Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.mft
File:                     GE0fQIM4P1aJXW4-c6igd63rUMs.mft (raw, json)
Hash identifier:          VyeU6ZBYOMgc3jX+aKmMHuofiUpxWpbil6MMNG4vewQ=
Subject key identifier:   C9:F0:47:76:47:C3:7D:60:8E:10:3F:E2:1F:DD:EF:BB:E9:B7:27:66
Authority key identifier: 18:4D:1F:40:83:38:3F:56:89:5D:6E:3E:73:A8:A0:77:AD:EB:50:CB
Certificate issuer:       /CN=184d1f4083383f56895d6e3e73a8a077adeb50cb
Certificate serial:       01964D7E1E7EC4110CD73C8EAA28E5407926
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GE0fQIM4P1aJXW4-c6igd63rUMs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.mft
Manifest number:          0B27
Signing time:             Sat 19 Apr 2025 10:00:32 +0000
Manifest this update:     Sat 19 Apr 2025 10:00:32 +0000
Manifest next update:     Sun 20 Apr 2025 10:00:32 +0000
Files and hashes:         1: GE0fQIM4P1aJXW4-c6igd63rUMs.crl (hash: 3ldZYrR4q3SH/c9fGCr0DT3R95NcEIOJnjRoexorAbI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GE0fQIM4P1aJXW4-c6igd63rUMs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4d:7e:1e:7e:c4:11:0c:d7:3c:8e:aa:28:e5:40:79:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=184d1f4083383f56895d6e3e73a8a077adeb50cb
        Validity
            Not Before: Apr 19 10:00:32 2025 GMT
            Not After : Apr 20 10:00:32 2025 GMT
        Subject: CN=c9f0477647c37d608e103fe21fddefbbe9b72766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:b3:1b:5d:28:57:b0:9f:3d:64:c8:0f:13:dc:
                    6e:1d:f2:de:26:f5:87:03:f6:2a:18:fb:dd:06:cc:
                    9f:1f:80:3d:6a:d7:fe:b5:1a:09:4c:6e:80:5c:8a:
                    bf:98:6d:90:cf:31:4c:9e:db:e2:3f:8c:8f:40:6a:
                    db:95:72:9b:c7:9c:45:2b:ff:c0:d5:b5:57:93:01:
                    3f:f2:be:a5:e3:11:1e:5f:4c:f9:9b:8c:b8:af:55:
                    0e:21:be:02:ef:73:a5:b7:94:0a:97:f7:a1:3e:97:
                    18:73:cb:b6:30:2a:03:d6:33:84:0c:4c:8b:38:4e:
                    2d:4b:32:72:e6:bf:fd:1e:68:d2:c9:ff:0a:78:68:
                    eb:9b:c9:2d:19:f2:4e:42:e4:f1:91:73:99:5f:70:
                    59:4b:6a:43:c0:db:ec:5a:ff:1f:7c:e3:8c:f1:03:
                    bb:76:13:c6:d3:ce:6a:fe:5f:43:2f:99:4d:11:ed:
                    20:c3:26:6f:bb:2e:f7:6c:7a:87:ab:5a:d9:d9:a3:
                    aa:c6:0c:0d:d6:b5:07:8e:cb:5e:ee:bf:8f:1d:4f:
                    eb:6a:9b:05:f5:f9:5b:24:8f:19:d2:bb:d6:ad:8e:
                    ae:3a:7d:e5:c7:8a:9d:33:e1:bc:f3:35:7d:8a:e3:
                    ea:05:ea:5c:06:c7:99:3f:57:4c:87:32:c7:fc:28:
                    53:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:F0:47:76:47:C3:7D:60:8E:10:3F:E2:1F:DD:EF:BB:E9:B7:27:66
            X509v3 Authority Key Identifier:
                keyid:18:4D:1F:40:83:38:3F:56:89:5D:6E:3E:73:A8:A0:77:AD:EB:50:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GE0fQIM4P1aJXW4-c6igd63rUMs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:d0:41:5d:df:1f:98:fe:7c:32:0b:e7:fe:1f:82:f5:3d:aa:
         b6:59:41:e8:99:a2:64:bd:d2:c9:2f:93:e5:3e:05:47:c8:a1:
         f6:ee:ee:85:ce:79:79:d2:87:f1:db:b5:e0:dd:48:c2:be:48:
         94:65:a1:1e:9b:07:e4:a2:1c:37:fb:e8:17:6e:82:13:60:06:
         d3:a4:a7:97:70:a1:e3:32:b0:19:e5:c8:40:20:e9:fe:6a:d1:
         ab:b5:73:5b:df:0a:cc:ef:e6:a4:c6:bc:8f:13:fc:34:c7:ba:
         77:5f:36:b3:e4:b4:96:e1:ea:ef:79:0d:75:bd:83:72:88:ae:
         32:04:39:b3:4a:1c:43:49:40:2c:f1:4b:f8:70:b7:63:ae:32:
         e1:c9:74:4a:5c:9c:93:93:4a:b3:45:54:e4:37:a5:d1:27:9b:
         2d:9e:a0:2f:73:02:eb:35:74:2b:c9:25:2e:4c:33:54:3a:f4:
         e1:c5:e7:f9:c4:41:9f:11:3d:8a:f1:5e:c2:0d:d9:97:e4:da:
         a7:b0:81:3d:64:64:8c:8a:b7:c6:4f:4d:46:df:30:2e:d5:8c:
         fd:cb:47:2a:c2:86:41:9d:f9:7c:cc:79:ef:c4:95:64:63:24:
         8e:f7:a2:d8:bc:57:20:5b:cf:f1:0c:ee:ae:84:7b:77:38:11:
         47:fb:98:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:37:51 2025 by rpki-client