Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/168096-c887-476f-b335-118960ef62c6/1/4-d1gqvilic_V6RVSq2m-lwf6bA.mft
File:                     4-d1gqvilic_V6RVSq2m-lwf6bA.mft (raw, json)
Hash identifier:          IpBsq1QJ4bSeEbO93TyjfwFLSUkvCMaiFcMGmvcDKnw=
Subject key identifier:   CD:0E:3B:E6:E7:E1:80:76:B2:69:14:10:07:09:A3:6F:EA:B9:DC:84
Authority key identifier: E3:E7:75:82:AB:E2:96:27:3F:57:A4:55:4A:AD:A6:FA:5C:1F:E9:B0
Certificate issuer:       /CN=e3e77582abe296273f57a4554aada6fa5c1fe9b0
Certificate serial:       01968A6EDEDFEA8DF98141B2867A606B8E29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4-d1gqvilic_V6RVSq2m-lwf6bA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/168096-c887-476f-b335-118960ef62c6/1/4-d1gqvilic_V6RVSq2m-lwf6bA.mft
Manifest number:          03E0
Signing time:             Thu 01 May 2025 06:00:43 +0000
Manifest this update:     Thu 01 May 2025 06:00:43 +0000
Manifest next update:     Fri 02 May 2025 06:00:43 +0000
Files and hashes:         1: 4-d1gqvilic_V6RVSq2m-lwf6bA.crl (hash: nCIN1TxFlqbNQPWasqoMBtARcl9Ccbxqv6vDDMfzPw8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/168096-c887-476f-b335-118960ef62c6/1/4-d1gqvilic_V6RVSq2m-lwf6bA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/168096-c887-476f-b335-118960ef62c6/1/4-d1gqvilic_V6RVSq2m-lwf6bA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4-d1gqvilic_V6RVSq2m-lwf6bA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 06:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8a:6e:de:df:ea:8d:f9:81:41:b2:86:7a:60:6b:8e:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3e77582abe296273f57a4554aada6fa5c1fe9b0
        Validity
            Not Before: May  1 06:00:43 2025 GMT
            Not After : May  2 06:00:43 2025 GMT
        Subject: CN=cd0e3be6e7e18076b26914100709a36feab9dc84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:be:1c:f3:3b:c9:da:ea:ff:a1:3f:a1:b8:28:
                    3e:e4:ac:60:a9:7e:18:04:72:e5:60:e7:a5:c1:1c:
                    58:47:cc:69:67:9a:ce:34:2a:22:02:bd:ee:8d:34:
                    db:73:e5:09:36:c9:bf:ec:f3:f4:0f:e3:34:63:bf:
                    05:cf:d3:0f:ca:41:4f:a5:48:49:b4:84:34:71:95:
                    a8:8e:ff:b8:10:ec:1e:26:24:67:9f:81:36:8b:f7:
                    97:38:a3:4b:3b:d5:0e:69:6c:31:6f:e3:11:50:15:
                    0c:cc:d7:3c:00:66:27:58:ac:a5:c0:6f:25:8a:73:
                    0c:7b:a4:1c:76:ff:00:38:11:0d:a9:16:46:6f:d4:
                    26:c7:c2:ab:fa:cb:bc:3c:96:af:54:09:e7:b3:43:
                    50:79:aa:fc:06:17:13:c1:28:1a:06:ab:11:50:bb:
                    e3:c1:0f:bd:bf:ad:a9:ed:d1:30:a7:03:0a:dd:54:
                    80:9c:99:7b:84:ec:46:6a:ab:40:81:00:e5:5c:18:
                    ee:6b:5a:80:c1:e8:17:c8:3b:76:06:51:22:97:d7:
                    0a:4a:8d:45:04:dc:67:a1:51:c4:b0:21:63:c3:28:
                    48:80:47:e6:b4:0b:05:46:a1:ca:10:92:8a:92:c9:
                    eb:05:bc:53:c7:f4:51:df:e0:42:79:f7:d9:2b:8e:
                    3d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:0E:3B:E6:E7:E1:80:76:B2:69:14:10:07:09:A3:6F:EA:B9:DC:84
            X509v3 Authority Key Identifier:
                keyid:E3:E7:75:82:AB:E2:96:27:3F:57:A4:55:4A:AD:A6:FA:5C:1F:E9:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4-d1gqvilic_V6RVSq2m-lwf6bA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/168096-c887-476f-b335-118960ef62c6/1/4-d1gqvilic_V6RVSq2m-lwf6bA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/168096-c887-476f-b335-118960ef62c6/1/4-d1gqvilic_V6RVSq2m-lwf6bA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:f8:0c:6a:0e:7f:3d:db:e8:ea:73:97:51:a9:d6:6e:90:f6:
         70:68:b2:f5:00:5b:6f:d3:32:70:27:26:cf:5f:45:72:c9:8f:
         86:de:e3:79:ee:fb:fe:66:44:0a:30:fc:86:26:27:45:e9:31:
         3d:46:49:14:dd:75:13:59:71:15:55:22:c2:33:76:ba:9d:b5:
         a3:c1:90:f2:fa:38:e2:2c:62:47:0b:ea:19:1a:d2:f0:d7:74:
         7a:70:a4:06:51:e4:3b:a6:f7:e5:2a:8a:4a:a5:43:92:ef:ec:
         0d:68:17:e4:95:24:0a:23:1a:b5:4a:32:de:1c:6b:30:43:ec:
         38:20:cf:f4:59:e3:ee:ce:e0:63:4f:b3:f3:4b:24:8b:73:51:
         a2:be:a5:cd:01:e1:6c:b0:13:04:57:94:9e:ca:23:ac:86:70:
         3f:57:6c:17:62:72:a9:15:21:71:4d:6d:34:24:7b:72:6c:82:
         bd:90:2b:a3:43:97:e9:e7:f9:93:46:01:62:ab:3e:1b:27:41:
         e8:10:f4:4a:d4:ef:1b:2b:e8:84:32:47:8e:cc:73:ec:18:ea:
         ae:33:24:1a:13:68:5c:11:77:f7:e7:15:08:4c:c6:98:61:1f:
         45:d5:73:e0:e8:2b:6a:65:d3:b7:aa:f9:cc:aa:3c:a4:3d:9d:
         92:25:02:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:42:01 2025 by rpki-client