Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/478aeb-d97f-47b7-81b0-a17dab701c41/1/564DMp48D3Pqg_tjfKIK7OFqjrQ.mft
File:                     564DMp48D3Pqg_tjfKIK7OFqjrQ.mft (raw, json)
Hash identifier:          7TpFBUV+BB+2b5JnLjLpXC8pdfTBE9bjEgENCxh3rXo=
Subject key identifier:   B7:40:88:D1:97:61:D4:4A:71:C3:16:D1:73:D4:00:52:9E:B9:B5:D6
Authority key identifier: E7:AE:03:32:9E:3C:0F:73:EA:83:FB:63:7C:A2:0A:EC:E1:6A:8E:B4
Certificate issuer:       /CN=e7ae03329e3c0f73ea83fb637ca20aece16a8eb4
Certificate serial:       01965492F09BE4ECB7ABA3AB52B7C4D00C50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/564DMp48D3Pqg_tjfKIK7OFqjrQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/478aeb-d97f-47b7-81b0-a17dab701c41/1/564DMp48D3Pqg_tjfKIK7OFqjrQ.mft
Manifest number:          14FC
Signing time:             Sun 20 Apr 2025 19:00:38 +0000
Manifest this update:     Sun 20 Apr 2025 19:00:38 +0000
Manifest next update:     Mon 21 Apr 2025 19:00:38 +0000
Files and hashes:         1: 564DMp48D3Pqg_tjfKIK7OFqjrQ.crl (hash: 65DZkkc1gobCuRY8kmtDLn5N2gifokO2lZJbX5nhXCg=)
                          2: Q15HcwZBg-b0xM3n5sFCeWUqPMU.roa (hash: FQv+IrKxJOgkLV5JEMBWkTPo0W/To8EL8sbfGOS1Pm4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/478aeb-d97f-47b7-81b0-a17dab701c41/1/564DMp48D3Pqg_tjfKIK7OFqjrQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/478aeb-d97f-47b7-81b0-a17dab701c41/1/564DMp48D3Pqg_tjfKIK7OFqjrQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/564DMp48D3Pqg_tjfKIK7OFqjrQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 19:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:54:92:f0:9b:e4:ec:b7:ab:a3:ab:52:b7:c4:d0:0c:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7ae03329e3c0f73ea83fb637ca20aece16a8eb4
        Validity
            Not Before: Apr 20 19:00:38 2025 GMT
            Not After : Apr 21 19:00:38 2025 GMT
        Subject: CN=b74088d19761d44a71c316d173d400529eb9b5d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:93:96:01:40:a1:0e:ec:fe:b8:2e:dc:08:b3:
                    df:a8:bc:a6:b1:09:23:47:e2:0b:93:7c:85:8b:77:
                    9c:71:13:81:3a:6e:87:e8:e1:ba:37:4b:f5:b1:24:
                    1c:eb:be:db:96:83:1e:1d:7e:b6:ba:b3:b2:f3:a9:
                    07:58:95:41:3a:b5:26:85:f8:93:1f:c3:e1:17:fd:
                    46:c0:63:f6:7d:e4:27:b1:93:95:fa:23:bf:99:7d:
                    bd:22:08:00:ae:35:35:72:3a:2d:31:cf:ea:30:1a:
                    30:cb:62:54:a6:db:6b:2f:fb:9a:f7:fb:f0:a3:5f:
                    4e:72:0d:ef:37:1e:9a:7f:b5:cf:bf:08:e5:fa:15:
                    0d:b4:90:65:40:17:b6:b6:60:b4:41:48:3d:ab:99:
                    54:fc:a4:be:87:e2:bc:47:a6:6b:15:dc:67:9f:bf:
                    f4:b9:2b:80:7c:1f:20:d9:e7:77:13:92:25:93:16:
                    55:b6:29:d5:69:50:fb:37:7c:b3:7c:1d:40:bd:bf:
                    12:bb:0d:0b:5a:37:0e:08:09:57:bf:95:d8:9c:d5:
                    5a:36:be:f2:e5:6b:6d:f1:38:d7:9b:9c:5d:3d:a5:
                    f1:53:b8:11:f1:89:f4:cc:4c:76:5f:50:be:ba:03:
                    c5:aa:7c:3d:90:6e:10:16:68:24:bf:da:61:e0:ec:
                    1a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:40:88:D1:97:61:D4:4A:71:C3:16:D1:73:D4:00:52:9E:B9:B5:D6
            X509v3 Authority Key Identifier:
                keyid:E7:AE:03:32:9E:3C:0F:73:EA:83:FB:63:7C:A2:0A:EC:E1:6A:8E:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/564DMp48D3Pqg_tjfKIK7OFqjrQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/478aeb-d97f-47b7-81b0-a17dab701c41/1/564DMp48D3Pqg_tjfKIK7OFqjrQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/478aeb-d97f-47b7-81b0-a17dab701c41/1/564DMp48D3Pqg_tjfKIK7OFqjrQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:d8:22:ee:f6:6c:60:a5:c4:a6:df:60:f9:3f:d1:e9:e6:73:
         63:11:2c:8d:2f:5d:95:fd:50:95:e2:9d:3f:7d:75:07:8e:81:
         2a:39:a6:f2:8f:68:cc:4f:97:02:28:3e:41:0e:33:f2:e3:e8:
         05:ca:4c:b9:6c:71:bd:8e:df:16:53:4f:55:78:36:f2:d6:98:
         a4:12:5a:44:74:7e:03:ac:d4:84:34:f2:a0:1a:20:2c:c2:d7:
         25:98:59:6d:39:96:fd:28:35:e8:e9:88:ab:d9:1b:05:de:43:
         68:b4:65:60:6b:b2:82:41:cc:8f:b4:84:fd:17:db:dc:18:23:
         91:09:29:68:93:aa:cc:15:65:ab:d5:91:a7:93:d1:e6:99:23:
         5c:45:ce:81:ce:da:e8:78:03:e6:f4:a0:a9:64:79:72:b4:d3:
         0f:f5:98:bf:86:36:58:52:a2:c4:0a:d6:74:86:bc:38:66:23:
         19:50:20:59:a3:ed:84:7c:d1:37:ce:04:47:11:eb:12:30:3f:
         12:94:02:65:f9:32:40:5e:c0:62:8a:66:81:15:8d:e1:bf:b7:
         d1:b1:54:3e:59:a2:a5:35:c7:85:1d:b7:7e:b8:89:c3:df:3d:
         54:b4:16:37:b7:0c:ba:33:6d:f8:bf:cd:9d:19:2e:5a:e2:bc:
         d2:8f:aa:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:16:21 2025 by rpki-client