Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/4ae99d-f552-476c-8177-ebf5f0433772/1/xZZ4VHbvuud_lh0jBXBX-gNvsn8.mft
File:                     xZZ4VHbvuud_lh0jBXBX-gNvsn8.mft (raw, json)
Hash identifier:          eA3MooBfLK96WKWh6NBOqdKxRzPS4vGd2h9mp6XbINc=
Subject key identifier:   80:E8:11:8C:79:78:1E:CD:2B:D3:C1:3E:2C:AB:D7:61:37:11:F9:B3
Authority key identifier: C5:96:78:54:76:EF:BA:E7:7F:96:1D:23:05:70:57:FA:03:6F:B2:7F
Certificate issuer:       /CN=c596785476efbae77f961d23057057fa036fb27f
Certificate serial:       019691F120BEC42004BD6F36EFE779A55565
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xZZ4VHbvuud_lh0jBXBX-gNvsn8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/4ae99d-f552-476c-8177-ebf5f0433772/1/xZZ4VHbvuud_lh0jBXBX-gNvsn8.mft
Manifest number:          13C9
Signing time:             Fri 02 May 2025 17:00:20 +0000
Manifest this update:     Fri 02 May 2025 17:00:20 +0000
Manifest next update:     Sat 03 May 2025 17:00:20 +0000
Files and hashes:         1: xZZ4VHbvuud_lh0jBXBX-gNvsn8.crl (hash: x/8pYqTkYy/a5DlI6/BhSYrj1rES2W68vIOgOd04yE0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/4ae99d-f552-476c-8177-ebf5f0433772/1/xZZ4VHbvuud_lh0jBXBX-gNvsn8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/4ae99d-f552-476c-8177-ebf5f0433772/1/xZZ4VHbvuud_lh0jBXBX-gNvsn8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xZZ4VHbvuud_lh0jBXBX-gNvsn8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 17:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:91:f1:20:be:c4:20:04:bd:6f:36:ef:e7:79:a5:55:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c596785476efbae77f961d23057057fa036fb27f
        Validity
            Not Before: May  2 17:00:20 2025 GMT
            Not After : May  3 17:00:20 2025 GMT
        Subject: CN=80e8118c79781ecd2bd3c13e2cabd7613711f9b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:df:59:22:e4:85:18:dc:3d:91:2d:9a:55:97:
                    f2:39:f3:2f:04:78:1a:68:9b:f3:d9:bf:e7:eb:5b:
                    54:d0:8f:be:af:71:0f:26:9e:33:ff:6b:e5:c0:d4:
                    ce:b7:3d:b7:ee:90:a5:34:39:47:85:c6:14:6c:30:
                    b9:54:c4:9b:1f:18:2d:39:6b:db:1b:fa:8c:7c:0e:
                    e5:91:2d:7d:03:01:1e:c0:1b:e5:27:e6:31:33:0e:
                    57:73:34:1c:21:b0:61:02:06:ac:e7:ee:b3:fe:27:
                    02:46:29:e8:7d:0f:d1:7f:7a:1b:07:4d:38:89:2c:
                    64:00:52:ad:56:4e:82:e2:af:be:f3:48:ef:0d:a4:
                    10:16:27:d1:6f:ae:c0:38:20:5e:b9:fc:b0:74:45:
                    f6:e4:9c:56:6e:93:f4:35:a5:b9:99:c9:b5:63:9f:
                    2c:ab:01:37:58:1e:95:d5:64:23:dc:51:bf:d5:a1:
                    02:03:3c:61:17:4b:4d:db:ce:fd:76:77:8c:7b:b4:
                    3e:1d:3f:00:29:3f:6a:f0:79:86:52:ca:f6:57:f4:
                    5f:90:69:2f:d0:6c:12:ea:dc:d9:82:c6:8c:d9:05:
                    f3:42:82:e9:ec:72:81:3d:cd:e7:e3:8f:aa:08:06:
                    59:b3:fd:f6:bb:6e:4f:80:e4:1a:64:30:53:29:d6:
                    ac:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:E8:11:8C:79:78:1E:CD:2B:D3:C1:3E:2C:AB:D7:61:37:11:F9:B3
            X509v3 Authority Key Identifier:
                keyid:C5:96:78:54:76:EF:BA:E7:7F:96:1D:23:05:70:57:FA:03:6F:B2:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZZ4VHbvuud_lh0jBXBX-gNvsn8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4ae99d-f552-476c-8177-ebf5f0433772/1/xZZ4VHbvuud_lh0jBXBX-gNvsn8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4ae99d-f552-476c-8177-ebf5f0433772/1/xZZ4VHbvuud_lh0jBXBX-gNvsn8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:25:fb:1a:36:e0:06:e0:4b:a1:44:e1:f6:d4:b4:12:eb:fd:
         fd:05:ea:7e:0f:e8:5d:75:f5:e6:28:9f:8c:c8:7b:1c:b0:37:
         d5:20:95:d9:9a:27:75:96:88:6f:82:46:e8:9a:58:eb:93:ac:
         56:88:ca:9a:77:19:c9:9d:88:be:89:38:ad:f8:c0:cc:65:58:
         aa:d7:09:f0:8a:3b:2c:82:2f:e9:20:78:6a:01:4e:8b:b6:01:
         69:dc:3a:0e:1c:1b:0e:9b:c1:c0:6c:59:68:b0:d3:22:08:cd:
         a7:ef:2f:26:7a:5a:13:e7:f9:6a:4b:33:7e:af:c5:55:f3:01:
         79:6d:fb:6f:5c:5e:1b:82:72:8e:3e:bf:4f:84:a5:46:74:3c:
         ce:bc:3e:13:fc:a4:11:3a:01:71:55:a8:f2:bf:a3:e8:05:1d:
         82:81:72:35:b1:0b:61:7a:61:18:c8:1a:18:82:3f:e1:04:4b:
         7e:e9:cf:bf:f6:fe:c7:8a:0d:59:d7:76:aa:11:c6:36:29:28:
         4c:98:c2:68:2d:01:bc:15:ef:0f:70:4c:91:63:0f:49:3a:f6:
         f5:e3:31:39:cc:9a:0c:ff:2f:45:8c:13:87:3c:51:5a:76:00:
         22:e7:5e:41:e7:5d:c9:06:f0:b2:02:83:9a:3f:c5:b0:c5:63:
         ad:73:75:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 01:28:28 2025 by rpki-client