Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d7a04c-3999-42e7-ae7c-861184b881b0/1/_lTc_6IG9BAIIGtR8O8ZycWA3Sg.mft
File:                     _lTc_6IG9BAIIGtR8O8ZycWA3Sg.mft (raw, json)
Hash identifier:          F0l8FoyeU55jcRMMf9Q0WO7S3TSxFoaBb9HOV0WXawo=
Subject key identifier:   77:71:8C:6E:53:F6:6E:13:34:F2:71:C3:8F:8A:98:8B:EB:A0:35:73
Authority key identifier: FE:54:DC:FF:A2:06:F4:10:08:20:6B:51:F0:EF:19:C9:C5:80:DD:28
Certificate issuer:       /CN=fe54dcffa206f41008206b51f0ef19c9c580dd28
Certificate serial:       019647B2E48FBC9CAAB3979C616E9E66C8F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_lTc_6IG9BAIIGtR8O8ZycWA3Sg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/d7a04c-3999-42e7-ae7c-861184b881b0/1/_lTc_6IG9BAIIGtR8O8ZycWA3Sg.mft
Manifest number:          1214
Signing time:             Fri 18 Apr 2025 07:00:28 +0000
Manifest this update:     Fri 18 Apr 2025 07:00:28 +0000
Manifest next update:     Sat 19 Apr 2025 07:00:28 +0000
Files and hashes:         1: _lTc_6IG9BAIIGtR8O8ZycWA3Sg.crl (hash: 13O5ZWHGyuqt1oQlf/a0Rp3jR8vxbhAAuM+ihaw7H9E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/d7a04c-3999-42e7-ae7c-861184b881b0/1/_lTc_6IG9BAIIGtR8O8ZycWA3Sg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/d7a04c-3999-42e7-ae7c-861184b881b0/1/_lTc_6IG9BAIIGtR8O8ZycWA3Sg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_lTc_6IG9BAIIGtR8O8ZycWA3Sg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 07:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:47:b2:e4:8f:bc:9c:aa:b3:97:9c:61:6e:9e:66:c8:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe54dcffa206f41008206b51f0ef19c9c580dd28
        Validity
            Not Before: Apr 18 07:00:28 2025 GMT
            Not After : Apr 19 07:00:28 2025 GMT
        Subject: CN=77718c6e53f66e1334f271c38f8a988beba03573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:bf:68:d2:28:13:d4:32:de:64:94:12:e9:e4:
                    3e:2b:f3:b9:df:f3:0a:b1:ab:ce:f5:ec:f7:0e:72:
                    43:e8:16:f2:13:cc:93:d8:e7:49:6c:d6:19:e7:ce:
                    7d:6e:64:d0:b0:95:a3:c8:4c:29:a0:69:eb:44:40:
                    75:e9:aa:38:6b:bd:99:a0:16:f0:1b:d0:a8:45:7a:
                    e0:66:e9:d5:fd:ca:1d:70:bf:bd:52:42:b0:57:82:
                    56:11:2b:5a:eb:35:6a:b4:b0:31:99:04:04:21:68:
                    9e:72:23:ca:3e:f8:55:58:df:a4:06:6f:36:ad:dc:
                    00:20:47:d6:e7:86:9d:b9:74:22:35:65:b1:db:09:
                    d7:16:d0:94:18:a7:70:73:5f:10:c3:56:5b:3f:3a:
                    0a:d5:e3:3d:f3:8b:8b:df:a0:7a:b9:3c:31:02:f1:
                    96:a1:d4:fe:5c:34:50:4c:8d:d8:c9:ce:d4:22:ae:
                    00:b3:9a:7a:89:cc:8f:c9:f5:3a:3d:6e:53:00:65:
                    6c:4f:23:5c:94:f1:c2:82:29:84:56:1f:6d:3a:3e:
                    72:c1:93:59:32:6c:6d:0b:8e:24:bd:5d:a3:56:cf:
                    34:bd:8f:da:94:46:b3:06:69:8e:07:5a:16:59:fe:
                    c2:57:2a:34:34:79:3c:56:8d:b7:ce:71:86:2b:91:
                    36:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:71:8C:6E:53:F6:6E:13:34:F2:71:C3:8F:8A:98:8B:EB:A0:35:73
            X509v3 Authority Key Identifier:
                keyid:FE:54:DC:FF:A2:06:F4:10:08:20:6B:51:F0:EF:19:C9:C5:80:DD:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_lTc_6IG9BAIIGtR8O8ZycWA3Sg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d7a04c-3999-42e7-ae7c-861184b881b0/1/_lTc_6IG9BAIIGtR8O8ZycWA3Sg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d7a04c-3999-42e7-ae7c-861184b881b0/1/_lTc_6IG9BAIIGtR8O8ZycWA3Sg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:99:ae:c5:6a:5f:d9:0c:dc:3d:c9:9b:97:ef:d9:85:17:a4:
         b7:97:2a:4c:d4:c0:76:f5:20:65:7b:a4:51:05:e4:b8:bf:9c:
         df:a3:78:de:5e:36:0e:2b:e7:09:8f:22:ef:0a:a9:4b:22:06:
         56:dd:d9:28:13:bd:9c:ba:43:7c:c0:72:0f:19:a1:f6:a1:bd:
         5a:0a:60:af:23:9f:6e:26:7e:83:aa:c6:cc:a7:a4:94:c2:e3:
         42:7f:a1:87:8c:19:dc:d0:d6:4b:4c:a6:d2:d1:91:ef:ef:4d:
         1f:8a:59:46:ea:a3:60:16:87:84:d5:c4:49:c2:e0:a7:a4:b1:
         8c:a5:35:69:ea:78:fb:96:3e:4b:c8:b7:ff:08:d6:ba:e3:76:
         e6:02:a4:b7:1e:4b:53:c3:b7:fe:df:09:d1:43:4d:59:62:4f:
         49:42:93:cd:11:93:14:14:0f:ae:74:cb:10:23:34:f4:72:6e:
         1e:eb:82:95:0e:ce:74:ed:5b:7b:60:a9:86:89:8f:f9:01:0b:
         a4:21:f9:20:3a:cb:18:9f:b1:30:e0:cb:09:32:1b:4f:3a:77:
         7b:1f:c1:1b:72:48:62:90:9a:bf:76:60:5d:2a:01:1c:7d:34:
         82:66:59:07:70:42:35:5a:c9:40:42:0d:be:99:b2:07:c6:0e:
         1b:f1:5b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 13:42:55 2025 by rpki-client