Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft
File:                     12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft (raw, json)
Hash identifier:          p2x1euQIUk7MsfMxc3KsTGgslqQ1/H+BoCun83bGfb8=
Subject key identifier:   11:C2:98:53:B0:7E:9C:CD:B8:F4:E3:B8:9F:65:9E:80:B0:56:D6:23
Authority key identifier: D7:62:2B:E8:8A:5C:EA:EF:8C:33:0D:7E:96:FF:F4:35:E8:20:53:B4
Certificate issuer:       /CN=d7622be88a5ceaef8c330d7e96fff435e82053b4
Certificate serial:       019674F99ADE4E4F98B6E6986F8EC93A3A61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft
Manifest number:          020B
Signing time:             Sun 27 Apr 2025 02:00:37 +0000
Manifest this update:     Sun 27 Apr 2025 02:00:37 +0000
Manifest next update:     Mon 28 Apr 2025 02:00:37 +0000
Files and hashes:         1: 12Ir6Ipc6u-MMw1-lv_0NeggU7Q.crl (hash: 6+j4Nu2Oq8MD2jBlgBaLIkPuq4vvHhUnG1l3qWSQp/o=)
                          2: 3_lvOlC8Q73awEsCGt68pft-scE.roa (hash: kkfK8/3sSi/mI91PBNQyjxR7j14LRCGJu3KC5n63R3k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 02:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:f9:9a:de:4e:4f:98:b6:e6:98:6f:8e:c9:3a:3a:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7622be88a5ceaef8c330d7e96fff435e82053b4
        Validity
            Not Before: Apr 27 02:00:37 2025 GMT
            Not After : Apr 28 02:00:37 2025 GMT
        Subject: CN=11c29853b07e9ccdb8f4e3b89f659e80b056d623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e8:7f:48:d4:d9:51:69:f3:da:9a:e0:75:5c:
                    54:b0:d2:27:15:37:20:cb:dc:a7:d9:da:da:32:32:
                    14:57:45:39:f3:4c:ec:36:cd:48:3d:05:a7:c4:d5:
                    d3:f2:c0:47:23:72:a8:99:7f:a6:54:b2:4c:24:72:
                    a3:98:fa:88:d1:31:07:5d:6d:50:df:f5:86:9d:33:
                    4e:f7:6c:b9:df:2e:01:34:98:fe:fc:d8:04:6d:3a:
                    57:4c:d6:b9:b1:60:6c:69:38:05:cc:4f:76:c1:e2:
                    75:a3:f8:27:39:fd:8f:b4:ef:60:97:ae:92:7a:c6:
                    fb:c1:ca:23:54:b9:c7:31:a9:54:09:4c:38:b2:f1:
                    89:a1:c5:e9:19:46:52:8f:23:b8:5f:f7:fa:f9:74:
                    c6:7e:91:d8:59:4a:d5:ab:96:41:d0:23:04:62:f1:
                    e1:b7:96:b9:24:46:c9:f8:97:b7:ac:8b:2f:15:91:
                    07:43:9f:9b:0c:70:80:57:a1:aa:26:3b:50:e7:a5:
                    0e:12:73:de:45:d4:9f:1e:dd:60:f2:2d:13:61:d3:
                    dc:07:e4:3f:5f:d3:fb:f5:7a:59:c1:e1:1f:45:e6:
                    4d:db:29:8c:8e:bd:bd:64:e2:79:12:3c:4c:ce:e6:
                    59:a7:6c:fe:d0:af:9a:57:29:1f:99:b7:02:d4:49:
                    e6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:C2:98:53:B0:7E:9C:CD:B8:F4:E3:B8:9F:65:9E:80:B0:56:D6:23
            X509v3 Authority Key Identifier:
                keyid:D7:62:2B:E8:8A:5C:EA:EF:8C:33:0D:7E:96:FF:F4:35:E8:20:53:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:7f:81:a0:99:5f:94:01:a3:17:e1:99:bc:14:dc:a2:1f:22:
         83:7e:ef:31:cb:f2:34:2c:98:cf:78:c0:c7:e4:84:1b:04:46:
         b5:8c:6d:35:56:8f:9e:bf:a1:e1:91:1b:7e:18:65:c6:b1:9e:
         28:29:9d:01:f0:6d:99:3e:f6:51:38:c7:10:1b:2f:dc:49:3c:
         ef:a2:d3:96:c3:65:34:61:06:d8:f2:28:1f:d2:b1:be:ad:42:
         73:1e:08:01:52:96:5b:80:98:35:33:78:3b:87:9a:2f:d6:9b:
         06:63:b5:b6:27:97:2d:e0:44:83:79:af:69:61:06:ed:17:c5:
         f0:b6:9c:86:46:7e:2a:aa:ba:9b:7b:46:ba:fc:1e:73:06:03:
         de:b0:b1:7f:2b:91:6a:80:66:db:9d:19:f3:6b:d3:44:6a:80:
         3f:24:52:45:4c:2c:ba:96:e9:de:a2:e8:50:80:fa:52:1e:ad:
         6f:ef:ed:03:ab:f3:47:2f:b8:0e:d2:f7:e9:43:84:91:b5:03:
         da:d0:4f:fc:de:f1:96:5f:f0:c2:ab:58:a4:42:8f:e5:9e:a8:
         4a:31:fb:26:ad:ca:b8:c1:45:e8:d6:a4:1f:f3:5b:50:ac:98:
         da:39:61:ce:ba:ab:c5:97:23:44:e6:47:25:10:7d:4b:55:e9:
         c5:9d:20:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:20:48 2025 by rpki-client