Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.mft
File:                     dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.mft (raw, json)
Hash identifier:          yX+6NSukpImjQGRcd4TrwVkBnjpyWnO+jU3fTo8/gG4=
Subject key identifier:   D4:AA:49:3C:24:40:B1:93:3A:1D:EC:FF:7B:8E:7F:CF:1B:EE:F9:A0
Authority key identifier: 74:5D:BA:56:CF:1F:FC:2C:FC:1D:05:F4:FA:83:31:17:EF:D7:C7:8A
Certificate issuer:       /CN=745dba56cf1ffc2cfc1d05f4fa833117efd7c78a
Certificate serial:       019603401C393D5FF2FB19B1F6BB52A765E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.mft
Manifest number:          0468
Signing time:             Sat 05 Apr 2025 00:00:55 +0000
Manifest this update:     Sat 05 Apr 2025 00:00:55 +0000
Manifest next update:     Sun 06 Apr 2025 00:00:55 +0000
Files and hashes:         1: dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.crl (hash: fA+ePLzttlSN53/drkFJU8VksL9sZhJDW44CWAhRKj0=)
                          2: f7NzzdifL8oVbmQEX_FaWaX9d8Y.roa (hash: f6fUQrnWj0Ply8n/xjNr8BkToE1SYVL6yBIWZoWRSsQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Apr 2025 19:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:03:40:1c:39:3d:5f:f2:fb:19:b1:f6:bb:52:a7:65:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=745dba56cf1ffc2cfc1d05f4fa833117efd7c78a
        Validity
            Not Before: Apr  5 00:00:55 2025 GMT
            Not After : Apr  6 00:00:55 2025 GMT
        Subject: CN=d4aa493c2440b1933a1decff7b8e7fcf1beef9a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f5:ac:e3:fc:f8:1b:26:28:81:23:1a:b5:3b:
                    1b:86:64:18:d7:8a:56:c0:d2:cc:20:fe:ce:97:04:
                    d2:fd:f3:15:5d:8f:e0:4b:e7:84:ae:98:9d:e8:37:
                    73:de:5e:7d:97:84:47:5e:90:4c:04:e5:e3:16:06:
                    cc:12:f6:ae:f9:71:aa:df:9e:04:26:d4:34:d2:0c:
                    bc:22:21:67:ef:b2:18:12:0e:f7:43:15:bc:15:6e:
                    ce:c0:a3:c0:11:84:f7:c9:9a:af:02:fe:7b:88:d5:
                    75:af:b6:f8:e3:0d:9b:87:6a:b8:eb:37:dd:2d:2b:
                    e1:ff:97:77:6d:19:44:fe:b6:30:2e:20:3d:e4:48:
                    61:b3:fc:43:b2:57:c7:9c:24:16:0a:d2:fe:ea:60:
                    d0:55:2e:11:29:c8:dd:47:f3:42:14:8c:ef:96:cc:
                    65:eb:8b:b4:a6:c0:22:ca:74:97:79:d2:c0:00:e3:
                    31:7c:37:a6:58:c3:b6:4b:f8:a8:ed:e8:65:7c:65:
                    ca:42:6f:b7:ec:2e:e8:10:ab:67:b7:3b:ff:a7:4d:
                    3e:1b:dc:83:c4:ee:6f:af:dc:a2:91:69:e7:0b:62:
                    27:51:69:ed:d5:6e:13:38:25:19:87:c9:47:e3:76:
                    ce:89:af:96:c5:2d:06:9c:ee:dd:d4:4b:b2:00:bd:
                    18:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:AA:49:3C:24:40:B1:93:3A:1D:EC:FF:7B:8E:7F:CF:1B:EE:F9:A0
            X509v3 Authority Key Identifier:
                keyid:74:5D:BA:56:CF:1F:FC:2C:FC:1D:05:F4:FA:83:31:17:EF:D7:C7:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:d8:e3:7b:32:d2:42:80:b7:dc:93:c7:7c:09:45:eb:ca:7f:
         9c:ea:e3:12:41:e2:a4:45:cb:04:69:af:67:c0:b9:67:f0:83:
         db:87:e6:5c:25:b0:67:54:8f:25:a6:fc:80:4e:5e:44:ff:3b:
         7f:03:e7:3b:f9:e1:d9:19:7e:87:be:10:63:1b:d8:09:ca:48:
         d9:13:2b:e8:e9:2b:69:94:13:38:45:59:eb:44:7e:3e:37:f5:
         ae:07:5e:6a:a3:52:d4:03:28:ea:1f:ef:e3:75:b0:6c:80:42:
         aa:15:07:03:6a:d8:7b:55:b2:e0:f4:60:6d:9c:c9:27:b9:3a:
         b4:3b:78:b2:52:b2:dc:c6:16:f5:df:79:7d:e5:16:08:7d:1d:
         d2:5a:86:e1:1d:bb:b7:5e:b1:72:9c:4a:52:5c:0f:52:1a:0c:
         00:c9:d0:7e:e7:1a:1d:7d:99:bd:de:f7:16:2e:7a:ed:8e:56:
         16:2d:1f:c6:0b:ff:bb:d0:00:c3:06:1a:29:b8:92:ea:8e:4b:
         2c:82:03:0c:53:d0:38:ad:67:ab:83:6a:6d:9a:0b:27:2d:cf:
         73:f6:4b:08:3e:2c:85:b8:6c:80:5e:6f:c0:ff:01:68:07:ea:
         1f:fb:4e:c1:65:8d:d3:0b:3e:28:e6:87:fe:87:58:df:fd:c8:
         b8:63:3d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:46:39 2025 by rpki-client