Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.mft
File:                     RPXBZ5XtiCVQC69Xp6cFtRN1qL4.mft (raw, json)
Hash identifier:          36tZY+UPmbFwQtXCm8SXLLfdHtxbZ3FVBorjjO75pAA=
Subject key identifier:   59:7A:51:98:4B:13:EE:57:18:6C:AA:16:22:74:5F:26:F0:25:3D:EA
Authority key identifier: 44:F5:C1:67:95:ED:88:25:50:0B:AF:57:A7:A7:05:B5:13:75:A8:BE
Certificate issuer:       /CN=44f5c16795ed8825500baf57a7a705b51375a8be
Certificate serial:       01958C612ADB5940E7B090597747DD90FBBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.mft
Manifest number:          1493
Signing time:             Wed 12 Mar 2025 22:02:12 +0000
Manifest this update:     Wed 12 Mar 2025 22:02:12 +0000
Manifest next update:     Thu 13 Mar 2025 22:02:12 +0000
Files and hashes:         1: RPXBZ5XtiCVQC69Xp6cFtRN1qL4.crl (hash: XfHrY7Us13bKxbUAEf8oW9osFKJ6+X9k2+KjHU2V8mI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 19:14:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8c:61:2a:db:59:40:e7:b0:90:59:77:47:dd:90:fb:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44f5c16795ed8825500baf57a7a705b51375a8be
        Validity
            Not Before: Mar 12 22:02:12 2025 GMT
            Not After : Mar 13 22:02:12 2025 GMT
        Subject: CN=597a51984b13ee57186caa1622745f26f0253dea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:fa:12:68:95:c3:8b:13:89:d8:8d:e7:c0:6c:
                    8a:4c:b4:ad:c2:2a:65:fe:51:b4:3f:82:f9:af:a5:
                    fe:06:d9:05:9d:a2:ab:7a:d8:1a:ef:4e:1e:a9:84:
                    61:62:a8:d4:ed:ee:f5:1e:d3:56:8e:e9:e2:0f:4f:
                    b2:f6:bd:d1:df:ff:9c:8e:6c:07:07:aa:4d:77:83:
                    25:6f:34:f7:fa:e8:03:07:7c:b0:89:5d:fb:ed:f5:
                    33:b0:29:b2:a1:df:92:58:ce:81:f0:1b:91:70:f1:
                    ce:be:76:e6:34:18:60:46:c7:e8:b4:df:16:1e:cb:
                    b0:0e:48:b7:0a:0c:92:e5:88:87:46:1d:c2:e7:e4:
                    c0:56:45:07:15:ca:11:a2:c2:3f:66:ea:38:5f:58:
                    33:f7:76:dd:27:9e:b0:9c:71:16:01:65:8e:0e:a3:
                    12:3e:8e:25:64:d6:eb:7c:12:b3:7a:ae:93:cd:2e:
                    06:eb:79:cb:ee:70:69:d5:7d:32:1c:a3:c7:18:bd:
                    e0:72:41:79:fa:9c:74:9d:b1:cb:6f:b1:ec:e5:e4:
                    30:d0:ba:c7:e0:fd:d9:4a:e4:87:07:47:5a:20:e3:
                    96:c5:ae:ba:f8:76:a1:6c:3e:17:72:9f:c2:90:4f:
                    55:16:d0:a2:07:a4:9f:50:3d:49:7b:0b:42:6f:f7:
                    81:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:7A:51:98:4B:13:EE:57:18:6C:AA:16:22:74:5F:26:F0:25:3D:EA
            X509v3 Authority Key Identifier:
                keyid:44:F5:C1:67:95:ED:88:25:50:0B:AF:57:A7:A7:05:B5:13:75:A8:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:fa:6a:be:c4:53:a7:3f:51:0b:78:1d:b2:62:66:82:91:2a:
         a0:6e:60:90:a5:a6:98:4e:f5:d3:ee:21:3f:e5:46:c9:6c:9f:
         02:a7:80:91:31:9d:68:65:14:01:31:4d:47:22:2e:2c:0f:18:
         6d:f7:3a:a6:a2:85:b1:08:e7:f4:f3:d3:32:f2:d7:4c:94:8a:
         70:68:ef:ed:f5:7c:33:17:45:b6:ab:e0:f8:2e:41:dd:4f:7d:
         58:aa:0e:39:e0:95:53:6a:1b:73:46:62:13:43:0f:10:36:34:
         3a:4d:b5:4b:d2:8e:36:b5:09:65:49:18:14:5c:bb:28:86:44:
         78:bb:98:bb:8b:4e:d2:ac:71:1e:7d:71:56:ce:46:77:20:45:
         3a:13:a4:59:79:83:f7:12:00:1d:e8:ee:7c:e9:0b:7c:7f:db:
         c5:bf:10:1c:f4:b8:90:6e:e3:75:f8:96:fa:c6:99:81:40:e4:
         0c:b3:c4:26:05:d0:a6:71:7d:fe:66:84:15:ff:13:41:7f:1a:
         33:ff:6c:4b:e3:9c:b8:fe:15:98:ff:82:c0:7a:ee:52:03:a5:
         3d:72:71:63:2f:00:80:19:e4:f7:6f:c4:34:31:c6:d1:a9:b8:
         c6:0f:78:b2:30:ee:d9:cd:cc:fb:04:14:3a:72:8e:cb:18:ea:
         91:26:10:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:52:33 2025 by rpki-client