Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft
File:                     7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft (raw, json)
Hash identifier:          MQ01bg0B/ELxH3b0oFOgXso9ClhbLkTmRrEUyfo62bs=
Subject key identifier:   93:C6:A9:46:1B:99:B1:11:02:56:E2:BF:27:79:CB:AF:F2:C9:04:B5
Authority key identifier: EC:8F:F9:6E:AE:2D:44:8E:C7:84:9D:17:3B:55:2F:15:F0:F7:04:C1
Certificate issuer:       /CN=ec8ff96eae2d448ec7849d173b552f15f0f704c1
Certificate serial:       01964FDADEDCE4FD9C63BB2148B9B4FA556C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7I_5bq4tRI7HhJ0XO1UvFfD3BME.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft
Manifest number:          1040
Signing time:             Sat 19 Apr 2025 21:01:06 +0000
Manifest this update:     Sat 19 Apr 2025 21:01:06 +0000
Manifest next update:     Sun 20 Apr 2025 21:01:06 +0000
Files and hashes:         1: 7I_5bq4tRI7HhJ0XO1UvFfD3BME.crl (hash: sfh7enKurRktJW+RyK7Iu1o8fUyCVyiDMncS5d8QOac=)
                          2: Z6AAXuXVnBC0PnCaLGdVCJDGtlo.roa (hash: mDlSiJmg0BY9JeNZWlLLq7LDLb9jKGHM+mo1bQwoBt0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7I_5bq4tRI7HhJ0XO1UvFfD3BME.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 16:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4f:da:de:dc:e4:fd:9c:63:bb:21:48:b9:b4:fa:55:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec8ff96eae2d448ec7849d173b552f15f0f704c1
        Validity
            Not Before: Apr 19 21:01:06 2025 GMT
            Not After : Apr 20 21:01:06 2025 GMT
        Subject: CN=93c6a9461b99b1110256e2bf2779cbaff2c904b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:04:76:8d:49:80:48:b1:f6:0e:17:54:45:58:
                    55:1a:b5:04:59:76:78:0f:52:71:f5:16:3e:fd:31:
                    9b:91:78:29:e1:99:97:50:54:1e:00:22:a5:85:28:
                    60:ab:b7:54:6d:06:96:50:18:c6:84:46:36:11:6b:
                    90:34:75:8e:de:ee:70:2d:3a:63:3b:90:84:b6:a8:
                    09:3b:bb:d1:65:b9:8f:b8:a5:d0:22:7a:cc:25:7a:
                    c8:25:c2:f3:1f:70:ca:8e:c4:de:12:e0:4b:ad:03:
                    89:a6:da:73:87:ca:ba:2d:c5:6e:c7:d3:77:be:b5:
                    e8:3e:0f:06:68:54:5f:2b:56:38:6c:8a:a9:78:d3:
                    9b:4b:95:fe:79:5b:35:8f:d9:f1:ad:a7:f6:2a:52:
                    9e:d3:09:88:b7:b9:31:1f:be:54:4b:5e:0a:87:1d:
                    f6:a0:46:5b:6d:23:6d:bc:3c:63:74:0e:f3:bf:a5:
                    6d:59:83:44:da:1d:72:57:e4:56:bb:00:c9:58:94:
                    29:5a:49:f1:22:82:36:47:84:10:f9:aa:df:b4:33:
                    01:be:14:f9:07:8e:66:2a:de:fc:7c:27:be:e9:eb:
                    f2:51:a6:b4:a9:88:d5:6d:c7:d6:65:c2:87:cf:3c:
                    cc:19:d9:82:2a:a2:62:81:e7:9f:c3:3a:77:da:6f:
                    80:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:C6:A9:46:1B:99:B1:11:02:56:E2:BF:27:79:CB:AF:F2:C9:04:B5
            X509v3 Authority Key Identifier:
                keyid:EC:8F:F9:6E:AE:2D:44:8E:C7:84:9D:17:3B:55:2F:15:F0:F7:04:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7I_5bq4tRI7HhJ0XO1UvFfD3BME.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:93:3e:b4:e6:fc:15:e6:2c:83:7e:f4:f6:a8:3a:92:15:b8:
         90:76:85:9c:d0:4e:3a:8b:c6:78:cd:7e:44:28:59:85:84:9b:
         3e:b3:03:bb:cf:0b:b6:73:df:1c:07:77:18:73:af:ec:43:e8:
         f0:b1:3b:34:62:0b:56:40:7e:6f:fb:fa:c5:8c:87:fd:e0:d7:
         08:30:05:b4:14:ad:33:42:f5:a8:3f:35:ff:09:0a:cf:8e:a2:
         00:be:89:2d:84:8a:51:7a:dc:8c:dd:c4:49:ea:c7:7b:ff:21:
         5b:54:cf:13:51:ed:f8:fd:c1:0c:dd:7b:17:cd:51:6f:32:0d:
         3a:6c:35:df:b5:f8:96:df:3f:4e:7f:5d:30:ad:50:23:ed:70:
         14:b9:9b:dd:7c:3c:1a:c0:af:28:72:b1:4a:be:e5:8a:9d:37:
         d0:15:89:2d:87:0f:29:48:2b:d5:fb:1f:e2:0d:62:a7:b1:ae:
         56:e5:48:a6:33:02:29:c3:e4:48:70:3f:f5:ff:ad:83:2f:29:
         d7:c8:95:d6:9e:5a:d2:01:88:bf:ce:7b:32:52:d7:ec:c3:60:
         38:28:a4:8d:1b:2f:be:bc:cb:f8:5a:8c:ce:3f:44:d4:52:e6:
         58:67:e0:3b:cf:77:94:0e:84:8b:8b:30:19:a9:97:e0:7d:31:
         1f:04:ed:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:25:14 2025 by rpki-client