Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/f8fa5d-9f93-4f3a-b5e3-875fe490a874/1/d-Sz2VlinaKIrNim3gA-zgyTTbE.mft
File:                     d-Sz2VlinaKIrNim3gA-zgyTTbE.mft (raw, json)
Hash identifier:          wIB7hwzR3wcB2X4iZJDe7gXk4otA2nnBw3xsVVIZn1g=
Subject key identifier:   EC:99:8B:BA:3E:D2:1A:D8:A6:58:C2:22:4F:B0:5A:D7:B9:35:8F:79
Authority key identifier: 77:E4:B3:D9:59:62:9D:A2:88:AC:D8:A6:DE:00:3E:CE:0C:93:4D:B1
Certificate issuer:       /CN=77e4b3d959629da288acd8a6de003ece0c934db1
Certificate serial:       0196A5E5A1477C37C91DD03064A55F83BCEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d-Sz2VlinaKIrNim3gA-zgyTTbE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/f8fa5d-9f93-4f3a-b5e3-875fe490a874/1/d-Sz2VlinaKIrNim3gA-zgyTTbE.mft
Manifest number:          03C3
Signing time:             Tue 06 May 2025 14:00:11 +0000
Manifest this update:     Tue 06 May 2025 14:00:11 +0000
Manifest next update:     Wed 07 May 2025 14:00:11 +0000
Files and hashes:         1: d-Sz2VlinaKIrNim3gA-zgyTTbE.crl (hash: NcNddznw7s8MTSdRYNQnw1lasJazpPqxM9ykY5GAxkc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/f8fa5d-9f93-4f3a-b5e3-875fe490a874/1/d-Sz2VlinaKIrNim3gA-zgyTTbE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/f8fa5d-9f93-4f3a-b5e3-875fe490a874/1/d-Sz2VlinaKIrNim3gA-zgyTTbE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d-Sz2VlinaKIrNim3gA-zgyTTbE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 14:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a5:e5:a1:47:7c:37:c9:1d:d0:30:64:a5:5f:83:bc:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77e4b3d959629da288acd8a6de003ece0c934db1
        Validity
            Not Before: May  6 14:00:11 2025 GMT
            Not After : May  7 14:00:11 2025 GMT
        Subject: CN=ec998bba3ed21ad8a658c2224fb05ad7b9358f79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0c:77:9d:75:58:29:30:9b:3d:3f:7a:61:0e:
                    e9:9d:bb:e9:86:26:76:63:7e:04:d2:48:8f:ff:f8:
                    e5:f3:0f:6f:08:a1:b7:f5:2e:ee:8d:25:1a:7e:dd:
                    d1:7c:f8:cf:62:20:17:df:67:e7:db:19:75:c7:ce:
                    74:f4:93:5b:9d:6d:c5:6f:9b:31:13:f9:f1:7d:27:
                    40:e7:ac:10:dd:b4:82:28:d4:66:22:1e:21:af:a3:
                    de:70:20:70:b7:12:9c:c3:c4:c4:ae:97:de:d3:57:
                    2d:95:99:57:18:6c:bc:7d:4e:6f:d8:34:15:37:c1:
                    c4:78:a9:ed:a7:a1:2a:cf:cd:35:8f:8a:e3:fd:15:
                    8e:7b:0e:05:8b:80:cb:c1:9a:30:d8:9c:fd:94:03:
                    7c:1d:49:dd:8f:9a:28:85:f1:27:69:a5:72:fe:0b:
                    bc:9f:82:d6:a0:15:74:69:1d:3c:0e:d2:2d:f8:93:
                    c5:5d:b3:c2:78:24:82:40:61:8a:f9:70:f2:e4:c4:
                    f9:80:84:c9:08:93:0c:8f:84:19:4d:70:44:e3:d8:
                    a1:22:34:3f:9c:a0:be:32:7c:52:18:d7:92:b2:d2:
                    7b:73:5e:66:ae:7d:ca:32:2b:19:27:c8:80:75:bc:
                    42:cb:d3:aa:20:2a:61:64:e1:6b:33:da:b3:8e:d6:
                    be:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:99:8B:BA:3E:D2:1A:D8:A6:58:C2:22:4F:B0:5A:D7:B9:35:8F:79
            X509v3 Authority Key Identifier:
                keyid:77:E4:B3:D9:59:62:9D:A2:88:AC:D8:A6:DE:00:3E:CE:0C:93:4D:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-Sz2VlinaKIrNim3gA-zgyTTbE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f8fa5d-9f93-4f3a-b5e3-875fe490a874/1/d-Sz2VlinaKIrNim3gA-zgyTTbE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f8fa5d-9f93-4f3a-b5e3-875fe490a874/1/d-Sz2VlinaKIrNim3gA-zgyTTbE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:10:ed:ec:34:7b:a9:f1:c4:27:32:fc:89:54:11:62:eb:5a:
         5a:2c:29:ec:68:bb:63:5f:99:08:67:f6:d0:c4:e2:8b:22:bb:
         ef:ce:37:3a:8e:a4:4e:ee:ba:2f:e7:59:ad:df:58:b7:d0:c5:
         7c:28:62:c2:89:7a:d9:78:a3:75:7d:6b:4b:2d:c9:81:6b:e2:
         45:86:12:77:5a:50:da:ad:a7:91:d8:11:57:d5:f9:d5:f6:0a:
         51:ed:94:10:27:2a:96:d4:65:54:51:61:71:2b:c6:7b:14:ec:
         c5:1b:4f:cb:2c:0b:22:fa:12:f4:87:03:c5:72:75:e0:40:2f:
         c9:1e:a2:4f:82:d8:2f:25:2b:4d:76:b3:5d:2f:9e:d1:59:c3:
         28:3a:1c:01:e4:c1:57:17:d2:ad:96:ec:c0:7f:18:b2:e8:67:
         4f:1c:79:de:31:f0:20:d9:18:a8:a1:e9:dc:af:59:95:c7:23:
         61:1a:ba:79:72:8f:4d:ea:75:7a:21:9e:73:c9:99:96:af:fe:
         5d:25:4d:5c:47:1e:dc:58:be:bd:85:30:75:73:4b:f2:e0:c5:
         31:72:f8:cc:70:43:de:97:06:05:4b:76:32:4c:c2:94:dd:c7:
         c1:29:d5:55:49:d3:aa:db:76:af:b4:af:aa:ad:e1:a8:6e:dd:
         e8:cb:a6:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 20:13:49 2025 by rpki-client