Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/eb26f7-1303-4210-a9d8-1eb3b8a941f7/1/L46D7v5_FLnkSQo27r2IHhY8zBs.mft
File:                     L46D7v5_FLnkSQo27r2IHhY8zBs.mft (raw, json)
Hash identifier:          xP9k5H84izvLalWO20BF/9rt4TGgw4np4yp1tp/rJHw=
Subject key identifier:   42:12:F8:E9:82:1A:51:98:29:13:1C:0D:CF:53:B7:49:86:60:42:B2
Authority key identifier: 2F:8E:83:EE:FE:7F:14:B9:E4:49:0A:36:EE:BD:88:1E:16:3C:CC:1B
Certificate issuer:       /CN=2f8e83eefe7f14b9e4490a36eebd881e163ccc1b
Certificate serial:       01968022AB7B634A73A2CB45754C0A78475F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L46D7v5_FLnkSQo27r2IHhY8zBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/eb26f7-1303-4210-a9d8-1eb3b8a941f7/1/L46D7v5_FLnkSQo27r2IHhY8zBs.mft
Manifest number:          125A
Signing time:             Tue 29 Apr 2025 06:01:17 +0000
Manifest this update:     Tue 29 Apr 2025 06:01:17 +0000
Manifest next update:     Wed 30 Apr 2025 06:01:17 +0000
Files and hashes:         1: L46D7v5_FLnkSQo27r2IHhY8zBs.crl (hash: 9VjqUuye/mGV55kW3a7nZLfolWI/1sr+vJ8KLvPTPRk=)
                          2: ou7kmfNJPTUTO_ZY5p4au0cZuog.roa (hash: 10vYhF0nx+k3pDi2pZX1tYjYlLEGelMx798hFv/wUiM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/eb26f7-1303-4210-a9d8-1eb3b8a941f7/1/L46D7v5_FLnkSQo27r2IHhY8zBs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/eb26f7-1303-4210-a9d8-1eb3b8a941f7/1/L46D7v5_FLnkSQo27r2IHhY8zBs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L46D7v5_FLnkSQo27r2IHhY8zBs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 06:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:80:22:ab:7b:63:4a:73:a2:cb:45:75:4c:0a:78:47:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f8e83eefe7f14b9e4490a36eebd881e163ccc1b
        Validity
            Not Before: Apr 29 06:01:17 2025 GMT
            Not After : Apr 30 06:01:17 2025 GMT
        Subject: CN=4212f8e9821a519829131c0dcf53b749866042b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a1:d1:64:ca:f6:35:14:d8:04:c5:b4:69:99:
                    a6:fe:11:9b:5f:25:70:08:0d:f7:ef:16:e0:77:8f:
                    e7:90:c3:b8:74:f1:6b:dc:86:db:b6:a2:1b:18:24:
                    d6:ba:6d:98:d9:67:e1:90:87:ac:7c:48:5c:f1:04:
                    e7:33:30:13:76:2d:12:d9:4f:10:a8:2d:7c:96:ff:
                    48:62:30:27:c6:5a:ca:e1:3f:da:0c:7b:ea:ba:32:
                    7f:43:1d:3e:77:f2:a1:6f:c8:ab:49:08:33:25:ad:
                    3b:f4:82:4f:40:d4:18:70:26:59:1c:15:c0:64:d2:
                    08:40:52:5f:ae:ac:71:8c:d7:d0:6f:10:d3:f4:54:
                    4f:d6:b4:8a:26:e7:46:94:d0:ec:fc:5f:cc:40:a1:
                    a0:70:69:07:a2:72:b8:c1:7f:76:7e:93:ae:a4:e4:
                    0f:da:ea:0f:5a:26:07:5e:ab:dc:cd:bf:d4:ef:f5:
                    b2:fc:a2:4b:63:85:80:64:66:a7:ad:b9:1e:c4:2f:
                    b5:82:44:ff:6b:53:e1:1b:a3:5c:91:26:e9:a6:8c:
                    58:a4:3e:32:1f:98:92:a5:a8:9a:b3:27:a3:f9:0f:
                    37:20:9a:1b:ba:65:f7:0a:60:cd:85:69:1e:94:a3:
                    ff:f4:21:6e:34:f0:c6:91:2c:39:4b:23:07:1d:fc:
                    54:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:12:F8:E9:82:1A:51:98:29:13:1C:0D:CF:53:B7:49:86:60:42:B2
            X509v3 Authority Key Identifier:
                keyid:2F:8E:83:EE:FE:7F:14:B9:E4:49:0A:36:EE:BD:88:1E:16:3C:CC:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L46D7v5_FLnkSQo27r2IHhY8zBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/eb26f7-1303-4210-a9d8-1eb3b8a941f7/1/L46D7v5_FLnkSQo27r2IHhY8zBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/eb26f7-1303-4210-a9d8-1eb3b8a941f7/1/L46D7v5_FLnkSQo27r2IHhY8zBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:39:cd:93:f0:de:cd:80:f2:c5:d3:79:00:82:76:e5:f9:45:
         1c:c6:f3:a2:9b:74:b4:bb:df:4e:04:d2:2f:72:1b:5d:de:30:
         0c:d2:48:42:58:ca:2b:16:9e:09:f0:e9:b2:08:a3:b6:2c:fd:
         e7:ef:0d:f6:1d:2a:7e:41:aa:3e:9b:1d:7c:b4:91:f0:44:49:
         75:3b:83:3a:c8:f8:a5:53:f2:46:25:32:53:98:58:fd:50:67:
         61:40:27:52:33:bf:98:b1:02:a2:8e:19:df:ab:d8:0e:27:f8:
         30:78:e8:ce:6e:6f:b0:a7:38:b0:20:aa:ad:cb:eb:04:ba:bb:
         a8:e3:2d:50:33:22:66:9f:82:dd:ab:3b:b5:eb:5f:d8:0c:3b:
         4c:e3:36:0e:1b:5d:bb:aa:3d:f5:87:44:9f:fe:4e:96:18:9c:
         c2:9f:20:80:88:18:22:fe:64:7a:56:66:80:04:d0:af:53:d0:
         ce:14:ad:67:ff:5f:27:11:7f:6c:aa:bc:e0:cd:a0:91:74:af:
         2d:b9:62:dd:8c:57:c8:88:97:3f:16:8f:b6:89:37:ae:8a:d0:
         eb:33:92:d4:ef:6c:e2:22:4c:75:2a:e0:b6:7a:39:9b:04:3b:
         2d:ca:16:84:76:77:a5:6c:14:5e:26:8c:73:61:af:21:89:82:
         32:7f:e4:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:22:24 2025 by rpki-client