Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.mft
File:                     GrY03HT2A3ukcxHRJ0IOdvKWvlQ.mft (raw, json)
Hash identifier:          BsdsYlg/Jy4w2HfbUnHEeaP6yvNVxjWA/6yhkcmvGDE=
Subject key identifier:   01:EF:31:FB:28:6B:92:27:30:A9:8E:68:55:AD:7E:10:53:02:E5:74
Authority key identifier: 1A:B6:34:DC:74:F6:03:7B:A4:73:11:D1:27:42:0E:76:F2:96:BE:54
Certificate issuer:       /CN=1ab634dc74f6037ba47311d127420e76f296be54
Certificate serial:       01965236F6C4903938B38E07466EF9F65160
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.mft
Manifest number:          1502
Signing time:             Sun 20 Apr 2025 08:00:55 +0000
Manifest this update:     Sun 20 Apr 2025 08:00:55 +0000
Manifest next update:     Mon 21 Apr 2025 08:00:55 +0000
Files and hashes:         1: 7UAk0cN_93o1IqUzEsLzy3OF8t8.roa (hash: X/DccKCPSXNbl5PAX4IP4Kv17+DSYA35yARpxNApl1o=)
                          2: GrY03HT2A3ukcxHRJ0IOdvKWvlQ.crl (hash: 93fAEemQuUf536GBhxp0dTyQ1dCtWQGVO1k1pCn6FiE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:52:36:f6:c4:90:39:38:b3:8e:07:46:6e:f9:f6:51:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ab634dc74f6037ba47311d127420e76f296be54
        Validity
            Not Before: Apr 20 08:00:55 2025 GMT
            Not After : Apr 21 08:00:55 2025 GMT
        Subject: CN=01ef31fb286b922730a98e6855ad7e105302e574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:bc:ee:31:76:d1:7f:0c:b1:1c:4f:e5:94:bd:
                    05:ac:05:0c:af:1e:f0:ac:9c:5d:5f:11:fa:6e:15:
                    74:0d:0a:07:2a:e2:88:c8:77:d0:f5:74:94:55:96:
                    04:e4:4d:50:c4:7c:04:7c:8f:ed:5b:87:c8:95:53:
                    b7:9e:f5:27:49:10:a2:68:2c:b0:27:9b:c5:2f:c2:
                    9f:39:30:bf:4d:5a:aa:c5:9b:d9:98:4c:75:18:e8:
                    29:f7:18:0f:5f:4b:b8:ab:81:2b:dc:81:2e:eb:08:
                    1f:d1:ea:b0:59:cf:25:5d:40:04:2a:59:b9:12:1a:
                    32:f3:03:ac:5a:c4:74:a1:2d:5c:69:76:01:07:42:
                    34:05:d5:ac:69:ef:70:04:69:fe:cf:83:89:de:bf:
                    72:90:35:cd:5a:b4:25:e2:56:8f:12:93:3d:4a:5c:
                    45:cf:0c:26:91:a1:12:ca:7c:e1:a2:44:84:79:b5:
                    64:dd:b9:77:7c:72:fb:61:0d:4d:86:15:50:d0:c5:
                    92:5d:08:bf:43:b6:c8:37:5e:7c:25:d1:ed:9a:6e:
                    12:cb:bd:48:27:74:df:eb:ab:99:15:96:d8:3c:11:
                    cf:38:da:e9:99:d6:0d:5f:17:1c:70:c5:56:11:97:
                    01:2b:01:f5:0c:3d:f0:43:47:36:5c:44:17:03:34:
                    82:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:EF:31:FB:28:6B:92:27:30:A9:8E:68:55:AD:7E:10:53:02:E5:74
            X509v3 Authority Key Identifier:
                keyid:1A:B6:34:DC:74:F6:03:7B:A4:73:11:D1:27:42:0E:76:F2:96:BE:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:50:e3:42:22:07:b4:f5:39:33:1e:5f:e6:4f:9d:e8:d8:04:
         11:33:cf:4d:1b:01:47:c1:28:69:38:be:30:ab:c4:d6:8e:d5:
         5d:88:64:52:e5:87:49:b0:39:df:d1:cc:6c:e1:5f:8f:a0:10:
         09:26:79:6e:2d:21:ea:48:1a:ef:b7:6d:80:87:b1:60:80:aa:
         8d:29:bc:9b:de:c5:16:fe:15:c9:03:cf:75:39:35:58:df:97:
         b4:8f:6b:5f:ba:0b:54:c3:31:bc:01:7a:42:fa:83:13:74:53:
         63:95:dd:33:38:65:05:ed:8b:cf:52:1d:b4:28:1a:de:8e:51:
         7a:1d:87:5e:2b:7d:82:ee:e3:d8:b8:97:c1:31:49:ae:12:25:
         95:9c:4e:3a:7e:a9:36:00:df:b5:15:8e:95:71:62:32:18:bc:
         00:65:85:18:fc:15:0c:b0:69:fd:6b:59:8e:68:40:13:80:1a:
         5d:04:6d:78:4b:07:bb:0b:0b:17:4c:42:92:58:02:77:d6:4f:
         0c:0a:62:56:67:3b:82:45:f3:36:64:be:db:69:68:9e:f2:ff:
         a3:7f:35:ff:f3:6d:c8:72:4a:d8:57:b2:8f:a3:b1:b8:8f:c0:
         0a:28:7e:86:39:78:0b:94:36:2e:ef:56:03:20:03:d8:21:26:
         7e:c8:e7:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:27:00 2025 by rpki-client