Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft
File:                     C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft (raw, json)
Hash identifier:          aF7q6y4FXqBziaLdCuCMj/AyiG68xILXzjmLicF0YMk=
Subject key identifier:   3C:7E:3D:2F:0A:90:A2:F0:A0:61:14:15:7E:1F:F1:D6:E8:04:62:D8
Authority key identifier: 0B:8E:20:C4:8E:89:73:C3:31:E3:3C:E5:51:95:A3:21:77:3F:0A:C3
Certificate issuer:       /CN=0b8e20c48e8973c331e33ce55195a321773f0ac3
Certificate serial:       019644E91478312474D5CF246197F126690F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft
Manifest number:          14C6
Signing time:             Thu 17 Apr 2025 18:00:47 +0000
Manifest this update:     Thu 17 Apr 2025 18:00:47 +0000
Manifest next update:     Fri 18 Apr 2025 18:00:47 +0000
Files and hashes:         1: C44gxI6Jc8Mx4zzlUZWjIXc_CsM.crl (hash: RQ6yJ3ghyGMZmO/h8UTzux3KcYUfgvM8Ts3107Brt3Q=)
                          2: f_yh7-7v7LI3DnSdnUSk00iuL5g.roa (hash: WRI0Xz6/VCX9n+DPCS4hBmIPi2foRqOlNvNKjpUOgU4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:44:e9:14:78:31:24:74:d5:cf:24:61:97:f1:26:69:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b8e20c48e8973c331e33ce55195a321773f0ac3
        Validity
            Not Before: Apr 17 18:00:47 2025 GMT
            Not After : Apr 18 18:00:47 2025 GMT
        Subject: CN=3c7e3d2f0a90a2f0a06114157e1ff1d6e80462d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:95:3b:19:96:18:e6:4c:2b:d7:03:92:b2:8e:
                    18:9c:9a:68:9b:1f:b5:8f:c5:80:a5:40:51:ac:6d:
                    b1:01:a1:8d:6e:5f:e6:ef:41:eb:bc:c1:86:c9:6e:
                    91:52:99:d1:cb:b9:1b:50:ca:8b:02:90:5c:3c:c1:
                    77:2b:57:b6:83:04:b1:31:64:fc:3e:bf:98:b2:41:
                    1d:7e:6b:b3:cd:04:0f:c5:e1:a1:1c:82:6e:9c:f5:
                    b4:93:83:1a:dc:c1:a8:f8:2b:df:24:34:89:64:ca:
                    d6:36:b9:90:30:dc:4f:6b:fb:b8:50:b4:ea:2b:62:
                    f2:9a:8c:00:52:04:32:3e:9f:18:8a:30:c3:40:f0:
                    17:e4:b1:c2:05:d9:3a:d8:a1:0a:f9:6f:47:4f:7b:
                    d0:9f:27:b8:ca:cb:52:7b:33:23:31:b8:63:23:e7:
                    0b:fb:c7:81:3c:5a:b6:e1:74:7e:84:cf:4a:15:64:
                    53:b3:58:c1:df:e0:6d:d3:60:84:c9:dd:5c:ed:7b:
                    d3:d8:b0:96:ad:93:dc:af:cc:b6:f2:73:5b:45:20:
                    ef:45:69:e1:c0:c3:4b:83:1c:e0:28:1b:ff:33:41:
                    ed:f8:f9:c1:68:6b:2e:c9:f6:00:75:d3:66:df:cd:
                    b0:ab:47:85:2a:bc:f7:c4:d7:4b:a7:e4:19:f8:26:
                    e3:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:7E:3D:2F:0A:90:A2:F0:A0:61:14:15:7E:1F:F1:D6:E8:04:62:D8
            X509v3 Authority Key Identifier:
                keyid:0B:8E:20:C4:8E:89:73:C3:31:E3:3C:E5:51:95:A3:21:77:3F:0A:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:e5:64:a3:29:8f:c1:34:18:13:1e:2b:6c:40:a4:4e:28:1f:
         66:76:bb:4f:ae:82:fe:92:19:0d:1e:fe:e7:69:f7:12:9d:bd:
         bd:f1:9f:cd:b9:49:4c:48:9b:a4:e6:5c:a6:15:17:81:8f:4c:
         0a:57:42:d6:60:bd:18:c8:48:f4:ba:33:41:de:c9:d9:74:33:
         09:f5:94:b1:f1:ef:e1:ba:fb:76:a2:5a:81:27:90:17:df:c7:
         76:2d:2a:5a:9d:b6:05:47:09:b8:6c:42:22:2e:8c:82:9a:49:
         bb:fa:e5:ca:a3:3d:79:73:53:f3:f7:0c:36:b4:f8:61:87:2f:
         5f:51:6d:3a:d9:67:38:60:ea:70:ed:f6:d0:9a:66:c7:67:77:
         0b:f0:44:e9:cc:19:f5:73:3f:32:a1:7d:05:ff:d4:1c:07:3f:
         ac:23:32:31:75:30:ad:db:c8:c4:42:97:75:d5:a8:47:00:20:
         5e:ce:e9:3c:60:c1:a4:00:99:25:2d:f9:3b:e3:ef:85:1d:80:
         75:7b:c6:a2:62:7b:ff:1b:9c:02:c0:e1:0a:6e:0e:0e:2c:f7:
         0d:04:d8:27:1b:e4:04:ba:20:69:52:27:d8:f9:c4:de:6b:28:
         9f:b6:b6:84:99:9c:67:da:10:28:74:15:6d:f1:26:fe:7b:bb:
         79:1b:44:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:47:33 2025 by rpki-client