Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/998886-2f98-40c6-b8d7-842038124763/1/viyseNddsY5zyuA-Gr5Zh0lSkxo.mft
File:                     viyseNddsY5zyuA-Gr5Zh0lSkxo.mft (raw, json)
Hash identifier:          OUCAMJ1SgOpNikndirBBhr4he8JIvWxCYN/evM9WN9Q=
Subject key identifier:   42:17:26:C9:32:D1:27:7D:08:26:85:34:74:74:44:3A:06:6F:4F:95
Authority key identifier: BE:2C:AC:78:D7:5D:B1:8E:73:CA:E0:3E:1A:BE:59:87:49:52:93:1A
Certificate issuer:       /CN=be2cac78d75db18e73cae03e1abe59874952931a
Certificate serial:       0196458DA3343B642261256ED4EE7AD23543
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/viyseNddsY5zyuA-Gr5Zh0lSkxo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/998886-2f98-40c6-b8d7-842038124763/1/viyseNddsY5zyuA-Gr5Zh0lSkxo.mft
Manifest number:          1209
Signing time:             Thu 17 Apr 2025 21:00:32 +0000
Manifest this update:     Thu 17 Apr 2025 21:00:32 +0000
Manifest next update:     Fri 18 Apr 2025 21:00:32 +0000
Files and hashes:         1: viyseNddsY5zyuA-Gr5Zh0lSkxo.crl (hash: 3ivmwGjapS1LX7DjJoPDfR6ZedbUvTOLTzRSBv5eSKs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/998886-2f98-40c6-b8d7-842038124763/1/viyseNddsY5zyuA-Gr5Zh0lSkxo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/998886-2f98-40c6-b8d7-842038124763/1/viyseNddsY5zyuA-Gr5Zh0lSkxo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/viyseNddsY5zyuA-Gr5Zh0lSkxo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 21:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:45:8d:a3:34:3b:64:22:61:25:6e:d4:ee:7a:d2:35:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be2cac78d75db18e73cae03e1abe59874952931a
        Validity
            Not Before: Apr 17 21:00:32 2025 GMT
            Not After : Apr 18 21:00:32 2025 GMT
        Subject: CN=421726c932d1277d082685347474443a066f4f95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:af:ab:fc:d9:37:91:72:af:8d:b3:12:31:23:
                    6e:5e:6b:db:e6:2a:d1:46:5a:57:80:8c:87:7a:9c:
                    53:bd:8c:a7:39:87:14:38:21:b1:d6:6a:5d:03:7e:
                    a9:2c:e0:98:b2:11:85:46:ef:4c:8b:50:7f:0b:32:
                    3d:06:58:ef:57:73:a8:d1:1e:00:da:d6:e1:39:d2:
                    a0:a7:42:dd:0e:b3:43:fe:09:4e:57:dd:31:b2:94:
                    cb:73:72:db:61:f4:ec:35:04:0b:20:e8:d3:65:bf:
                    07:3a:2d:14:51:1c:63:0d:ef:1b:7b:f8:00:15:95:
                    5c:20:bf:99:69:44:7d:08:d1:79:fc:57:70:00:0e:
                    de:ce:4b:59:8d:a9:c8:02:0b:11:2c:6e:c6:a0:fb:
                    2e:5c:96:ba:99:79:ce:9d:a5:a8:ed:f8:51:be:e9:
                    92:30:f5:6c:ce:27:c9:31:70:64:9b:97:7c:83:9b:
                    d1:f2:c6:5e:39:65:02:2d:ed:21:5c:79:c7:d3:ef:
                    9d:d2:b2:0a:bc:ff:a9:ad:d4:22:61:49:a9:f2:8e:
                    84:e7:89:89:1b:26:9c:40:fe:d3:f9:55:cd:1f:79:
                    d4:97:d5:45:86:92:37:c9:1a:28:64:af:c7:bd:28:
                    b6:89:af:56:6a:88:cd:e6:81:94:0a:9b:d2:af:f7:
                    ed:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:17:26:C9:32:D1:27:7D:08:26:85:34:74:74:44:3A:06:6F:4F:95
            X509v3 Authority Key Identifier:
                keyid:BE:2C:AC:78:D7:5D:B1:8E:73:CA:E0:3E:1A:BE:59:87:49:52:93:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/viyseNddsY5zyuA-Gr5Zh0lSkxo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/998886-2f98-40c6-b8d7-842038124763/1/viyseNddsY5zyuA-Gr5Zh0lSkxo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/998886-2f98-40c6-b8d7-842038124763/1/viyseNddsY5zyuA-Gr5Zh0lSkxo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:74:2e:4f:60:dd:0a:8f:e4:cb:7d:6c:6b:c8:7a:e8:18:cf:
         2e:e2:d3:b9:5c:19:dd:df:9e:83:a4:e0:7c:29:3f:bf:b6:68:
         7a:71:ec:fc:04:f9:0b:e7:b0:48:be:41:74:ee:41:9b:1b:fe:
         32:78:e4:48:6a:b3:dd:c2:ad:47:1c:60:97:cb:3c:fc:c0:8b:
         81:27:b0:a9:83:14:b9:59:f2:a1:29:67:94:a8:ff:a3:a0:ab:
         c1:13:21:13:03:54:dd:d7:6f:51:33:2c:bd:df:f2:d3:90:f6:
         ba:48:d0:f9:14:4f:dc:cf:39:e6:39:98:5b:b0:3a:c7:ec:53:
         2b:7e:48:fc:f3:e3:83:1a:81:9a:8e:f7:5e:04:dc:21:90:dc:
         17:a3:8c:ec:a9:40:17:d9:a1:66:8a:8b:26:31:bf:97:fb:9d:
         cd:5e:42:3f:53:ef:3a:96:a8:3d:df:6f:e4:d6:16:f0:2e:bb:
         46:44:d7:44:01:7e:d8:5e:17:63:fd:0c:0b:fe:e6:6c:ed:75:
         a9:98:ee:23:65:b4:67:9f:e3:c2:c6:cc:b6:8c:f5:e5:ab:5d:
         a0:88:cb:f1:5c:78:69:fd:19:7b:81:12:7e:6f:ef:9c:ab:82:
         92:20:fa:ab:6d:ae:3c:ed:5f:66:bb:db:7f:70:a2:e8:05:44:
         9e:da:9b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:26:59 2025 by rpki-client