Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft
File:                     A-7ifdtJC7lmnuug4RaUFkyi6Og.mft (raw, json)
Hash identifier:          Bky6DVtNq5nuu8I1fWePQqkyPo1rUngDCZx0Uo+nOTw=
Subject key identifier:   53:60:F0:E6:AA:6C:74:BB:A2:08:BB:F4:32:99:1B:59:31:3F:76:CD
Authority key identifier: 03:EE:E2:7D:DB:49:0B:B9:66:9E:EB:A0:E1:16:94:16:4C:A2:E8:E8
Certificate issuer:       /CN=03eee27ddb490bb9669eeba0e11694164ca2e8e8
Certificate serial:       0196349AAA893427B341A4D183C1A83DCF16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A-7ifdtJC7lmnuug4RaUFkyi6Og.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft
Manifest number:          01A9
Signing time:             Mon 14 Apr 2025 14:01:13 +0000
Manifest this update:     Mon 14 Apr 2025 14:01:13 +0000
Manifest next update:     Tue 15 Apr 2025 14:01:13 +0000
Files and hashes:         1: A-7ifdtJC7lmnuug4RaUFkyi6Og.crl (hash: dara3wtN3nrCTzTaDYpbEChLdC68hS0EeE8N29yom88=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A-7ifdtJC7lmnuug4RaUFkyi6Og.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 15 Apr 2025 14:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:34:9a:aa:89:34:27:b3:41:a4:d1:83:c1:a8:3d:cf:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03eee27ddb490bb9669eeba0e11694164ca2e8e8
        Validity
            Not Before: Apr 14 14:01:13 2025 GMT
            Not After : Apr 15 14:01:13 2025 GMT
        Subject: CN=5360f0e6aa6c74bba208bbf432991b59313f76cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f0:19:5d:10:5d:ae:b9:09:e2:57:a1:65:82:
                    d4:33:20:0b:9f:e1:36:34:aa:6d:b1:0d:cf:65:fb:
                    6b:9c:81:b9:a4:ae:18:23:bf:47:b1:5f:fb:db:10:
                    d4:28:84:5e:c8:b3:0a:47:7a:f9:67:eb:67:2d:76:
                    05:e7:1a:e6:cf:d9:93:f6:b2:a1:dc:7a:3a:a0:9c:
                    0c:ce:ae:67:7e:e4:bb:6f:73:d6:6e:18:62:e5:01:
                    6f:e6:52:1a:7d:e8:6a:a4:c5:45:c9:ed:3d:98:3c:
                    84:14:f9:3f:cf:6c:be:f6:ac:84:c7:fd:72:57:9a:
                    6f:d0:5e:3e:58:b9:33:5e:6a:82:24:a1:8b:a0:28:
                    29:1f:75:05:fe:d0:cd:37:60:48:73:22:bd:b1:a3:
                    5d:dc:84:14:ca:a7:f1:11:a8:82:46:ff:9a:e0:53:
                    24:06:bc:22:5c:e0:22:d5:a1:45:d8:74:97:89:c8:
                    fe:e6:1e:70:eb:d4:23:20:c6:86:f2:9c:10:97:4e:
                    bd:d0:1d:82:77:0d:2f:a1:59:9d:33:33:91:e9:7c:
                    35:7c:ab:1a:9a:cd:4e:f9:4c:e8:8d:54:5a:1c:a9:
                    3c:7f:ce:93:dd:7f:58:25:2d:28:45:ad:e5:18:8f:
                    8b:cc:d5:eb:c6:d0:c8:0e:27:c2:04:d6:35:e7:8c:
                    02:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:60:F0:E6:AA:6C:74:BB:A2:08:BB:F4:32:99:1B:59:31:3F:76:CD
            X509v3 Authority Key Identifier:
                keyid:03:EE:E2:7D:DB:49:0B:B9:66:9E:EB:A0:E1:16:94:16:4C:A2:E8:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-7ifdtJC7lmnuug4RaUFkyi6Og.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:d1:12:0f:d5:6e:84:5e:d6:11:1f:29:e7:ce:e5:3a:04:21:
         e3:a7:1d:b8:91:d5:9b:34:17:88:67:41:f6:ec:a0:4c:e5:06:
         ab:86:52:8a:9f:ce:29:71:8b:56:61:73:87:ba:4b:3d:26:95:
         4a:6f:fb:09:c4:d7:a0:60:d9:e3:b0:e0:85:5b:98:7f:97:e1:
         ed:01:72:88:8f:1a:92:f2:0e:80:31:15:d3:16:c7:e5:37:00:
         0f:78:20:7c:c0:a2:c8:0e:96:48:3a:69:2f:41:70:ac:62:4d:
         66:50:51:18:62:a3:90:f5:30:0b:90:15:53:87:8b:10:6e:fc:
         c8:4b:33:05:87:31:80:3e:b7:ca:8e:37:3c:80:e6:d0:e2:6a:
         3a:a1:27:7b:1f:6d:6a:42:af:55:6a:42:ba:83:1e:5a:94:a4:
         50:96:fd:72:a9:63:99:1d:95:7e:03:2f:76:b9:5c:6e:57:5d:
         85:c4:cd:5c:40:fa:ff:a5:e2:47:1c:48:27:c2:a5:fb:dc:8e:
         a5:46:44:89:f1:df:44:44:7f:3d:85:fd:4c:6c:e2:40:a3:02:
         da:53:03:91:b4:a7:58:7b:12:7d:e2:c3:88:4b:7d:9c:fe:05:
         95:82:d2:77:85:37:a3:08:7f:3f:f9:e0:b1:83:62:2e:be:0c:
         b8:85:6c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 18:15:09 2025 by rpki-client