Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.mft
File:                     _Z99xQlavbRF0YmFfTEBqK7info.mft (raw, json)
Hash identifier:          oWCprj9U2LztoVMaYJoVKxZQOx+iSiiJO8JjMDbsr/s=
Subject key identifier:   8C:44:CE:54:ED:99:A8:53:5D:69:56:9C:59:EC:FB:16:65:34:BB:4B
Authority key identifier: FD:9F:7D:C5:09:5A:BD:B4:45:D1:89:85:7D:31:01:A8:AE:E2:9D:FA
Certificate issuer:       /CN=fd9f7dc5095abdb445d189857d3101a8aee29dfa
Certificate serial:       01967642FEC9C6087BA86BE3E17313EC250A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_Z99xQlavbRF0YmFfTEBqK7info.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.mft
Manifest number:          150E
Signing time:             Sun 27 Apr 2025 08:00:24 +0000
Manifest this update:     Sun 27 Apr 2025 08:00:24 +0000
Manifest next update:     Mon 28 Apr 2025 08:00:24 +0000
Files and hashes:         1: _Z99xQlavbRF0YmFfTEBqK7info.crl (hash: jut4X5j0X0d0F2WV1IS1iLghuDDzUgaHUWCi78pbXA4=)
                          2: hb6ryi0zlarGbicwA660cAdO1uU.roa (hash: npI6mlOfecW2btMEPci2EHiqJhnGF4s0rXnIs0wQ4wY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_Z99xQlavbRF0YmFfTEBqK7info.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:42:fe:c9:c6:08:7b:a8:6b:e3:e1:73:13:ec:25:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd9f7dc5095abdb445d189857d3101a8aee29dfa
        Validity
            Not Before: Apr 27 08:00:24 2025 GMT
            Not After : Apr 28 08:00:24 2025 GMT
        Subject: CN=8c44ce54ed99a8535d69569c59ecfb166534bb4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:db:5a:c9:2b:46:29:79:83:12:d4:a3:ba:9f:
                    2b:f4:e5:bf:0a:47:12:3f:70:28:fd:0c:fb:be:75:
                    57:5a:4b:a4:12:a2:6d:e4:50:9d:19:7a:a4:b8:9c:
                    1b:f8:cc:07:60:30:4f:56:9d:73:45:c5:f8:8d:1e:
                    48:28:2f:cc:53:0a:7a:46:a2:b7:4a:1e:6d:f9:4e:
                    fc:de:03:b0:90:f2:9b:64:9c:25:a9:78:ea:a9:4a:
                    44:ae:e6:72:9b:fc:5e:fd:19:b3:d6:33:1d:50:c0:
                    39:03:3c:f3:63:69:3e:17:4e:9c:2e:8e:e2:5d:e2:
                    4e:9f:db:4f:f3:cc:08:43:12:40:80:a9:89:c2:cf:
                    ac:c3:f1:0a:ad:ab:07:fc:b3:3d:46:20:bd:a9:09:
                    3b:86:a3:29:45:43:58:20:17:85:7a:02:29:e7:2c:
                    7c:12:19:27:21:e2:ef:ef:76:2d:28:3b:b4:75:b1:
                    42:93:a7:1b:1f:1d:70:9e:86:45:74:7a:69:53:3c:
                    46:51:53:31:cd:ae:21:ca:28:e7:40:94:f4:37:45:
                    e7:c8:e2:17:8c:ee:cc:40:16:20:5b:f0:98:ce:59:
                    41:3a:60:8e:31:61:3a:88:67:ae:1f:81:be:91:4f:
                    d6:79:e8:de:88:fe:04:3f:b9:da:ed:f0:57:98:ba:
                    ac:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:44:CE:54:ED:99:A8:53:5D:69:56:9C:59:EC:FB:16:65:34:BB:4B
            X509v3 Authority Key Identifier:
                keyid:FD:9F:7D:C5:09:5A:BD:B4:45:D1:89:85:7D:31:01:A8:AE:E2:9D:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Z99xQlavbRF0YmFfTEBqK7info.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:4e:ef:5c:e7:a9:30:d0:b3:13:78:e3:cf:b6:05:a9:31:32:
         33:6c:c3:08:7f:04:d5:48:bf:fa:8b:30:b9:02:e9:0f:a3:ef:
         1b:55:ba:38:ec:61:e0:63:cb:e0:2a:23:b7:b2:14:7f:68:67:
         19:a8:20:e5:dc:95:bd:5e:69:4f:25:a4:65:73:18:54:13:88:
         03:3d:9c:f5:04:88:5e:95:65:f6:e9:74:7d:fd:ac:9f:71:95:
         d3:56:f8:eb:5c:d0:8d:ee:88:f7:c7:f8:9d:07:f5:4a:ac:c0:
         42:ca:c9:fb:85:66:bd:f4:0c:0d:f1:fe:f1:e1:8c:09:b6:11:
         7f:bd:d8:ce:f7:0c:24:f3:b2:9d:34:29:85:8a:97:1f:75:17:
         63:c4:5b:5b:e0:c1:d3:71:71:e3:07:4f:c0:80:13:a4:01:f1:
         f3:fb:36:bb:0b:c0:10:9a:da:91:5c:b0:d9:cd:29:21:5c:10:
         3a:0a:59:c1:a6:53:08:a6:57:88:c9:9d:cc:71:5f:ab:ab:de:
         28:06:ea:cf:8e:cc:7f:13:e4:44:f0:45:2b:53:8e:f0:d7:52:
         72:fe:b4:a9:e9:9f:46:d4:ac:12:2c:0f:6c:63:fb:83:9d:bf:
         53:0f:ca:57:73:aa:d6:04:96:3b:fb:0e:4d:7e:80:88:b7:63:
         44:70:3d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:25:07 2025 by rpki-client