Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/6e444e-cec5-47f8-98cd-3b90f1134c3b/1/ENkcyi2jOG4Bu_-fRnsBTOosJOM.mft
File:                     ENkcyi2jOG4Bu_-fRnsBTOosJOM.mft (raw, json)
Hash identifier:          2T64nqjZyQQ8gkw2WwMlzNhR2CM1SUj+idQaBC0zX28=
Subject key identifier:   2F:15:D9:B7:3B:88:FC:1B:3B:94:A6:63:A4:FB:77:C2:E5:BD:2F:CF
Authority key identifier: 10:D9:1C:CA:2D:A3:38:6E:01:BB:FF:9F:46:7B:01:4C:EA:2C:24:E3
Certificate issuer:       /CN=10d91cca2da3386e01bbff9f467b014cea2c24e3
Certificate serial:       019658DD993A30FDC533F2A0530703144A35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ENkcyi2jOG4Bu_-fRnsBTOosJOM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/6e444e-cec5-47f8-98cd-3b90f1134c3b/1/ENkcyi2jOG4Bu_-fRnsBTOosJOM.mft
Manifest number:          0428
Signing time:             Mon 21 Apr 2025 15:00:39 +0000
Manifest this update:     Mon 21 Apr 2025 15:00:39 +0000
Manifest next update:     Tue 22 Apr 2025 15:00:39 +0000
Files and hashes:         1: ENkcyi2jOG4Bu_-fRnsBTOosJOM.crl (hash: 8kIzjxGVb6O5quoNvUh36yKTIP4O/q9Rs15G/zaVjdY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/6e444e-cec5-47f8-98cd-3b90f1134c3b/1/ENkcyi2jOG4Bu_-fRnsBTOosJOM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/6e444e-cec5-47f8-98cd-3b90f1134c3b/1/ENkcyi2jOG4Bu_-fRnsBTOosJOM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ENkcyi2jOG4Bu_-fRnsBTOosJOM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:58:dd:99:3a:30:fd:c5:33:f2:a0:53:07:03:14:4a:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10d91cca2da3386e01bbff9f467b014cea2c24e3
        Validity
            Not Before: Apr 21 15:00:39 2025 GMT
            Not After : Apr 22 15:00:39 2025 GMT
        Subject: CN=2f15d9b73b88fc1b3b94a663a4fb77c2e5bd2fcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b4:5d:30:9a:e1:dc:df:df:a2:5a:52:b9:5b:
                    93:87:9f:65:5c:c7:68:5a:66:49:8b:97:76:e5:b5:
                    32:6d:d8:8b:fa:21:68:60:7d:0b:ab:8b:86:3b:cf:
                    35:bc:57:26:fc:22:88:4a:a3:37:e5:e3:f4:ac:de:
                    ef:ec:d4:76:4d:95:fd:2a:c9:05:0a:2e:12:46:d5:
                    a6:01:1e:62:08:a6:47:a2:32:67:dd:d0:2a:c5:2d:
                    38:1b:02:f4:9b:19:b6:b4:12:bb:02:b0:56:25:bb:
                    71:f8:b6:7c:e8:f7:74:ff:f6:08:20:91:57:4c:89:
                    d6:d8:89:e8:85:65:a2:61:03:0b:d2:80:27:03:12:
                    f4:b1:d4:69:15:20:1c:d3:2e:33:c8:86:1d:10:a7:
                    3e:30:ab:45:ad:bb:2d:06:c7:27:4b:87:62:c5:f8:
                    ec:ff:bc:ff:e9:05:79:5b:6c:c0:5f:52:32:98:16:
                    d4:a5:99:e4:52:31:65:08:24:98:3f:03:1f:87:f9:
                    6c:04:c1:f4:d2:d6:c7:69:a7:d1:81:91:b7:d6:ae:
                    5c:df:5e:56:8a:e3:6b:47:2c:30:b4:2d:e0:fa:0e:
                    8b:f4:38:ef:d5:fa:8d:c9:3f:75:f1:6c:a7:5c:43:
                    b3:ef:86:7e:39:14:9f:2e:52:58:1a:ab:91:0e:6a:
                    e7:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:15:D9:B7:3B:88:FC:1B:3B:94:A6:63:A4:FB:77:C2:E5:BD:2F:CF
            X509v3 Authority Key Identifier:
                keyid:10:D9:1C:CA:2D:A3:38:6E:01:BB:FF:9F:46:7B:01:4C:EA:2C:24:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ENkcyi2jOG4Bu_-fRnsBTOosJOM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/6e444e-cec5-47f8-98cd-3b90f1134c3b/1/ENkcyi2jOG4Bu_-fRnsBTOosJOM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/6e444e-cec5-47f8-98cd-3b90f1134c3b/1/ENkcyi2jOG4Bu_-fRnsBTOosJOM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:a8:9d:19:68:79:5e:21:fa:f1:47:51:b5:84:31:a9:a2:56:
         df:89:56:4e:22:46:31:9b:5d:8a:d9:fc:11:57:6b:28:6f:5e:
         12:56:a8:f2:d4:ac:9c:ef:bd:3a:d5:af:b2:ab:36:a1:af:8c:
         a8:38:4b:96:39:62:d9:3c:31:f4:50:cb:f2:86:b4:7d:33:af:
         36:44:9f:8e:27:2d:1c:50:6e:05:14:47:1e:2d:52:e4:cc:8c:
         fc:c3:cf:3e:f2:00:ad:4f:75:b8:a3:4f:a2:a7:ad:49:44:bc:
         b1:2d:63:51:60:39:cf:95:e0:ac:a6:3d:00:3d:b6:ad:32:1e:
         46:47:1f:aa:de:0f:62:77:ef:e5:bf:67:d2:8f:65:6d:3c:10:
         f2:9d:83:94:e3:f7:66:64:fc:82:b4:3f:44:fd:93:43:03:d3:
         c2:f7:c7:16:4d:5f:11:69:ec:57:7e:9e:5d:93:07:44:57:1d:
         04:ff:ff:46:a8:4a:0a:e3:76:55:2e:0b:ec:4a:79:48:19:4a:
         fe:4b:0d:ad:24:0e:d6:48:79:34:1e:5c:b8:20:f1:ec:ef:bc:
         ad:db:08:02:6a:55:ba:c1:bb:83:cc:5f:0c:bf:e0:55:9f:8f:
         e6:a1:a1:36:b4:d2:f7:e7:c7:86:0d:88:91:2b:26:d9:24:43:
         f5:16:1c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:02:03 2025 by rpki-client