Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/1-zutfQaFmVztNRCLLhFSWnqrFBg.mft
File:                     1-zutfQaFmVztNRCLLhFSWnqrFBg.mft (raw, json)
Hash identifier:          AH+U0kAtGfZDphVWurKg0fxiFuPeemiMR3vhEGThPsc=
Subject key identifier:   04:28:6D:68:81:DF:F3:6F:AC:3D:61:18:7F:9C:C9:C9:FC:A2:CB:0E
Authority key identifier: FB:3B:AD:7D:06:85:99:5C:ED:35:10:8B:2E:11:52:5A:7A:AB:14:18
Certificate issuer:       /CN=fb3bad7d0685995ced35108b2e11525a7aab1418
Certificate serial:       01963BE60E87F6D1AC9AF8AABA166F6AC05B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-zutfQaFmVztNRCLLhFSWnqrFBg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/1-zutfQaFmVztNRCLLhFSWnqrFBg.mft
Manifest number:          05E7
Signing time:             Wed 16 Apr 2025 00:00:54 +0000
Manifest this update:     Wed 16 Apr 2025 00:00:54 +0000
Manifest next update:     Thu 17 Apr 2025 00:00:54 +0000
Files and hashes:         1: 1-zutfQaFmVztNRCLLhFSWnqrFBg.crl (hash: Ub5mv53PPC7vnei+Wxe5YiyGmm393pvGFN6jHJawf7Q=)
                          2: bS2AXyQj6T-v-BFQFVgN8omhTFI.roa (hash: Hlm2+aXt9COQOoJS5S5Wj7t+eBfLw0yjo9KgiG+EY2U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/1-zutfQaFmVztNRCLLhFSWnqrFBg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/1-zutfQaFmVztNRCLLhFSWnqrFBg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-zutfQaFmVztNRCLLhFSWnqrFBg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3b:e6:0e:87:f6:d1:ac:9a:f8:aa:ba:16:6f:6a:c0:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb3bad7d0685995ced35108b2e11525a7aab1418
        Validity
            Not Before: Apr 16 00:00:54 2025 GMT
            Not After : Apr 17 00:00:54 2025 GMT
        Subject: CN=04286d6881dff36fac3d61187f9cc9c9fca2cb0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:37:21:33:8a:d7:34:80:1c:b4:c9:73:05:6a:
                    f7:f7:72:75:b8:9c:3d:13:db:a1:a1:a3:37:d8:50:
                    46:8f:66:0c:68:0b:7e:ab:21:ac:46:58:70:b7:f7:
                    cb:26:fd:54:ac:3b:7c:b1:19:3a:23:bf:6d:fe:9f:
                    3c:42:7a:9d:45:8c:2e:00:da:83:33:51:e9:99:9f:
                    99:f5:55:3b:1f:84:38:7b:0f:cb:ef:a4:f7:e0:99:
                    09:7f:b5:f5:00:bf:07:2f:86:86:41:ef:ab:79:19:
                    f2:80:65:75:d4:f7:3b:fd:dc:ba:f6:ea:e8:99:91:
                    3e:75:96:7c:ab:34:47:ef:2e:31:05:47:87:d6:ed:
                    cd:c6:e2:9f:da:00:c5:5d:00:20:88:e5:66:92:b6:
                    8c:61:c8:a5:7d:a5:bf:51:22:7b:ac:36:00:e7:ca:
                    09:dd:31:b3:80:06:31:2d:d0:db:4c:74:69:37:fd:
                    ad:76:7d:69:c1:b1:97:69:0f:8e:24:4a:ca:32:47:
                    8e:cc:42:ad:04:68:d3:b1:0f:5a:0e:4a:28:80:c2:
                    6e:82:54:ab:6b:ce:de:5b:a9:1f:f2:cb:63:6e:33:
                    15:87:8e:95:9a:cf:04:0c:55:7d:d2:79:79:58:fd:
                    c4:b3:a8:96:42:b6:97:90:1c:2a:90:44:a8:d7:e6:
                    d1:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:28:6D:68:81:DF:F3:6F:AC:3D:61:18:7F:9C:C9:C9:FC:A2:CB:0E
            X509v3 Authority Key Identifier:
                keyid:FB:3B:AD:7D:06:85:99:5C:ED:35:10:8B:2E:11:52:5A:7A:AB:14:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zutfQaFmVztNRCLLhFSWnqrFBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/1-zutfQaFmVztNRCLLhFSWnqrFBg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/1-zutfQaFmVztNRCLLhFSWnqrFBg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:11:8f:df:8c:a2:e7:23:94:b9:1b:0e:3c:7e:4e:56:6d:bd:
         f7:89:53:4b:9a:fe:1f:52:b9:1a:85:99:80:66:d0:1d:7b:89:
         33:d9:92:83:d5:28:4f:e1:c1:da:32:9a:be:c0:92:07:6e:8d:
         76:02:cf:43:a4:dd:ff:a4:61:7b:b7:eb:65:87:dd:62:99:a1:
         36:0e:fa:67:5f:13:1a:b8:a6:5d:86:4b:8f:cd:36:4d:08:73:
         22:d5:b5:e1:1e:99:3a:f9:48:1b:ff:66:19:de:46:0a:72:19:
         20:70:73:cd:4d:42:74:2b:85:3e:42:21:da:1d:e1:d9:04:14:
         be:58:49:16:d6:56:2c:0d:26:24:51:ae:cb:ed:7f:42:7f:fd:
         8d:64:06:91:5a:88:a6:5a:28:6f:dd:30:af:04:0b:46:72:3e:
         dd:43:f0:a0:b0:c0:b8:51:2f:4b:cd:83:93:3b:2b:e2:95:0c:
         65:c5:93:03:58:a9:2f:64:b2:c4:1b:cd:67:3b:09:52:be:fe:
         9d:ab:87:fb:62:58:d3:a6:ab:30:88:28:37:75:20:42:d1:5b:
         8c:4e:2d:15:3e:50:3b:62:cc:fd:be:9f:d8:11:55:54:ea:95:
         01:43:4d:0c:84:de:9a:3a:c3:5f:51:2c:74:d0:4b:8b:2e:85:
         e9:73:35:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 06:37:43 2025 by rpki-client