Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/f584cf-e8f2-44cb-bdce-41b61069a7e2/1/pj6AVRuSNrvAzXHFHRlZGA58j3w.mft
File:                     pj6AVRuSNrvAzXHFHRlZGA58j3w.mft (raw, json)
Hash identifier:          qiBe6ERgiGdqigPihcbMZXMIPmEuI1fNv7Od31EfTPg=
Subject key identifier:   69:FF:FE:D1:00:81:81:4C:8B:93:2E:30:1D:B7:E4:14:41:EF:36:5F
Authority key identifier: A6:3E:80:55:1B:92:36:BB:C0:CD:71:C5:1D:19:59:18:0E:7C:8F:7C
Certificate issuer:       /CN=a63e80551b9236bbc0cd71c51d1959180e7c8f7c
Certificate serial:       01964F6C66E494DEA629C4A135F6E2C3E9C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pj6AVRuSNrvAzXHFHRlZGA58j3w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/f584cf-e8f2-44cb-bdce-41b61069a7e2/1/pj6AVRuSNrvAzXHFHRlZGA58j3w.mft
Manifest number:          123C
Signing time:             Sat 19 Apr 2025 19:00:26 +0000
Manifest this update:     Sat 19 Apr 2025 19:00:26 +0000
Manifest next update:     Sun 20 Apr 2025 19:00:26 +0000
Files and hashes:         1: pj6AVRuSNrvAzXHFHRlZGA58j3w.crl (hash: WilgxraEQDNJY80D+PVkAFwWTvkUs7WYPZs1b8cypCU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/f584cf-e8f2-44cb-bdce-41b61069a7e2/1/pj6AVRuSNrvAzXHFHRlZGA58j3w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/f584cf-e8f2-44cb-bdce-41b61069a7e2/1/pj6AVRuSNrvAzXHFHRlZGA58j3w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pj6AVRuSNrvAzXHFHRlZGA58j3w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 19:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4f:6c:66:e4:94:de:a6:29:c4:a1:35:f6:e2:c3:e9:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a63e80551b9236bbc0cd71c51d1959180e7c8f7c
        Validity
            Not Before: Apr 19 19:00:26 2025 GMT
            Not After : Apr 20 19:00:26 2025 GMT
        Subject: CN=69fffed10081814c8b932e301db7e41441ef365f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:94:e1:24:52:92:3b:ed:cd:5f:64:79:23:07:
                    c5:dc:92:d4:2a:e0:af:01:c9:27:ad:e7:21:84:26:
                    b2:f4:81:5b:4a:d4:0a:51:9f:f5:da:22:07:c6:ad:
                    f7:8c:52:3f:5d:5b:13:aa:5e:1c:f1:b9:45:45:e5:
                    40:de:46:e0:9a:15:88:85:b0:b3:66:67:6d:35:a0:
                    6f:9b:9e:7c:02:db:c4:a6:ec:e9:36:0a:d3:9d:fa:
                    59:c6:7e:18:1a:5d:52:de:e8:94:2b:aa:21:78:52:
                    06:22:9a:db:31:6c:b5:2f:32:d1:e1:03:b8:6c:ce:
                    d4:81:cb:aa:93:1d:66:f0:d6:0c:ad:0e:6c:fd:d7:
                    1b:86:48:30:57:52:54:68:93:1d:a3:a6:3f:4c:0b:
                    e7:45:48:80:6a:70:be:ca:9b:8e:58:ba:95:92:ac:
                    d5:29:4c:a8:d8:e7:02:b9:cd:8a:e4:e5:ca:39:ff:
                    d8:f4:a8:9c:4f:d9:c7:43:30:c2:2f:96:ba:c7:f6:
                    fe:84:d5:37:37:53:cd:8d:f7:03:12:4c:19:ef:2a:
                    df:19:1a:88:21:01:9b:c3:ef:64:78:c6:49:92:5e:
                    19:c1:c9:62:2d:ab:8a:5d:40:da:09:d3:12:58:43:
                    eb:d2:cc:9c:dd:7a:14:ff:ce:d2:2f:47:1a:58:8d:
                    2a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:FF:FE:D1:00:81:81:4C:8B:93:2E:30:1D:B7:E4:14:41:EF:36:5F
            X509v3 Authority Key Identifier:
                keyid:A6:3E:80:55:1B:92:36:BB:C0:CD:71:C5:1D:19:59:18:0E:7C:8F:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pj6AVRuSNrvAzXHFHRlZGA58j3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f584cf-e8f2-44cb-bdce-41b61069a7e2/1/pj6AVRuSNrvAzXHFHRlZGA58j3w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f584cf-e8f2-44cb-bdce-41b61069a7e2/1/pj6AVRuSNrvAzXHFHRlZGA58j3w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:03:e7:04:77:68:25:bf:a4:78:09:1c:df:eb:f3:58:9f:2a:
         d8:7b:4a:74:f8:d5:2e:84:9c:78:19:c4:59:3d:30:e4:86:cd:
         ab:f3:f7:94:74:4d:0b:11:0b:56:0f:e9:1a:7e:f5:4c:56:e4:
         a2:50:07:df:f2:9a:b0:a9:43:d3:ee:f1:f5:2a:ac:82:69:a5:
         f9:8f:4a:c9:23:41:b3:80:24:0f:a8:a4:75:d6:3c:17:69:9e:
         a6:b0:bb:44:73:9e:d8:16:ff:a3:d7:ca:91:ee:3d:c0:09:a0:
         11:00:bb:23:83:9d:61:4f:b2:05:bb:49:f6:3d:e2:0b:a3:7d:
         09:43:47:2d:d6:86:05:71:02:c2:5a:98:34:80:a7:0b:40:a9:
         fe:41:a2:90:b8:06:01:26:1a:4f:cc:ea:6a:0c:50:f1:af:ad:
         32:c0:67:ab:99:72:3e:e6:50:84:1f:e6:84:d9:68:42:57:07:
         f9:e4:63:1d:12:51:1b:f4:a7:ba:fc:10:a6:ad:26:42:ee:39:
         3f:03:65:43:34:2d:7d:07:1c:d3:10:af:04:30:72:9a:62:ba:
         1e:d4:4e:41:af:9b:99:fb:14:15:fd:cf:c2:08:27:22:65:a8:
         ab:27:9a:50:e1:88:68:d2:ff:45:d5:a5:2f:75:29:56:a3:85:
         32:9b:cc:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:21:02 2025 by rpki-client