Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/F4yPIMk5qqnIDM5qDRVnGDyhxZk.mft
File:                     F4yPIMk5qqnIDM5qDRVnGDyhxZk.mft (raw, json)
Hash identifier:          2XLiMIOVIdingbQhL2xof+UYKYPdADVPI0iMSR07b58=
Subject key identifier:   B1:91:38:51:6B:48:93:B2:CF:32:DA:FC:BB:6E:0E:84:54:53:BF:D5
Authority key identifier: 17:8C:8F:20:C9:39:AA:A9:C8:0C:CE:6A:0D:15:67:18:3C:A1:C5:99
Certificate issuer:       /CN=178c8f20c939aaa9c80cce6a0d1567183ca1c599
Certificate serial:       019671F827BE74475A7AE75D409AF250B671
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F4yPIMk5qqnIDM5qDRVnGDyhxZk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/F4yPIMk5qqnIDM5qDRVnGDyhxZk.mft
Manifest number:          104C
Signing time:             Sat 26 Apr 2025 12:00:10 +0000
Manifest this update:     Sat 26 Apr 2025 12:00:10 +0000
Manifest next update:     Sun 27 Apr 2025 12:00:10 +0000
Files and hashes:         1: F4yPIMk5qqnIDM5qDRVnGDyhxZk.crl (hash: VAWWrtgwX0hKqx3mJvIjhZ8o0iAKffe79mwkZEt1vmk=)
                          2: HBsNTRQXWcPQbzWUzkWwFIJ-NiY.roa (hash: 8k01+u0bD23piBX5SKFalRiJFYskfuHtxEUxOGIwUkM=)
                          3: fGbepzb9A-L4azmxjWxp1naTF6A.roa (hash: YEQd3tPPpxJq6x0hqnOfDaa3PQq/39+zTmClKwCJDxI=)
                          4: i5Z-UkQ8_GCMdTDvdRVzZJd1s3E.roa (hash: hFp0HQZXTf6e9rwGzdmb+2RH6Ma6X1h19nbiCrFmx6o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/F4yPIMk5qqnIDM5qDRVnGDyhxZk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/F4yPIMk5qqnIDM5qDRVnGDyhxZk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F4yPIMk5qqnIDM5qDRVnGDyhxZk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:71:f8:27:be:74:47:5a:7a:e7:5d:40:9a:f2:50:b6:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=178c8f20c939aaa9c80cce6a0d1567183ca1c599
        Validity
            Not Before: Apr 26 12:00:10 2025 GMT
            Not After : Apr 27 12:00:10 2025 GMT
        Subject: CN=b19138516b4893b2cf32dafcbb6e0e845453bfd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:72:f0:8e:0b:82:87:58:f5:e6:7a:27:45:1f:
                    2f:0b:66:d5:ef:b1:38:5b:b0:6f:5b:c7:78:ad:a1:
                    9f:b1:4e:50:30:56:95:99:a4:a5:0e:b9:d2:6c:a1:
                    bf:40:91:0e:e7:df:6e:e6:30:ad:52:ba:6e:d4:39:
                    1b:c9:4a:29:37:a3:8a:03:f3:fc:9a:60:c8:33:99:
                    08:64:1d:ff:9b:6e:ab:65:cf:ec:2a:43:7d:c0:0c:
                    45:21:9a:30:d4:ac:3f:e7:d6:af:e5:24:c1:bf:ee:
                    a2:60:18:e0:31:ae:fd:5e:af:48:9c:1a:46:6d:41:
                    09:40:9a:d7:63:2b:9a:0f:33:bf:ac:df:e1:d8:ba:
                    07:aa:3b:51:2e:aa:f8:cc:33:46:dd:30:4d:b0:6a:
                    1b:c8:f0:cd:47:b1:f8:13:47:8c:a9:05:00:0c:0c:
                    a4:1b:4e:ee:34:1d:3d:e9:04:b8:9c:01:24:f6:93:
                    c1:0d:27:c0:bb:0f:bc:90:7b:40:fe:8e:6e:f5:5a:
                    64:fb:5d:af:97:f6:97:08:f9:64:6f:0d:85:c7:be:
                    b2:97:8f:81:0f:da:dc:bd:c0:21:fd:19:0e:36:71:
                    02:51:d2:87:77:65:00:a2:b2:d0:86:6d:79:30:20:
                    33:cb:89:fc:ef:54:2a:aa:be:d0:6d:ab:1d:2e:d8:
                    00:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:91:38:51:6B:48:93:B2:CF:32:DA:FC:BB:6E:0E:84:54:53:BF:D5
            X509v3 Authority Key Identifier:
                keyid:17:8C:8F:20:C9:39:AA:A9:C8:0C:CE:6A:0D:15:67:18:3C:A1:C5:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F4yPIMk5qqnIDM5qDRVnGDyhxZk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/F4yPIMk5qqnIDM5qDRVnGDyhxZk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/F4yPIMk5qqnIDM5qDRVnGDyhxZk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:87:52:1e:95:4c:b6:15:db:d8:76:2a:dd:8f:4c:36:cb:93:
         4d:f8:24:e3:9c:b0:50:a5:6c:e8:e3:5c:06:1d:4c:34:13:74:
         0a:46:78:8c:c7:84:72:a9:fb:a8:50:be:97:93:05:40:d6:51:
         9c:b6:8b:89:5f:fd:a6:a6:2e:1b:dc:93:2a:33:52:d4:c9:63:
         19:31:44:8e:a3:14:24:e4:b3:93:2f:6c:1a:60:9b:a3:72:e2:
         cf:23:17:9c:57:c1:9f:1b:62:07:a6:d4:c1:c5:03:68:c5:7f:
         25:71:97:d6:3f:45:ef:ce:b4:2f:e4:5a:04:b2:c9:d7:28:57:
         3f:a9:55:4d:52:42:33:82:6a:eb:40:0e:7f:a5:3a:ee:0f:19:
         74:b1:9b:1c:4b:eb:ab:57:96:e4:dd:d0:e2:fc:75:61:29:0c:
         e3:c5:44:ea:6c:f2:67:f2:30:ef:22:71:17:55:25:79:59:a3:
         63:3f:d3:9d:e5:c7:bf:17:c1:02:b8:24:d4:c6:0e:bc:b9:e4:
         b0:d4:2b:70:3b:a8:97:8d:4a:fa:83:a1:85:b3:8d:5d:2b:b7:
         c6:18:7a:3d:1d:34:cc:c8:1d:24:e6:0f:95:2e:34:b6:98:75:
         7e:b2:34:d6:cc:f9:5a:56:bf:7e:40:f5:c2:67:eb:69:f8:77:
         1c:0b:04:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:11:19 2025 by rpki-client