Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e462e7-2004-4428-bb35-0e810b7ddebc/1/fQ9TBOHZKWjpheNo6E833TZw71w.mft
File:                     fQ9TBOHZKWjpheNo6E833TZw71w.mft (raw, json)
Hash identifier:          IeEO91mBgiXLiBcuow4Mv0OeeJu6UysCW1p1xzj6//c=
Subject key identifier:   6E:E2:69:33:BE:33:89:5C:7C:06:CC:D9:9F:0D:CF:EC:E8:7A:90:44
Authority key identifier: 7D:0F:53:04:E1:D9:29:68:E9:85:E3:68:E8:4F:37:DD:36:70:EF:5C
Certificate issuer:       /CN=7d0f5304e1d92968e985e368e84f37dd3670ef5c
Certificate serial:       019641E83057E2351BD8EBBBDDBA36A010B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fQ9TBOHZKWjpheNo6E833TZw71w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/e462e7-2004-4428-bb35-0e810b7ddebc/1/fQ9TBOHZKWjpheNo6E833TZw71w.mft
Manifest number:          0C38
Signing time:             Thu 17 Apr 2025 04:00:57 +0000
Manifest this update:     Thu 17 Apr 2025 04:00:57 +0000
Manifest next update:     Fri 18 Apr 2025 04:00:57 +0000
Files and hashes:         1: fQ9TBOHZKWjpheNo6E833TZw71w.crl (hash: aPchB9IoZnBXlWjlGZ802X0urBFx4c5IwixW4qBE1l4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/e462e7-2004-4428-bb35-0e810b7ddebc/1/fQ9TBOHZKWjpheNo6E833TZw71w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/e462e7-2004-4428-bb35-0e810b7ddebc/1/fQ9TBOHZKWjpheNo6E833TZw71w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fQ9TBOHZKWjpheNo6E833TZw71w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 04:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:41:e8:30:57:e2:35:1b:d8:eb:bb:dd:ba:36:a0:10:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d0f5304e1d92968e985e368e84f37dd3670ef5c
        Validity
            Not Before: Apr 17 04:00:57 2025 GMT
            Not After : Apr 18 04:00:57 2025 GMT
        Subject: CN=6ee26933be33895c7c06ccd99f0dcfece87a9044
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:07:39:8f:67:fe:79:8d:cf:a8:5e:c1:5f:6e:
                    40:1e:76:ee:00:1e:6d:af:f6:24:c0:37:43:39:5f:
                    3b:45:63:ed:9e:65:db:4c:da:06:25:ca:8d:fa:38:
                    9c:c6:00:64:2c:df:e3:70:fb:1c:ce:5f:41:77:04:
                    a5:14:68:77:20:5d:48:94:49:6b:36:9c:13:3c:1c:
                    e5:a6:89:e1:15:37:ee:82:a2:3b:71:bf:c1:1c:2f:
                    5e:33:68:0b:02:58:ff:6b:d0:11:08:b0:7f:82:46:
                    d0:1b:63:95:22:4f:6a:09:9a:12:5f:d0:45:ec:fa:
                    aa:24:05:83:f2:8a:a2:26:9b:29:8b:db:ae:92:80:
                    06:24:11:86:fb:90:d2:0a:14:5b:54:4e:eb:bd:8b:
                    27:1a:98:4f:95:ba:fb:26:e2:10:7e:60:8d:a7:57:
                    7e:25:89:06:7d:ba:6d:75:99:2b:33:30:cc:58:ba:
                    be:47:81:9e:4a:48:47:fd:94:ff:6c:6f:fb:51:c7:
                    7c:37:57:16:19:e9:46:ae:a2:db:02:52:db:bf:f2:
                    26:bb:7e:61:ec:38:d0:d0:48:10:12:2e:9f:34:d8:
                    45:c1:8a:00:49:98:37:6f:d7:4f:69:5d:3b:d3:e3:
                    be:45:fe:43:5b:ce:21:1e:21:22:7a:90:0c:2b:51:
                    97:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:E2:69:33:BE:33:89:5C:7C:06:CC:D9:9F:0D:CF:EC:E8:7A:90:44
            X509v3 Authority Key Identifier:
                keyid:7D:0F:53:04:E1:D9:29:68:E9:85:E3:68:E8:4F:37:DD:36:70:EF:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQ9TBOHZKWjpheNo6E833TZw71w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e462e7-2004-4428-bb35-0e810b7ddebc/1/fQ9TBOHZKWjpheNo6E833TZw71w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e462e7-2004-4428-bb35-0e810b7ddebc/1/fQ9TBOHZKWjpheNo6E833TZw71w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:16:fe:2a:cd:f3:5e:f8:fe:9c:a9:a5:6b:27:8d:05:5e:c3:
         13:ad:04:e6:9a:1d:b8:99:a0:c0:8d:38:1c:8e:69:0f:cb:19:
         9f:bf:69:9e:d7:7c:cc:8f:ad:65:fe:c2:85:db:c7:60:2b:f0:
         9c:44:e5:ba:e2:34:46:74:12:3b:ff:90:b3:57:e8:fe:43:a6:
         c2:92:da:5b:38:ac:e1:96:07:29:dd:fc:9a:a9:52:bd:45:8a:
         fc:f5:a5:00:27:5f:5b:0c:ed:be:fe:1f:a6:63:05:8d:05:69:
         e3:6a:03:13:ea:4d:62:2c:cc:d3:58:15:76:05:b4:d3:a5:0d:
         7f:a1:fd:2e:aa:f3:ce:92:a4:23:9f:21:67:d4:76:ca:94:3d:
         c7:2d:be:da:50:c5:a9:ee:13:1b:9a:d3:ad:41:d9:35:2f:49:
         43:c9:16:30:68:cd:c9:91:7d:3d:5e:28:e1:50:5f:07:15:f6:
         1a:e9:ad:83:94:99:6f:1e:e0:26:57:f9:2a:c5:47:d9:aa:86:
         bf:6a:31:09:f1:b9:62:b8:80:1f:26:33:5f:89:9f:0e:16:f1:
         78:dd:7b:01:6d:f0:59:fb:4e:57:1e:50:bb:98:12:26:8b:f6:
         1e:c5:c7:22:d5:80:0a:b0:95:53:a1:0b:5e:36:9f:8c:85:ca:
         d5:a5:3d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:15:15 2025 by rpki-client