Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.mft
File:                     65fOljUzDxRxFMZG72qTR9aJFjs.mft (raw, json)
Hash identifier:          wTjo0tkVEiG5IFwjVhHbLw2yBPXV3wQ2hx9n553gKHk=
Subject key identifier:   C1:1F:EE:51:6D:75:0D:18:8B:6D:D2:E5:52:54:D3:84:69:07:FA:A9
Authority key identifier: EB:97:CE:96:35:33:0F:14:71:14:C6:46:EF:6A:93:47:D6:89:16:3B
Certificate issuer:       /CN=eb97ce9635330f147114c646ef6a9347d689163b
Certificate serial:       0196827E89FF90CC5FB68A28815DCAD779DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/65fOljUzDxRxFMZG72qTR9aJFjs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.mft
Manifest number:          14A4
Signing time:             Tue 29 Apr 2025 17:00:52 +0000
Manifest this update:     Tue 29 Apr 2025 17:00:52 +0000
Manifest next update:     Wed 30 Apr 2025 17:00:52 +0000
Files and hashes:         1: 65fOljUzDxRxFMZG72qTR9aJFjs.crl (hash: mqimU13OxtGmozOIeQPmGK6G+3W3jdLWWWQWftKzvnc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/65fOljUzDxRxFMZG72qTR9aJFjs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 17:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:82:7e:89:ff:90:cc:5f:b6:8a:28:81:5d:ca:d7:79:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb97ce9635330f147114c646ef6a9347d689163b
        Validity
            Not Before: Apr 29 17:00:52 2025 GMT
            Not After : Apr 30 17:00:52 2025 GMT
        Subject: CN=c11fee516d750d188b6dd2e55254d3846907faa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f1:93:30:58:d0:6b:9a:d4:04:9e:e9:4d:c9:
                    4d:fe:72:94:37:05:84:2d:f2:ce:96:42:45:05:4b:
                    ba:38:0f:66:11:bd:ab:2e:b7:a7:8f:b5:be:5b:5c:
                    ac:2d:94:74:19:15:dc:be:3d:00:b9:77:51:7b:ac:
                    04:fb:b0:28:03:56:c2:66:e9:3a:a1:45:51:a2:31:
                    3b:ff:e0:39:23:96:fd:d1:bb:ad:3c:7f:ff:87:cd:
                    2a:9d:12:6b:20:c3:0a:b2:e3:cf:cd:ea:95:d3:c4:
                    eb:ff:80:38:9e:18:f8:b0:02:10:a0:92:c3:49:3a:
                    00:9a:4d:5b:6b:d0:7f:ba:96:69:ea:30:8e:ac:b3:
                    7b:91:b9:11:a6:8c:48:cc:3f:ad:79:6a:b1:da:70:
                    4d:f4:af:5c:f2:c2:c6:03:2d:25:8f:42:15:be:be:
                    2e:7f:a9:22:b6:96:af:6d:25:16:e9:49:29:35:da:
                    04:b2:65:52:bd:dd:b8:9a:ba:27:7c:03:33:2c:58:
                    f7:57:08:1e:a7:c8:b3:36:5e:4f:bf:9e:3d:d1:06:
                    14:c3:54:ba:46:eb:cb:da:1b:dc:18:a3:5e:5a:7c:
                    66:4f:ac:9e:f2:89:e8:73:4c:3d:40:66:8d:88:e7:
                    41:1e:9e:96:56:dc:38:10:d8:7e:60:4d:6a:0c:07:
                    45:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:1F:EE:51:6D:75:0D:18:8B:6D:D2:E5:52:54:D3:84:69:07:FA:A9
            X509v3 Authority Key Identifier:
                keyid:EB:97:CE:96:35:33:0F:14:71:14:C6:46:EF:6A:93:47:D6:89:16:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/65fOljUzDxRxFMZG72qTR9aJFjs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:93:77:2e:c4:5f:1c:e4:66:2b:25:f5:9a:3b:92:11:df:67:
         ea:b4:6d:bc:86:a6:0a:8c:6d:44:cb:1f:64:bc:84:a2:25:68:
         0e:c2:a5:41:4e:96:a0:f5:74:57:9d:3d:b1:ad:ef:54:90:3b:
         71:b5:03:8c:dc:c9:59:6c:a8:99:53:de:89:95:3b:ba:3d:18:
         5f:ab:c2:c6:35:c5:87:f7:2d:9e:19:ad:b4:8f:b5:11:73:f8:
         ca:26:71:8d:d4:90:13:e8:bf:57:31:40:0b:c3:40:3a:85:f8:
         34:e9:42:f3:c1:52:35:59:20:be:bf:67:db:4b:de:22:a1:06:
         8b:ba:dc:94:56:38:cf:df:23:d0:74:fd:72:a3:86:f0:fb:b4:
         d2:4e:21:f4:ba:2a:7d:92:10:de:4d:ab:6d:b8:b5:41:6e:06:
         34:95:be:4e:8b:97:ef:8f:77:4d:2e:81:24:9f:a5:ce:67:1c:
         00:71:90:55:8f:34:95:c5:de:8b:f1:00:12:fe:d2:6a:9e:72:
         14:5f:f9:20:33:6a:91:69:d6:ff:17:fe:16:82:f8:35:ad:12:
         ac:86:aa:c1:45:ee:57:31:ee:16:e8:fb:26:9d:32:00:f9:01:
         63:2a:78:d8:56:7c:30:25:bf:98:3b:24:12:75:de:f8:f6:f9:
         a7:67:09:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:32:21 2025 by rpki-client