Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/d5e350-c9a0-4634-8c9b-b8d9e9b4074e/1/RMrauRpreaMhYYgHxnibKxyYI3g.mft
File:                     RMrauRpreaMhYYgHxnibKxyYI3g.mft (raw, json)
Hash identifier:          BbNEDxl03zPpptoLYKjgLlOYRNaR1DPJi+8oRqGjvl8=
Subject key identifier:   13:3F:22:C4:F9:86:95:AF:4D:8A:9D:CE:65:BB:E7:B7:D2:1C:F6:C5
Authority key identifier: 44:CA:DA:B9:1A:6B:79:A3:21:61:88:07:C6:78:9B:2B:1C:98:23:78
Certificate issuer:       /CN=44cadab91a6b79a321618807c6789b2b1c982378
Certificate serial:       019676B1124E1C69F711E17026BE43A73EF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RMrauRpreaMhYYgHxnibKxyYI3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/d5e350-c9a0-4634-8c9b-b8d9e9b4074e/1/RMrauRpreaMhYYgHxnibKxyYI3g.mft
Manifest number:          0FBF
Signing time:             Sun 27 Apr 2025 10:00:38 +0000
Manifest this update:     Sun 27 Apr 2025 10:00:38 +0000
Manifest next update:     Mon 28 Apr 2025 10:00:38 +0000
Files and hashes:         1: RMrauRpreaMhYYgHxnibKxyYI3g.crl (hash: z/LZGTU9euzDGDKi7LemeKZS+3H5P887B2FvEMK270g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/d5e350-c9a0-4634-8c9b-b8d9e9b4074e/1/RMrauRpreaMhYYgHxnibKxyYI3g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/d5e350-c9a0-4634-8c9b-b8d9e9b4074e/1/RMrauRpreaMhYYgHxnibKxyYI3g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RMrauRpreaMhYYgHxnibKxyYI3g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 10:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:b1:12:4e:1c:69:f7:11:e1:70:26:be:43:a7:3e:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44cadab91a6b79a321618807c6789b2b1c982378
        Validity
            Not Before: Apr 27 10:00:38 2025 GMT
            Not After : Apr 28 10:00:38 2025 GMT
        Subject: CN=133f22c4f98695af4d8a9dce65bbe7b7d21cf6c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d5:9b:73:8e:b7:04:57:de:90:cd:92:dd:d1:
                    0c:b5:21:d2:3e:dd:42:b4:cd:67:5d:73:b4:ee:23:
                    f3:f7:fa:76:39:fa:26:1c:3a:d6:fb:3a:1e:80:c8:
                    64:4e:20:eb:77:4d:20:aa:5a:6a:90:3f:ff:eb:0e:
                    38:48:ca:aa:25:5d:08:5b:99:10:5c:6a:d8:16:f8:
                    13:38:40:39:03:16:d2:7b:07:f7:a2:8f:3f:89:fb:
                    e5:56:1e:83:1c:53:4b:9a:86:94:fe:f4:0c:91:18:
                    dd:72:3d:9d:79:61:fa:40:7f:f4:34:7c:45:c5:1e:
                    b8:b9:f9:82:76:f2:f6:be:32:9e:4e:34:e6:34:d9:
                    b9:63:c8:ef:19:bf:24:86:fb:af:c8:81:46:79:47:
                    ac:5e:a5:2b:58:82:3f:d8:eb:be:04:97:38:e9:2b:
                    98:e7:6c:8c:73:8b:4e:19:cf:67:a5:08:b2:8b:6e:
                    47:9f:14:70:15:e8:b2:59:6e:40:02:c8:6a:c0:bf:
                    9d:7c:46:d7:b8:15:89:7b:8b:68:98:c8:35:30:b3:
                    9c:90:7b:72:92:a5:09:f2:02:f6:3f:2e:ba:7e:55:
                    56:29:96:5e:7d:77:16:1e:7a:34:e3:49:f3:ca:81:
                    0f:f1:36:26:8e:92:76:2d:71:47:83:17:8c:09:bc:
                    03:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:3F:22:C4:F9:86:95:AF:4D:8A:9D:CE:65:BB:E7:B7:D2:1C:F6:C5
            X509v3 Authority Key Identifier:
                keyid:44:CA:DA:B9:1A:6B:79:A3:21:61:88:07:C6:78:9B:2B:1C:98:23:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMrauRpreaMhYYgHxnibKxyYI3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/d5e350-c9a0-4634-8c9b-b8d9e9b4074e/1/RMrauRpreaMhYYgHxnibKxyYI3g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/d5e350-c9a0-4634-8c9b-b8d9e9b4074e/1/RMrauRpreaMhYYgHxnibKxyYI3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:a9:a4:e0:c8:fa:fb:80:71:a2:f6:53:0c:92:58:3b:8b:34:
         c9:48:e1:8c:b1:22:5e:60:6a:c5:f7:47:c0:d3:a9:66:26:c9:
         e2:3f:f7:51:0f:ac:6d:ab:84:76:44:ce:82:cb:4f:b2:e8:f2:
         5b:24:5a:37:17:8a:c9:0a:98:8a:4c:c7:3f:bd:17:a1:2d:6c:
         8b:92:e9:9c:f4:d5:25:a0:35:dd:95:5b:6e:98:2a:3a:93:cf:
         3b:65:b9:c4:e1:ca:58:2e:38:5f:ca:a7:3f:03:90:61:82:87:
         55:71:0c:2b:02:02:f8:b2:de:2e:37:fb:25:35:0e:3b:f3:9f:
         e9:c3:43:64:82:03:13:b5:43:0e:02:74:4f:f4:71:f2:ee:ec:
         c3:61:f0:01:44:a1:8e:29:b9:a1:cb:e2:e9:d3:51:76:37:3c:
         64:aa:21:c5:dc:fb:fe:5a:4e:2b:61:1a:c6:2a:3c:da:2c:4e:
         9a:27:ba:73:d4:69:6b:4e:da:e2:fc:83:4f:1f:19:da:a9:6c:
         e4:75:d3:f1:f8:50:1b:02:ea:2b:ef:76:0a:27:0e:b3:6f:b2:
         98:b3:8e:91:cd:a6:76:d9:55:fc:e6:d0:75:a2:5b:96:7d:a5:
         22:2d:25:f3:e2:95:2a:76:43:20:7d:d1:6b:b6:a2:88:b4:a6:
         49:69:a7:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:17:14 2025 by rpki-client