Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft
File:                     CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft (raw, json)
Hash identifier:          kuGkx1tlFCMeuj9DP3DnftM5Ltzoi+epjI8GIsV39yU=
Subject key identifier:   18:84:FB:5B:7E:04:56:47:EA:FD:2A:A0:E5:F9:1F:9D:CF:1B:10:3A
Authority key identifier: 09:79:F5:37:B0:9E:BE:AD:DF:98:78:74:9D:1F:88:75:3C:54:0C:75
Certificate issuer:       /CN=0979f537b09ebeaddf9878749d1f88753c540c75
Certificate serial:       019659EFDB8CE0B5A00CE738002DB7F87974
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CXn1N7Cevq3fmHh0nR-IdTxUDHU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft
Manifest number:          14FD
Signing time:             Mon 21 Apr 2025 20:00:13 +0000
Manifest this update:     Mon 21 Apr 2025 20:00:13 +0000
Manifest next update:     Tue 22 Apr 2025 20:00:13 +0000
Files and hashes:         1: CXn1N7Cevq3fmHh0nR-IdTxUDHU.crl (hash: 9SUDXjawehtWpH5zAl8vzBlXv4dmpI/9P6ILocshvJc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CXn1N7Cevq3fmHh0nR-IdTxUDHU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 13:46:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:59:ef:db:8c:e0:b5:a0:0c:e7:38:00:2d:b7:f8:79:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0979f537b09ebeaddf9878749d1f88753c540c75
        Validity
            Not Before: Apr 21 20:00:13 2025 GMT
            Not After : Apr 22 20:00:13 2025 GMT
        Subject: CN=1884fb5b7e045647eafd2aa0e5f91f9dcf1b103a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a6:00:d0:c3:75:a4:79:34:d6:96:a1:e6:e4:
                    fd:5b:e7:40:3c:3e:c5:ff:9e:e0:d3:6e:a8:93:a4:
                    3c:a1:4e:e0:45:7e:d1:de:71:ef:29:da:e2:ae:f0:
                    2f:57:62:6c:67:d5:a8:88:b4:17:15:15:8a:d1:e0:
                    4c:01:88:9a:ad:cf:94:03:71:59:37:63:7a:0d:76:
                    69:af:2f:c5:a2:f5:26:84:f6:fe:28:92:03:8d:6a:
                    1a:87:c2:85:2d:26:1a:0c:04:c6:57:0d:2f:49:49:
                    b1:b7:6e:8a:a5:37:47:2c:70:24:d6:09:5a:d7:69:
                    de:c9:c2:e7:9d:f4:fe:f9:c1:4b:5d:ef:42:b7:d7:
                    65:4c:c9:d3:6c:58:61:cf:6a:10:b0:52:46:b1:14:
                    1c:c4:96:8b:08:13:3a:d1:f5:61:c4:c7:d6:b0:91:
                    14:c6:e3:2f:04:16:f6:74:66:ec:7c:d5:3d:ab:ef:
                    f1:a5:c8:34:9e:ad:24:34:b6:66:a5:eb:ec:fe:85:
                    08:ef:f5:ed:37:69:c1:03:f9:d2:e4:67:a9:e8:13:
                    c6:35:1e:99:c3:91:a7:1a:3b:41:cb:30:10:1a:fd:
                    db:ad:0e:27:df:7c:16:e5:0c:32:6f:ee:69:9a:84:
                    b0:07:a6:87:c6:64:48:c2:a1:6a:43:25:02:0e:bc:
                    98:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:84:FB:5B:7E:04:56:47:EA:FD:2A:A0:E5:F9:1F:9D:CF:1B:10:3A
            X509v3 Authority Key Identifier:
                keyid:09:79:F5:37:B0:9E:BE:AD:DF:98:78:74:9D:1F:88:75:3C:54:0C:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXn1N7Cevq3fmHh0nR-IdTxUDHU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:61:13:d0:12:70:ab:fa:0c:1c:f8:33:62:57:8c:c9:3f:84:
         66:e0:f5:0b:fe:00:08:f2:4f:4d:95:1c:58:f6:c2:52:14:57:
         70:89:85:50:65:94:d2:94:21:94:79:36:d3:5b:5c:74:b9:19:
         eb:98:da:0b:53:59:70:3c:76:8b:6e:ae:4e:18:67:45:70:52:
         bb:1c:e2:a0:a4:e5:2e:57:85:45:76:c5:50:44:37:3f:a1:11:
         f5:04:6e:e2:1d:ae:12:c0:61:fa:1a:c6:30:38:e8:70:45:ce:
         b5:bb:26:82:e6:20:56:98:3a:0d:cb:0a:4e:f7:3e:c3:04:e6:
         d9:b5:43:04:c9:8a:c4:c4:ed:e1:63:1f:4b:27:64:0c:a0:31:
         46:d0:dc:19:52:ea:b8:7f:73:89:3a:e9:8b:58:17:c0:d3:b6:
         ff:5a:cb:77:7d:62:f9:e1:7d:01:02:e7:bf:0f:6f:aa:72:5a:
         0e:e0:1b:12:54:65:db:1a:2a:45:8a:e7:fe:56:ec:fd:55:bf:
         29:5e:a3:bb:e2:99:32:ad:a4:c2:a6:5f:7e:ae:cd:73:36:6e:
         f0:49:fb:ff:a0:69:f3:40:42:87:22:7b:c2:7c:4d:4b:58:a6:
         4d:6e:21:c5:fa:bf:30:26:ee:3a:a2:36:0b:bc:80:95:6d:5e:
         01:c3:e3:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:24:54 2025 by rpki-client