Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft
File:                     1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft (raw, json)
Hash identifier:          wq667CgEe8/y0uFGbDYoCU2HSPjcAZNA9eeQSgPigso=
Subject key identifier:   06:46:89:4B:EB:C8:E9:19:9A:16:4A:27:03:84:BB:E1:B2:6F:34:E4
Authority key identifier: FA:69:2F:DA:01:96:87:D5:8D:71:BF:32:C0:90:8D:12:E4:6B:4C:A5
Certificate issuer:       /CN=fa692fda019687d58d71bf32c0908d12e46b4ca5
Certificate serial:       01964A0F8CD8525EE0933812CC51E62499B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft
Manifest number:          1100
Signing time:             Fri 18 Apr 2025 18:00:55 +0000
Manifest this update:     Fri 18 Apr 2025 18:00:55 +0000
Manifest next update:     Sat 19 Apr 2025 18:00:55 +0000
Files and hashes:         1: 1-mkv2gGWh9WNcb8ywJCNEuRrTKU.crl (hash: DyL8yEP30MZCfHl9YnkYx5hocHiooJGqrFuFz8uxoP4=)
                          2: torroLihTDOA3iF3dz35198q-Ig.roa (hash: vvwQ1xlARrMA7/miZ5paV8AjRUiaiipi3ehp/RAKIwA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 14:20:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4a:0f:8c:d8:52:5e:e0:93:38:12:cc:51:e6:24:99:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa692fda019687d58d71bf32c0908d12e46b4ca5
        Validity
            Not Before: Apr 18 18:00:55 2025 GMT
            Not After : Apr 19 18:00:55 2025 GMT
        Subject: CN=0646894bebc8e9199a164a270384bbe1b26f34e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b6:53:23:21:73:ee:83:20:54:71:4d:89:ed:
                    10:40:4b:d5:66:77:d5:a7:3d:fe:68:71:4a:de:93:
                    f3:6a:f8:c7:2b:30:95:45:75:bb:9c:20:52:d3:17:
                    ba:2b:50:42:31:a5:eb:cc:5f:1e:6c:6f:a1:72:7e:
                    89:92:6c:12:d9:a6:be:07:cd:85:21:a9:a8:bc:ab:
                    42:61:11:8d:bf:b9:ec:9d:9f:81:9c:6c:e9:7a:05:
                    74:80:4a:57:f0:ae:b0:72:a7:a0:a3:c8:b9:a1:8a:
                    11:37:fd:b8:f7:18:81:ad:1a:b7:e3:d6:f4:1b:23:
                    a6:31:ae:7a:7b:f8:d4:8d:75:00:4b:5f:bd:84:ee:
                    e0:55:c5:0a:bc:01:a0:81:c7:07:da:6e:16:a3:01:
                    fe:d4:40:c8:b5:50:2e:26:25:56:bc:14:8a:f8:a7:
                    73:76:a8:39:65:e1:fe:ed:df:1a:93:f4:d3:eb:39:
                    7f:39:e2:78:72:12:4f:ae:e2:9a:ae:55:ae:6b:e8:
                    ed:62:2a:c3:cc:40:6b:38:44:12:12:42:ed:0f:e4:
                    2c:b6:2f:69:e9:c0:15:46:24:36:5c:6a:05:bd:fa:
                    e4:06:f8:17:d6:d9:3a:0b:cc:25:dc:56:85:7f:24:
                    1f:8a:f8:f0:6b:37:dd:a5:a5:64:17:18:7f:17:fc:
                    5f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:46:89:4B:EB:C8:E9:19:9A:16:4A:27:03:84:BB:E1:B2:6F:34:E4
            X509v3 Authority Key Identifier:
                keyid:FA:69:2F:DA:01:96:87:D5:8D:71:BF:32:C0:90:8D:12:E4:6B:4C:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:a3:12:18:2a:b7:7f:b8:4f:08:3b:5c:b0:e2:ca:7d:0b:56:
         30:08:67:5f:f5:16:90:03:b3:3a:76:e1:84:80:dd:44:ba:d2:
         b6:56:16:5f:a9:ce:fd:97:33:4c:5f:52:fc:fd:93:e3:6e:29:
         dc:1f:0a:6b:ee:40:e1:a2:85:d2:8f:31:4d:30:c2:5f:5f:da:
         90:66:26:31:25:7c:0e:40:73:3b:e2:3b:db:d9:bc:9d:35:6a:
         87:24:3d:5c:44:ef:eb:ac:dd:aa:44:b4:43:18:89:fb:a6:a4:
         64:1e:ad:13:23:fd:34:57:20:b0:49:8c:8a:15:e7:46:4d:34:
         62:5b:d0:b7:85:cf:b3:1c:b1:e2:dc:24:62:8f:e3:71:c0:69:
         62:75:51:ba:2e:95:e7:bc:25:5f:b5:76:2d:f9:be:6c:2c:fe:
         ee:a0:23:dd:ee:1f:44:79:cc:29:f6:7e:55:6b:36:c1:d7:89:
         c9:bb:a2:17:78:51:41:45:63:8a:1e:79:eb:87:43:c9:8b:a2:
         3d:41:37:dd:85:63:ad:a5:81:0b:d4:72:17:0f:d6:07:ac:d7:
         3d:fa:bb:0c:c8:66:5b:a0:5e:1f:fd:5a:c7:43:5b:cf:20:c3:
         15:a6:67:83:4e:ca:e8:48:c2:48:6e:5c:4f:ba:9c:84:57:3d:
         3d:f7:39:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:34:04 2025 by rpki-client