Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft
File:                     2n_WDMjnu2KTIE8woibgCHUksLU.mft (raw, json)
Hash identifier:          83Xn2hzq0ToJWCyaeHxuQzgO5I3eexEIVm4blxbD2Xk=
Subject key identifier:   74:B0:39:62:3C:2F:C2:6D:AD:CB:31:75:E4:5B:D4:E5:D1:A2:C4:8C
Authority key identifier: DA:7F:D6:0C:C8:E7:BB:62:93:20:4F:30:A2:26:E0:08:75:24:B0:B5
Certificate issuer:       /CN=da7fd60cc8e7bb6293204f30a226e0087524b0b5
Certificate serial:       01964DEC929C14F1EE0EA9CE2029DC4CEAD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2n_WDMjnu2KTIE8woibgCHUksLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft
Manifest number:          14F6
Signing time:             Sat 19 Apr 2025 12:01:11 +0000
Manifest this update:     Sat 19 Apr 2025 12:01:11 +0000
Manifest next update:     Sun 20 Apr 2025 12:01:11 +0000
Files and hashes:         1: 2n_WDMjnu2KTIE8woibgCHUksLU.crl (hash: ryQ/3ngsTLlvPTN9IjRUH4E+Fav0Ugh+G2iGkHNZ7rA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2n_WDMjnu2KTIE8woibgCHUksLU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 12:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4d:ec:92:9c:14:f1:ee:0e:a9:ce:20:29:dc:4c:ea:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da7fd60cc8e7bb6293204f30a226e0087524b0b5
        Validity
            Not Before: Apr 19 12:01:11 2025 GMT
            Not After : Apr 20 12:01:11 2025 GMT
        Subject: CN=74b039623c2fc26dadcb3175e45bd4e5d1a2c48c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:5b:cb:e6:8f:82:15:9a:2b:77:92:91:e6:d5:
                    fd:49:1d:f3:99:a9:e0:f4:fb:e7:cb:e3:16:fd:b1:
                    65:6a:bf:cf:8f:87:08:a6:ba:9a:be:46:80:b6:6f:
                    cd:b2:2d:82:7e:57:0a:e2:f5:18:41:45:b6:f4:3e:
                    41:64:79:08:9a:75:db:59:38:2f:53:44:81:e4:99:
                    89:31:c9:b8:dc:e0:31:d1:3b:d6:6f:b6:d3:45:f5:
                    a3:0a:ef:bd:32:f1:c7:f3:d5:50:a1:0c:dc:87:89:
                    f4:30:8d:1b:08:7f:d9:2a:62:b4:38:2e:c3:94:cd:
                    9e:27:2f:13:f2:0c:d2:b6:78:e2:7c:4b:76:ea:2b:
                    a3:79:29:22:1a:45:69:77:12:10:c0:28:66:4d:7e:
                    cc:5b:3c:87:0c:4b:22:74:df:35:07:2f:cc:d6:2a:
                    c9:5d:3c:de:45:f5:91:e4:df:d0:79:2e:37:ee:54:
                    30:1d:01:f1:f8:76:05:9d:48:8e:3c:22:62:74:f0:
                    8b:aa:4e:24:f4:1e:7a:c5:b0:e6:8d:b0:ec:5d:ea:
                    1c:56:d6:86:38:04:f0:c2:ac:c1:16:cb:11:57:75:
                    5f:92:a7:52:ac:88:b1:ed:38:33:e2:55:7a:c1:06:
                    30:07:d3:09:65:b3:4f:0a:57:eb:7a:e7:42:3b:18:
                    ab:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:B0:39:62:3C:2F:C2:6D:AD:CB:31:75:E4:5B:D4:E5:D1:A2:C4:8C
            X509v3 Authority Key Identifier:
                keyid:DA:7F:D6:0C:C8:E7:BB:62:93:20:4F:30:A2:26:E0:08:75:24:B0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2n_WDMjnu2KTIE8woibgCHUksLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:b4:55:30:60:2c:9d:f9:e8:83:37:f1:0d:43:64:f2:da:cb:
         87:20:52:21:1f:e7:5c:41:15:9c:6b:26:9e:87:76:be:2d:41:
         9c:92:f1:85:72:4c:fc:10:88:94:bd:e6:b8:9b:ff:8e:27:65:
         c6:55:f7:d5:09:c6:51:ce:af:dc:e4:e9:ef:9a:1d:e7:12:63:
         c5:f3:64:84:e9:23:74:ff:6d:7a:6d:e8:f8:20:92:6c:ad:88:
         e8:df:a9:b6:2f:58:fd:7f:c8:5c:9e:97:c0:ed:fa:01:39:d6:
         82:c5:81:50:55:cf:98:91:57:b3:b6:c5:a8:44:b7:ae:8f:9b:
         43:01:c2:44:3c:78:f0:29:f0:bd:27:33:43:02:14:6c:0b:40:
         27:4c:00:e5:b7:20:d6:b6:05:a6:84:27:ab:f1:88:c3:a2:2f:
         e1:8f:2d:1e:a9:61:08:17:b7:5a:42:85:b5:a1:af:da:79:14:
         e4:95:95:b8:a5:8e:ef:df:de:6b:12:99:e2:1c:53:c7:6a:78:
         86:9b:ca:56:45:b6:22:a7:73:73:76:37:20:4e:cc:2d:e1:5e:
         86:ac:69:f2:9b:d4:bd:42:eb:ac:f3:f4:60:c0:ec:52:f3:a3:
         9a:b6:05:30:5e:36:91:ca:e1:29:b6:6e:4e:6a:bb:eb:83:c6:
         57:02:da:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:13:58 2025 by rpki-client