Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d78fc5-bf3e-4686-8d85-c33f8a21122c/1/7S-mhtGMgCCvxq31Wv2-Zg26rBU.mft
File:                     7S-mhtGMgCCvxq31Wv2-Zg26rBU.mft (raw, json)
Hash identifier:          9d8oheN9eiTRPkT2BL5kKpnFHSx8+7KwfuEdf9UXvG0=
Subject key identifier:   FB:11:2E:51:2A:72:A8:87:51:3C:88:99:FE:70:41:32:1C:6B:E9:24
Authority key identifier: ED:2F:A6:86:D1:8C:80:20:AF:C6:AD:F5:5A:FD:BE:66:0D:BA:AC:15
Certificate issuer:       /CN=ed2fa686d18c8020afc6adf55afdbe660dbaac15
Certificate serial:       01965191D702CA65441183E97EC2137281BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7S-mhtGMgCCvxq31Wv2-Zg26rBU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/d78fc5-bf3e-4686-8d85-c33f8a21122c/1/7S-mhtGMgCCvxq31Wv2-Zg26rBU.mft
Manifest number:          11FF
Signing time:             Sun 20 Apr 2025 05:00:34 +0000
Manifest this update:     Sun 20 Apr 2025 05:00:34 +0000
Manifest next update:     Mon 21 Apr 2025 05:00:34 +0000
Files and hashes:         1: 7S-mhtGMgCCvxq31Wv2-Zg26rBU.crl (hash: Wu3b7J50JV9xiFAj2YkEp/s0WX9LwLVO53ZCc6CZpp4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/d78fc5-bf3e-4686-8d85-c33f8a21122c/1/7S-mhtGMgCCvxq31Wv2-Zg26rBU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/d78fc5-bf3e-4686-8d85-c33f8a21122c/1/7S-mhtGMgCCvxq31Wv2-Zg26rBU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7S-mhtGMgCCvxq31Wv2-Zg26rBU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:51:91:d7:02:ca:65:44:11:83:e9:7e:c2:13:72:81:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed2fa686d18c8020afc6adf55afdbe660dbaac15
        Validity
            Not Before: Apr 20 05:00:34 2025 GMT
            Not After : Apr 21 05:00:34 2025 GMT
        Subject: CN=fb112e512a72a887513c8899fe7041321c6be924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b3:aa:9a:ed:64:fa:d5:45:ae:5a:62:16:d6:
                    b3:49:6c:bb:8c:d2:c2:ec:12:0f:e2:85:4b:95:49:
                    60:37:a9:19:3c:f8:24:81:57:19:45:e5:ff:6c:eb:
                    c1:25:2f:13:c7:dc:f9:3e:2c:df:b4:b0:cb:5f:14:
                    66:9d:82:d5:27:f5:e4:a0:b7:35:34:28:81:6e:fb:
                    23:bd:10:ea:ce:45:4c:81:45:b7:a3:81:2d:7e:d5:
                    c6:07:23:d5:27:47:14:4a:c7:56:2c:98:23:d7:10:
                    6f:c8:3d:f1:d2:54:4f:58:ac:3f:9f:b1:6f:24:15:
                    2f:4c:46:12:89:8b:3a:4c:04:7e:5d:d9:ef:18:88:
                    a7:11:9d:4a:1f:5d:a1:db:4f:66:1e:d6:c3:ec:7e:
                    ad:0d:69:d0:62:04:33:73:04:71:ac:d6:04:6d:30:
                    1b:d5:3e:c5:73:6a:ed:78:5f:ea:e6:8d:de:61:f8:
                    ff:0b:3c:b3:af:ae:4b:12:37:a8:42:22:0c:40:3d:
                    80:2b:df:dc:d9:f0:ae:2f:0f:73:27:14:a4:7e:4c:
                    40:d1:48:fe:43:c1:4e:21:df:c1:9f:bc:64:56:bf:
                    26:89:cd:63:2c:f0:7d:b6:6c:a6:bb:86:7b:72:30:
                    eb:e5:33:e5:93:d6:69:64:06:f0:24:81:7e:e2:b5:
                    36:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:11:2E:51:2A:72:A8:87:51:3C:88:99:FE:70:41:32:1C:6B:E9:24
            X509v3 Authority Key Identifier:
                keyid:ED:2F:A6:86:D1:8C:80:20:AF:C6:AD:F5:5A:FD:BE:66:0D:BA:AC:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7S-mhtGMgCCvxq31Wv2-Zg26rBU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d78fc5-bf3e-4686-8d85-c33f8a21122c/1/7S-mhtGMgCCvxq31Wv2-Zg26rBU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d78fc5-bf3e-4686-8d85-c33f8a21122c/1/7S-mhtGMgCCvxq31Wv2-Zg26rBU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:ef:79:0f:b1:9e:63:c7:9b:ea:a8:fa:69:eb:d6:9a:1b:1a:
         5e:2f:b8:9f:3c:96:db:1c:25:c9:8f:0e:4c:7c:f9:d6:43:27:
         37:b0:4d:41:1b:1e:f3:d0:85:04:17:7f:da:69:eb:e9:0e:39:
         45:61:84:50:40:a8:66:2e:87:a6:7e:c2:de:a9:a6:e3:25:85:
         6a:8d:ac:26:b2:ff:25:61:20:1b:8b:3b:a4:63:6b:6b:7a:bb:
         c6:90:da:a0:9d:27:15:fe:cf:d0:ba:8e:02:39:9f:17:b4:8a:
         e9:97:30:78:3d:1d:13:8d:35:50:17:77:15:1c:fb:1d:42:42:
         11:eb:90:6c:56:9d:6e:85:33:9b:2f:1e:15:6b:f7:5d:30:52:
         f7:ec:5a:2b:fb:30:5e:5f:52:06:07:07:53:43:f9:03:2e:99:
         ec:ca:32:80:9b:73:e2:e6:c9:aa:3e:eb:5d:0e:79:b5:e8:97:
         9c:69:bb:36:8d:20:0a:e0:f1:e4:ef:6d:68:df:92:f4:ff:9d:
         ea:d1:2e:52:67:b4:99:a8:12:17:c9:52:a6:0c:ad:0a:73:9d:
         92:6f:5d:e4:80:8d:c4:5b:6c:ef:02:ba:1f:f4:11:10:e9:26:
         50:0e:15:77:d5:5b:93:74:fd:e1:d6:74:94:c6:6e:fd:f2:d0:
         52:d3:98:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:18:45 2025 by rpki-client