Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
File:                     q7zPUQ4allMK2M8UI_0lmLgv46Y.mft (raw, json)
Hash identifier:          qqON5Qf103eHnlJnjDvuE28B+J/VTuhMmWOzT8LIdr0=
Subject key identifier:   3F:27:11:19:D1:D2:40:EA:1A:8B:09:05:8E:9D:B3:25:DE:44:5C:C4
Authority key identifier: AB:BC:CF:51:0E:1A:96:53:0A:D8:CF:14:23:FD:25:98:B8:2F:E3:A6
Certificate issuer:       /CN=abbccf510e1a96530ad8cf1423fd2598b82fe3a6
Certificate serial:       0196748C39576C84DC9EA0B7F9D250BACC8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q7zPUQ4allMK2M8UI_0lmLgv46Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
Manifest number:          150B
Signing time:             Sun 27 Apr 2025 00:01:08 +0000
Manifest this update:     Sun 27 Apr 2025 00:01:08 +0000
Manifest next update:     Mon 28 Apr 2025 00:01:08 +0000
Files and hashes:         1: q7zPUQ4allMK2M8UI_0lmLgv46Y.crl (hash: vxQ6jwyrUWKVev2aZpnnOFro8Ud1DfrGGMYUu1V+wi8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q7zPUQ4allMK2M8UI_0lmLgv46Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:8c:39:57:6c:84:dc:9e:a0:b7:f9:d2:50:ba:cc:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abbccf510e1a96530ad8cf1423fd2598b82fe3a6
        Validity
            Not Before: Apr 27 00:01:08 2025 GMT
            Not After : Apr 28 00:01:08 2025 GMT
        Subject: CN=3f271119d1d240ea1a8b09058e9db325de445cc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f3:3d:f3:fa:9d:1d:29:38:de:78:c3:ef:9e:
                    e8:ab:24:45:e6:98:14:79:af:b3:3e:dd:0c:15:86:
                    f6:27:7f:67:29:b7:9f:ee:0b:ef:19:84:ad:6e:16:
                    dc:5e:c3:8a:af:7d:3b:d8:07:e7:dd:38:25:ac:c3:
                    00:43:e3:59:e5:53:5a:78:ea:6e:6a:02:0f:b6:34:
                    e7:68:cb:2d:86:7e:2a:35:f6:0d:10:e1:d9:a8:a1:
                    15:ae:d3:7c:90:35:bb:c1:d5:9b:a0:80:f4:44:0e:
                    42:55:1f:90:71:60:7b:f6:c6:82:ae:93:0b:3e:4c:
                    f5:59:8c:e2:30:7e:7c:35:62:71:f4:43:89:62:61:
                    4c:b3:e6:52:34:f9:6b:ea:25:0b:4d:d8:d8:b8:47:
                    96:4d:1f:ab:9e:6b:fe:d6:e2:c6:b5:8f:11:78:b7:
                    68:08:b4:f9:03:88:1f:ea:c3:3f:83:54:d2:03:c6:
                    5e:69:5e:17:78:27:46:a4:80:f3:05:09:03:e3:fe:
                    e5:65:f8:24:3b:a7:9e:12:46:1d:fb:13:fa:1a:53:
                    31:83:bd:8b:6c:5f:7c:1b:6f:87:50:29:95:27:3d:
                    b5:40:81:84:53:6c:28:0e:32:52:08:75:b2:4d:39:
                    b1:bc:2c:a7:06:fa:aa:78:5f:7c:45:9d:bf:89:06:
                    cd:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:27:11:19:D1:D2:40:EA:1A:8B:09:05:8E:9D:B3:25:DE:44:5C:C4
            X509v3 Authority Key Identifier:
                keyid:AB:BC:CF:51:0E:1A:96:53:0A:D8:CF:14:23:FD:25:98:B8:2F:E3:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7zPUQ4allMK2M8UI_0lmLgv46Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:00:b1:03:02:c3:d3:8f:2a:51:b5:9f:53:8c:6d:64:8a:f6:
         17:dd:fa:88:96:95:3f:e3:a6:02:5f:56:c6:70:35:21:0b:91:
         3e:c6:e1:da:ff:9b:b1:8b:7b:07:65:30:5d:4f:d4:e4:d1:6d:
         51:1e:36:68:f5:04:bf:6f:33:1d:d4:c6:2a:40:91:9d:32:a9:
         fa:aa:e5:12:e7:d7:5f:cb:bf:0c:fc:1b:39:d9:74:68:4a:14:
         72:c4:95:fb:e0:e1:60:fc:f6:ab:6f:d8:05:53:8f:95:17:9f:
         5f:f6:95:0b:6e:30:91:a4:37:ad:d6:e9:61:a2:5e:81:4e:75:
         b0:91:10:c4:13:48:3a:30:05:48:08:50:9a:79:c8:c5:9c:22:
         58:e6:71:c4:12:6e:00:99:57:c5:20:eb:e0:b5:35:9d:83:16:
         2b:fa:e4:88:be:78:3d:47:1b:0b:66:79:52:d3:da:99:58:35:
         9f:53:25:13:3c:85:ad:69:d4:9c:01:ec:7e:86:d9:4b:f7:d2:
         99:d9:50:bb:41:2e:63:3d:7a:37:f1:a1:04:de:76:13:cb:9b:
         e9:ce:2d:5b:b9:08:fd:9b:70:2c:73:52:f5:18:4d:53:ca:48:
         05:2e:6a:ca:c3:b8:8c:2c:26:f7:33:b1:7b:4e:6c:3d:49:81:
         36:b7:31:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:01:04 2025 by rpki-client