Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/9e22b8-4eb1-4d2f-a807-7b94fb43b60a/1/ppv5fceDSX88N716huWZSs7ngbA.mft
File:                     ppv5fceDSX88N716huWZSs7ngbA.mft (raw, json)
Hash identifier:          PIH7K1Zg2mEJ8KiDLrw63FSoSBjNibvlPKb0xMIrMQY=
Subject key identifier:   70:6A:BD:13:F0:A7:FB:16:C0:8F:3F:CB:17:60:98:BA:18:C9:F6:6D
Authority key identifier: A6:9B:F9:7D:C7:83:49:7F:3C:37:BD:7A:86:E5:99:4A:CE:E7:81:B0
Certificate issuer:       /CN=a69bf97dc783497f3c37bd7a86e5994acee781b0
Certificate serial:       0196760BDD3DEE2BF12B65B2F663ABEDC39D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ppv5fceDSX88N716huWZSs7ngbA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/9e22b8-4eb1-4d2f-a807-7b94fb43b60a/1/ppv5fceDSX88N716huWZSs7ngbA.mft
Manifest number:          0F07
Signing time:             Sun 27 Apr 2025 07:00:11 +0000
Manifest this update:     Sun 27 Apr 2025 07:00:11 +0000
Manifest next update:     Mon 28 Apr 2025 07:00:11 +0000
Files and hashes:         1: ppv5fceDSX88N716huWZSs7ngbA.crl (hash: hz6ZnWitidtvKn0M5HbiQF8mboWme6cvSjsdSfrGx9o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/9e22b8-4eb1-4d2f-a807-7b94fb43b60a/1/ppv5fceDSX88N716huWZSs7ngbA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/9e22b8-4eb1-4d2f-a807-7b94fb43b60a/1/ppv5fceDSX88N716huWZSs7ngbA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ppv5fceDSX88N716huWZSs7ngbA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:0b:dd:3d:ee:2b:f1:2b:65:b2:f6:63:ab:ed:c3:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a69bf97dc783497f3c37bd7a86e5994acee781b0
        Validity
            Not Before: Apr 27 07:00:11 2025 GMT
            Not After : Apr 28 07:00:11 2025 GMT
        Subject: CN=706abd13f0a7fb16c08f3fcb176098ba18c9f66d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:41:00:74:07:61:7e:60:35:05:cd:41:be:73:
                    a8:4e:df:d3:b0:d4:e9:7b:31:b6:5e:aa:28:7a:08:
                    31:62:d1:22:6c:c0:33:06:74:c8:48:e8:bc:94:77:
                    48:4d:7e:be:0e:78:8d:bc:7a:74:ef:35:51:1e:81:
                    c1:22:cc:13:f5:b2:a1:4d:2e:7b:2c:a6:bb:d0:48:
                    93:f6:55:8b:f8:33:3f:3c:3f:60:92:d1:33:e7:f4:
                    e4:ac:f5:45:43:3a:97:42:95:45:64:fb:bc:f7:77:
                    aa:93:8a:63:0f:0d:8e:36:6f:99:a0:e4:ab:83:00:
                    4f:87:be:1d:91:cb:be:72:d7:0c:88:21:f2:1d:d8:
                    ab:60:6a:c2:04:9a:fd:63:d0:a0:55:47:10:74:06:
                    bb:cb:b6:23:b5:c1:0d:ba:c5:aa:4e:3f:79:50:e3:
                    21:01:f4:e1:9a:3d:b1:59:15:c6:c8:ee:fb:91:bc:
                    88:af:de:8a:05:83:89:75:78:0b:7a:da:77:e4:cb:
                    b5:fb:bb:82:a8:19:e8:23:67:1a:6a:e7:99:df:3a:
                    77:f4:0b:c2:40:7d:0c:30:69:30:96:3f:51:e7:12:
                    09:e4:30:5c:89:ee:97:12:ad:f1:30:f1:75:d1:e4:
                    c7:e5:b3:9d:ec:91:ef:33:3b:79:72:31:a2:08:f5:
                    bb:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:6A:BD:13:F0:A7:FB:16:C0:8F:3F:CB:17:60:98:BA:18:C9:F6:6D
            X509v3 Authority Key Identifier:
                keyid:A6:9B:F9:7D:C7:83:49:7F:3C:37:BD:7A:86:E5:99:4A:CE:E7:81:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppv5fceDSX88N716huWZSs7ngbA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9e22b8-4eb1-4d2f-a807-7b94fb43b60a/1/ppv5fceDSX88N716huWZSs7ngbA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9e22b8-4eb1-4d2f-a807-7b94fb43b60a/1/ppv5fceDSX88N716huWZSs7ngbA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:b8:3b:54:07:66:33:2c:c7:d8:ac:9e:50:cd:c8:f3:aa:4a:
         13:81:0d:b2:ea:3c:53:a5:34:8d:e7:79:bd:15:e7:a5:fb:56:
         29:b4:4b:b9:2e:95:e7:9d:03:16:67:ed:56:a0:f2:99:84:f6:
         b2:d4:12:01:37:4e:1c:43:30:c9:48:98:8c:8c:10:ed:13:ac:
         6a:de:05:21:f1:10:3c:cd:ed:f6:3f:46:16:2e:e8:a4:bb:24:
         5f:b6:19:04:e2:fb:37:c6:8c:76:47:64:92:24:ce:ba:af:02:
         0c:64:f7:29:be:ee:5c:89:33:80:e2:2d:9e:3b:d8:5e:d1:8d:
         99:09:23:a8:64:9b:d0:c2:cc:63:ec:db:e8:69:c8:72:85:4d:
         bc:8d:67:26:a2:40:6b:ba:30:ed:2e:a7:0f:3d:4f:58:49:a2:
         38:f1:64:6c:e5:0a:84:a9:d6:6e:3b:60:ce:b8:11:50:d8:33:
         7a:0c:40:3b:99:99:94:8d:50:7e:03:a9:0d:b4:ce:32:92:98:
         3b:58:e5:cb:cc:0c:cf:17:53:a9:a5:65:8a:d3:2b:8f:36:d6:
         98:25:3a:58:53:5d:81:72:2e:6c:a0:76:d8:d5:79:dc:ac:5b:
         52:83:38:f1:2c:fb:d0:17:83:0e:0b:72:94:46:c8:cf:db:cb:
         16:0e:d6:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:38:54 2025 by rpki-client