Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.mft
File:                     74wzqKYgHUCmAiC9Y5tdNSISZz4.mft (raw, json)
Hash identifier:          r51VnczN8I4rPemJliy5rxiMCblY4o+2SgC2o99WcwU=
Subject key identifier:   94:56:E4:97:32:13:12:68:45:88:02:42:6C:13:FF:41:75:CF:81:B3
Authority key identifier: EF:8C:33:A8:A6:20:1D:40:A6:02:20:BD:63:9B:5D:35:22:12:67:3E
Certificate issuer:       /CN=ef8c33a8a6201d40a60220bd639b5d352212673e
Certificate serial:       01964AB3C39CF0D3D2A12F5BA81A2EEE24EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/74wzqKYgHUCmAiC9Y5tdNSISZz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.mft
Manifest number:          130B
Signing time:             Fri 18 Apr 2025 21:00:16 +0000
Manifest this update:     Fri 18 Apr 2025 21:00:16 +0000
Manifest next update:     Sat 19 Apr 2025 21:00:16 +0000
Files and hashes:         1: 74wzqKYgHUCmAiC9Y5tdNSISZz4.crl (hash: lqOzjSBBWIyu3mVt20SrDOVu4k/wjR7D81ynOKQZEZ0=)
                          2: XZUkkjfK1svUa6feBEevTKvtEcA.roa (hash: wyVf5zW45oYKuYL+LlUqTk3eWYEVvuJxk1VRagHAyy0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/74wzqKYgHUCmAiC9Y5tdNSISZz4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 14:20:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4a:b3:c3:9c:f0:d3:d2:a1:2f:5b:a8:1a:2e:ee:24:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef8c33a8a6201d40a60220bd639b5d352212673e
        Validity
            Not Before: Apr 18 21:00:16 2025 GMT
            Not After : Apr 19 21:00:16 2025 GMT
        Subject: CN=9456e49732131268458802426c13ff4175cf81b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8a:47:fb:ef:45:34:39:58:42:9a:94:cd:cd:
                    79:12:11:c8:bd:a9:59:45:1e:64:ea:f9:28:8c:4d:
                    f6:34:7e:77:d1:03:1b:c8:63:0f:a1:03:0e:06:6e:
                    d5:d4:41:11:16:fb:24:f4:23:cd:2c:e8:01:7e:0a:
                    9f:26:b2:a8:6f:be:87:67:98:c2:76:74:c5:ec:61:
                    fa:32:4c:5a:ad:47:74:6a:54:17:c1:66:6c:ea:3f:
                    32:87:71:3c:ca:8d:59:4c:7d:c4:8c:4e:15:06:68:
                    50:d6:5d:c4:ae:25:b8:c9:dc:c1:c7:56:d9:20:b5:
                    0c:7d:26:81:d4:63:a7:65:cd:65:5a:c1:f8:e8:8a:
                    32:36:f8:c9:2f:be:8b:ca:6f:8e:fb:06:97:0a:f7:
                    5b:0a:b8:05:04:94:c8:49:09:fb:28:9b:8c:16:8d:
                    93:f6:81:a5:5e:26:fc:0c:90:9d:26:58:d0:d2:39:
                    06:fb:01:89:97:8d:51:cf:92:80:0c:4b:8d:6a:a8:
                    96:e9:75:b9:6a:d0:b7:70:2a:3c:30:93:99:13:e0:
                    78:ff:ba:00:b8:0b:75:cd:c2:1a:1c:b3:b7:ee:c2:
                    ce:55:b4:f7:50:ce:6e:0b:f5:0c:48:cc:92:3d:29:
                    e9:2a:ee:a0:63:24:82:f5:e4:25:66:da:58:33:be:
                    54:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:56:E4:97:32:13:12:68:45:88:02:42:6C:13:FF:41:75:CF:81:B3
            X509v3 Authority Key Identifier:
                keyid:EF:8C:33:A8:A6:20:1D:40:A6:02:20:BD:63:9B:5D:35:22:12:67:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/74wzqKYgHUCmAiC9Y5tdNSISZz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:74:76:43:da:8b:b1:01:62:2d:cc:f6:8d:cc:dc:03:74:89:
         b4:ca:47:1f:3b:1f:af:fe:51:a0:fd:d5:58:9b:8d:68:3e:4d:
         56:ed:ef:2a:75:ef:68:b1:ad:ae:3d:2c:3a:03:5c:77:6b:b5:
         ba:65:2d:38:3b:a0:e3:14:82:e3:c1:3b:7d:44:0a:66:56:54:
         f8:91:26:25:5b:0c:aa:af:da:4e:ea:e1:2c:56:43:ad:e8:f2:
         e2:76:01:ab:51:45:f0:26:df:5d:94:68:b1:e8:c9:21:82:53:
         aa:c4:04:61:23:e2:98:41:44:37:80:96:54:e0:f2:00:11:2e:
         13:53:ab:92:7d:b1:36:d7:ee:a8:37:32:56:9c:8e:9c:20:9d:
         79:84:e0:84:f7:f6:df:0d:36:2d:b6:f3:04:85:28:1d:1b:46:
         96:81:8b:2a:d6:f8:c4:75:49:36:18:75:94:07:5c:c1:6d:a4:
         67:51:3f:52:f6:5e:da:7f:ce:21:1c:80:48:93:80:fc:2c:e8:
         df:3d:94:6f:eb:fe:2a:61:0e:4f:ee:01:ce:96:a7:9a:8c:af:
         8b:ab:51:d5:9e:f9:06:aa:b6:94:8d:d1:35:e9:e6:db:20:3f:
         46:a2:9f:53:a3:06:3c:26:e3:57:79:75:f1:c6:c5:e0:c2:ef:
         13:37:d9:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:35:00 2025 by rpki-client