifest number:          0B6F
Signing time:             Tue 22 Apr 2025 13:00:55 +0000
Manifest this update:     Tue 22 Apr 2025 13:00:55 +0000
Manifest next update:     Wed 23 Apr 2025 13:00:55 +0000
Files and hashes:         1: 8JdgzxHvK4Yhh7BeXXUcc0xjS0U.crl (hash: W4mexWvqMW+9LwnAk/I2sM6EMqKoBbKvw3QOaLpRf4M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Apr 2025 13:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:5d:96:55:09:ff:35:be:75:39:6e:7d:e4:52:a5:1a:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f09760cf11ef2b862187b05e5d751c734c634b45
        Validity
            Not Before: Apr 22 13:00:55 2025 GMT
            Not After : Apr 23 13:00:55 2025 GMT
        Subject: CN=c3e1842e37196217357a566948a44a7b1c92a358
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:28:94:ea:93:ed:8b:d2:4b:f5:75:78:e7:1a:
                    4c:10:21:77:7e:a1:d6:5d:b7:82:15:6d:4e:ab:e8:
                    c3:42:fa:a7:e4:84:42:d6:51:cd:ec:5d:ec:2f:53:
                    e7:30:5a:37:e1:f5:89:55:cb:4b:76:79:f8:22:32:
                    45:ef:0c:24:a2:a6:92:ac:33:4c:ea:11:ab:3b:a8:
                    63:fc:5a:6c:76:b5:cd:3d:98:20:00:f0:fd:c4:33:
                    85:e0:26:78:02:85:39:65:a3:dd:92:ca:01:17:3a:
                    26:bc:88:bf:19:7b:e1:29:29:f1:04:f7:37:52:cb:
                    9f:d5:21:ef:12:3a:d3:3f:56:d4:b9:d5:d8:b8:e2:
                    85:a4:45:74:82:88:9a:af:da:24:a7:ac:5f:56:b1:
                    04:5b:c6:18:62:b6:3a:97:c0:c9:92:ec:b3:a5:d0:
                    86:d4:94:b1:60:20:0f:58:fb:7d:11:6f:3f:0e:de:
                    5a:0f:f4:ad:23:ac:5c:e4:08:33:d1:82:e9:74:86:
                    30:43:96:74:b5:e4:c2:bb:de:ae:1d:c8:75:35:90:
                    4c:13:ab:ae:62:36:00:62:db:e8:44:fe:af:de:fe:
                    c6:e2:76:2a:0e:c1:3d:9f:8b:3a:2c:3e:db:2c:e6:
                    c6:f6:8e:bb:48:05:44:20:4d:d8:cf:f3:77:dd:e3:
                    fc:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:E1:84:2E:37:19:62:17:35:7A:56:69:48:A4:4A:7B:1C:92:A3:58
            X509v3 Authority Key Identifier:
                keyid:F0:97:60:CF:11:EF:2B:86:21:87:B0:5E:5D:75:1C:73:4C:63:4B:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:f2:cb:87:42:65:ba:18:5a:16:d5:9c:22:d4:94:62:78:e8:
         d9:18:93:74:70:ea:e8:3a:af:32:58:a1:fa:0c:ae:e8:22:7c:
         63:50:27:6b:f4:ad:d7:f9:a3:a0:9a:53:e6:64:1a:9f:be:b9:
         8d:5b:58:e9:03:67:c3:d0:32:6f:ca:07:91:0e:c4:3a:82:c7:
         95:cf:51:1f:55:f7:12:44:4d:e2:8a:21:c4:d3:03:34:e5:de:
         0d:c4:2c:80:8d:24:90:21:c9:bc:2f:a0:23:4b:6e:35:89:34:
         51:56:aa:4d:85:c6:a3:8f:f4:22:eb:22:be:02:af:24:ac:c7:
         16:6c:80:dd:ea:85:c0:f0:f3:b0:1b:ee:ed:a4:41:3d:dc:f9:
         d5:b6:be:2d:ac:81:c9:a9:a6:1d:8f:f0:c3:65:3c:54:31:e1:
         3b:25:c6:dc:35:6f:a8:8f:4f:f2:c4:f3:76:32:70:d7:33:98:
         3a:7f:37:43:d2:c6:c1:a2:04:a8:55:7d:2c:26:5f:4a:5a:81:
         19:02:3b:ce:0e:de:b0:99:e5:c1:40:8f:50:24:3f:ef:a1:0d:
         fb:9d:4c:ea:6e:ec:d8:a8:f7:10:04:e3:17:09:74:c8:62:90:
         04:bd:68:f0:6e:93:41:5c:54:97:57:fc:31:af:85:e4:53:a9:
         95:28:bc:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:53:02 2025 by rpki-client