Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/fb4c2b-ebd2-46b2-bcd0-84db39403768/1/n2fgyFot61Rm6r3JCEYViph3hKI.mft
File:                     n2fgyFot61Rm6r3JCEYViph3hKI.mft (raw, json)
Hash identifier:          M7EPr1/Oq/RmzMTez3OoNc9R2PK8jjW/ADWq4xQk4C8=
Subject key identifier:   26:3F:4A:6F:0C:BE:C1:72:F8:95:76:B8:BF:9E:F1:CC:7A:EA:48:6B
Authority key identifier: 9F:67:E0:C8:5A:2D:EB:54:66:EA:BD:C9:08:46:15:8A:98:77:84:A2
Certificate issuer:       /CN=9f67e0c85a2deb5466eabdc90846158a987784a2
Certificate serial:       01964CD927FDA44DFD24FEB4C9197F8CA241
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n2fgyFot61Rm6r3JCEYViph3hKI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/fb4c2b-ebd2-46b2-bcd0-84db39403768/1/n2fgyFot61Rm6r3JCEYViph3hKI.mft
Manifest number:          12BD
Signing time:             Sat 19 Apr 2025 07:00:21 +0000
Manifest this update:     Sat 19 Apr 2025 07:00:21 +0000
Manifest next update:     Sun 20 Apr 2025 07:00:21 +0000
Files and hashes:         1: n2fgyFot61Rm6r3JCEYViph3hKI.crl (hash: sNx1apc4AiOSvGM/iuOKZLmevo89G6iroXy9lerkRwc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/fb4c2b-ebd2-46b2-bcd0-84db39403768/1/n2fgyFot61Rm6r3JCEYViph3hKI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/fb4c2b-ebd2-46b2-bcd0-84db39403768/1/n2fgyFot61Rm6r3JCEYViph3hKI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n2fgyFot61Rm6r3JCEYViph3hKI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 07:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4c:d9:27:fd:a4:4d:fd:24:fe:b4:c9:19:7f:8c:a2:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f67e0c85a2deb5466eabdc90846158a987784a2
        Validity
            Not Before: Apr 19 07:00:21 2025 GMT
            Not After : Apr 20 07:00:21 2025 GMT
        Subject: CN=263f4a6f0cbec172f89576b8bf9ef1cc7aea486b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3c:63:72:da:c6:c4:2c:40:2a:7d:aa:f2:62:
                    b6:51:8c:bf:6e:68:e1:ec:8a:e3:48:7f:33:4e:cd:
                    2c:dd:29:c7:66:14:b0:c8:e6:53:48:6c:23:c2:4f:
                    20:23:36:61:0e:25:64:a9:56:38:a1:78:27:5a:9b:
                    5e:6e:fa:ed:7f:62:97:60:2a:6d:4f:02:c7:64:65:
                    c8:e5:23:4f:be:36:87:0e:be:bd:f5:1c:83:12:a1:
                    dc:4f:09:59:ab:1d:da:d2:ee:4d:62:b3:ac:37:5a:
                    55:59:51:9c:4f:47:3c:6f:e8:19:fb:f6:5d:df:11:
                    37:b6:a7:37:72:46:8d:20:45:4f:bb:70:e7:a9:b6:
                    e3:e9:d5:5c:03:eb:ca:52:24:a3:8a:44:f7:4f:0b:
                    d8:6a:91:2b:fd:12:4a:e6:6d:10:ab:f4:f3:17:e8:
                    99:4d:df:5d:42:0e:b8:0a:ab:be:27:86:3d:be:7b:
                    94:9d:5d:e5:db:4d:5b:4b:56:f9:fc:ac:f1:22:e3:
                    f5:e5:31:10:a3:25:67:00:01:dd:41:f9:c6:56:6d:
                    ba:c5:f5:2a:99:26:95:db:ce:5f:70:db:a1:c4:cb:
                    81:d8:72:92:5e:81:1b:bb:23:3f:c6:2a:ec:0e:1d:
                    db:af:e1:0e:4e:f8:d8:f7:98:05:85:b8:6d:75:a8:
                    dd:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:3F:4A:6F:0C:BE:C1:72:F8:95:76:B8:BF:9E:F1:CC:7A:EA:48:6B
            X509v3 Authority Key Identifier:
                keyid:9F:67:E0:C8:5A:2D:EB:54:66:EA:BD:C9:08:46:15:8A:98:77:84:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2fgyFot61Rm6r3JCEYViph3hKI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fb4c2b-ebd2-46b2-bcd0-84db39403768/1/n2fgyFot61Rm6r3JCEYViph3hKI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fb4c2b-ebd2-46b2-bcd0-84db39403768/1/n2fgyFot61Rm6r3JCEYViph3hKI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:03:ad:84:a6:87:8e:12:88:7d:ed:68:b8:ac:e2:f0:55:f9:
         53:85:97:45:1f:f1:1e:1b:67:ba:e5:b1:56:64:46:4a:14:f8:
         88:2d:6d:bd:ef:ad:e7:eb:6b:a5:a1:b3:40:f0:07:be:e8:e4:
         27:8f:6e:f1:1e:f2:49:ee:ce:21:be:54:14:23:9d:36:1b:cb:
         3e:d7:ac:87:99:31:12:65:43:40:ea:dd:42:ea:5d:ce:cb:24:
         c7:cc:88:ae:c3:9d:7f:7a:df:b3:bc:9c:72:90:d2:8b:42:68:
         bf:35:bd:03:18:08:8b:65:fe:1e:d5:e8:41:d6:2e:b6:2e:87:
         68:38:ba:4d:e4:69:9c:a4:9f:77:31:1e:c7:21:a0:36:98:bc:
         05:58:9f:00:92:7c:fd:96:89:f1:00:25:a7:1c:a6:af:bd:63:
         de:20:bc:1d:18:cf:7f:77:09:3d:5d:6c:97:d5:70:94:4a:40:
         77:bf:5b:a1:6f:05:12:1a:33:51:c6:0c:02:e3:ce:aa:48:f6:
         37:e6:47:b1:5e:fa:63:cd:30:19:6d:cc:12:5c:0e:a0:e3:1e:
         9a:bf:c4:a7:35:d0:bd:77:ea:05:96:6b:6f:e8:af:1d:ea:3e:
         59:d1:e9:e1:01:09:ad:1d:81:8f:7e:54:99:5e:95:54:aa:9d:
         88:50:14:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 16:11:59 2025 by rpki-client