Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/8c48ac-d96a-441a-b186-8787d0bf1207/1/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.mft
File:                     74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.mft (raw, json)
Hash identifier:          v3eiBFF2WDBjaYUwSFwDrMnfDL/1YhDom81/4BN92NA=
Subject key identifier:   18:C6:6A:8E:AD:C0:79:2F:6F:EC:98:6C:70:95:10:F9:2C:B2:E6:4A
Authority key identifier: EF:80:3A:49:0F:D6:20:35:18:BB:E6:44:BC:72:09:AF:B7:7E:C7:B4
Certificate issuer:       /CN=ef803a490fd6203518bbe644bc7209afb77ec7b4
Certificate serial:       01964AB427E319FA229FDA48061F397B3181
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/8c48ac-d96a-441a-b186-8787d0bf1207/1/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.mft
Manifest number:          0692
Signing time:             Fri 18 Apr 2025 21:00:42 +0000
Manifest this update:     Fri 18 Apr 2025 21:00:42 +0000
Manifest next update:     Sat 19 Apr 2025 21:00:42 +0000
Files and hashes:         1: 74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.crl (hash: e18yPiej0LPY5x3cVqoPXm+8cf9UixJYmiT/D6dq+aI=)
                          2: ScldZDNPQSfRnsRt5khqoPE91NU.roa (hash: KUeiCd9GvmA+LCWqv73j10Yntn6kGl4O83uDHMjp9xg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/8c48ac-d96a-441a-b186-8787d0bf1207/1/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/8c48ac-d96a-441a-b186-8787d0bf1207/1/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4a:b4:27:e3:19:fa:22:9f:da:48:06:1f:39:7b:31:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef803a490fd6203518bbe644bc7209afb77ec7b4
        Validity
            Not Before: Apr 18 21:00:42 2025 GMT
            Not After : Apr 19 21:00:42 2025 GMT
        Subject: CN=18c66a8eadc0792f6fec986c709510f92cb2e64a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:4f:71:7c:18:62:1d:dc:81:2b:69:ac:ff:dc:
                    7b:3b:6b:9a:fd:e8:0e:e6:bc:d9:4d:f5:f5:9d:16:
                    ff:1e:a8:14:ea:4c:73:5e:b6:6c:39:34:f5:f1:7f:
                    bb:46:7c:7b:de:a8:e7:27:c6:2f:49:0f:b8:ea:a9:
                    26:4e:49:22:bd:2a:b5:0c:17:00:a9:07:98:03:55:
                    91:9a:61:b5:58:ec:f2:c5:1d:00:63:9d:d2:ab:dd:
                    02:66:8c:41:59:75:83:80:0a:1b:25:8d:d4:33:16:
                    ad:dd:c6:26:b3:89:23:54:a4:13:ef:c4:0b:95:d2:
                    bb:2e:6d:3a:43:9f:c7:10:7e:f3:88:e4:eb:da:7a:
                    23:d6:06:40:d3:5d:93:9a:83:8c:9b:8c:d5:88:a6:
                    d0:c5:47:d2:ab:c3:64:39:e3:17:b2:73:fc:6e:9d:
                    bf:c2:2d:0d:c3:5b:35:39:20:0b:9f:c9:10:3b:52:
                    70:50:f1:08:57:0a:16:79:5c:9e:3f:18:40:dc:93:
                    5c:b5:22:7f:67:83:94:9e:46:11:ec:6f:4c:aa:4c:
                    e3:9d:60:1b:30:85:35:0b:e7:91:23:75:9a:f7:ee:
                    bf:dd:4a:41:5e:df:e3:26:d5:89:bc:5d:57:2f:5a:
                    82:44:83:bf:3d:31:9a:1c:d1:0c:59:44:50:13:c2:
                    ca:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:C6:6A:8E:AD:C0:79:2F:6F:EC:98:6C:70:95:10:F9:2C:B2:E6:4A
            X509v3 Authority Key Identifier:
                keyid:EF:80:3A:49:0F:D6:20:35:18:BB:E6:44:BC:72:09:AF:B7:7E:C7:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8c48ac-d96a-441a-b186-8787d0bf1207/1/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8c48ac-d96a-441a-b186-8787d0bf1207/1/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:17:61:41:c0:21:a1:fb:ae:36:c1:e2:3b:74:47:c8:7a:a2:
         9e:5a:2d:20:cf:82:f8:5b:14:38:7c:43:5a:93:53:e4:a6:46:
         c9:9c:6b:96:61:c1:5a:e8:74:9a:12:08:1d:20:83:b8:7e:b4:
         b8:c1:c8:bc:15:dd:f0:03:9c:be:a5:e9:91:10:45:d5:0a:24:
         d3:c5:8f:0c:b7:7e:cd:96:46:43:d9:c8:5a:1f:43:7d:9d:f7:
         15:f9:d7:c1:dc:45:79:38:78:29:c9:d2:ef:48:e9:cd:67:ca:
         ed:8f:12:ff:60:f6:c2:89:24:a8:6c:59:c8:48:f8:1f:37:8e:
         a3:b8:ca:84:c5:17:a2:02:90:7d:b9:17:67:c0:a1:c8:49:2a:
         72:f6:f1:47:56:f6:9a:05:bf:e5:fb:73:3d:cd:d9:e6:e6:80:
         e1:95:6f:0c:7f:11:bb:b7:91:89:88:c4:fa:9b:fc:cb:19:4a:
         3d:d8:88:b4:95:71:31:bf:24:3e:08:1a:4d:b2:9c:62:82:dd:
         49:45:d6:cf:2b:b6:55:8e:79:f1:38:41:4f:a3:d0:11:86:9f:
         0d:2b:3a:5c:55:52:3e:7d:48:36:f3:cc:0e:8c:b1:76:d7:73:
         25:20:91:59:3e:aa:68:86:21:f0:fc:54:cb:5f:6c:84:9b:d6:
         9a:48:01:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:40:58 2025 by rpki-client