Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft
File:                     1-RCU3VhuycgtHBaTDK9rv-8htbU.mft (raw, json)
Hash identifier:          5A5a1sqPZ6C7UM9qDj1uNERLmI0DiX/23WGFLwDEsD4=
Subject key identifier:   B8:7F:03:99:01:2F:D6:AC:13:53:5D:0F:9D:3E:6D:A7:E8:6B:B6:28
Authority key identifier: F9:10:94:DD:58:6E:C9:C8:2D:1C:16:93:0C:AF:6B:BF:EF:21:B5:B5
Certificate issuer:       /CN=f91094dd586ec9c82d1c16930caf6bbfef21b5b5
Certificate serial:       01964F6C7E5D905CF183BC0CDAAB040408FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-RCU3VhuycgtHBaTDK9rv-8htbU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft
Manifest number:          1079
Signing time:             Sat 19 Apr 2025 19:00:32 +0000
Manifest this update:     Sat 19 Apr 2025 19:00:32 +0000
Manifest next update:     Sun 20 Apr 2025 19:00:32 +0000
Files and hashes:         1: 1-RCU3VhuycgtHBaTDK9rv-8htbU.crl (hash: qt8kGX+66SnPBbqMq0ZHE3SDST3yZGMOMJ9v5qRBYaU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-RCU3VhuycgtHBaTDK9rv-8htbU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 16:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4f:6c:7e:5d:90:5c:f1:83:bc:0c:da:ab:04:04:08:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f91094dd586ec9c82d1c16930caf6bbfef21b5b5
        Validity
            Not Before: Apr 19 19:00:32 2025 GMT
            Not After : Apr 20 19:00:32 2025 GMT
        Subject: CN=b87f0399012fd6ac13535d0f9d3e6da7e86bb628
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a3:b7:e2:18:c7:d5:68:54:8c:28:12:f7:be:
                    36:ac:87:fb:e6:c8:92:0f:7a:7a:35:47:12:86:b2:
                    ab:a2:03:4c:a9:54:d2:82:d8:9e:e9:ec:4f:bf:4a:
                    7b:39:5f:04:df:6c:c7:3a:ad:f4:92:c6:70:34:20:
                    74:c8:c8:41:04:aa:5e:34:34:5e:22:d1:10:1c:d1:
                    0b:6d:d0:b4:ce:ff:52:48:63:34:c0:06:ab:0e:bc:
                    3d:d3:fd:a8:ac:5c:42:e7:6e:96:c6:33:b4:28:91:
                    0a:5b:f7:57:41:cb:46:38:cb:2a:90:dc:4f:e4:89:
                    2a:e7:b9:12:f8:df:44:fa:fd:c0:a5:6e:9d:45:25:
                    4e:9b:fc:a2:36:ef:18:69:54:25:de:89:10:9c:d1:
                    a1:e7:af:38:d6:43:2d:52:15:1f:33:44:40:79:77:
                    17:3a:69:ee:b6:c8:1c:c9:61:1c:95:d1:d3:f9:6f:
                    db:30:62:8c:b2:09:b9:39:3a:1b:a2:ec:c5:1b:d6:
                    fb:a8:7d:3c:ac:6d:21:78:ac:e3:47:a8:cb:46:fc:
                    00:b2:21:be:ea:6e:ba:e5:fc:3c:92:ce:6b:3d:b0:
                    a1:87:3e:22:bf:81:da:85:fa:b3:1d:85:fe:35:1b:
                    4a:b2:fd:d1:7c:04:be:06:c5:6e:4b:0b:d2:4e:e8:
                    52:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:7F:03:99:01:2F:D6:AC:13:53:5D:0F:9D:3E:6D:A7:E8:6B:B6:28
            X509v3 Authority Key Identifier:
                keyid:F9:10:94:DD:58:6E:C9:C8:2D:1C:16:93:0C:AF:6B:BF:EF:21:B5:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RCU3VhuycgtHBaTDK9rv-8htbU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:e8:8e:5c:4b:80:dd:6d:d7:4f:4b:24:25:ca:d1:89:8b:c9:
         ee:e7:e2:80:8a:7a:0d:ab:01:69:61:42:d8:32:b1:9b:78:59:
         f2:f9:08:ae:2a:dc:92:a0:80:2e:d6:90:95:c9:fb:5e:79:4b:
         8f:c6:97:fb:53:8d:a6:bd:90:57:50:9d:48:ec:e7:44:fe:de:
         8b:0f:c6:8a:9a:2e:b5:0e:97:78:6c:d7:45:44:3f:71:92:59:
         27:ed:56:b5:c0:93:7a:d9:b4:f6:90:69:a5:4a:40:69:f2:09:
         a5:6e:fa:22:18:0d:0c:ca:96:74:db:52:9a:7a:a9:3d:0f:a0:
         3b:d4:fd:72:bc:d9:6e:27:71:82:0d:dc:85:02:f6:d1:bb:11:
         81:10:d8:96:74:1f:d9:d0:92:9a:3a:f3:e3:59:18:ab:33:70:
         3a:58:d3:12:2f:74:c4:a7:03:50:eb:b6:47:f7:a4:0b:60:7f:
         45:d8:4e:43:91:ed:86:51:07:83:a7:a5:70:1c:b5:1d:f2:34:
         43:22:3e:1d:f1:30:7c:3a:55:5c:03:89:b6:55:4c:70:1c:51:
         d9:47:73:24:2a:aa:19:9e:8e:35:a9:10:a9:f9:13:bd:0f:10:
         cc:a6:6a:ce:32:d9:8d:88:68:eb:3b:f2:bb:b4:c3:0a:b8:82:
         a4:35:e3:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:11:00 2025 by rpki-client