Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.mft
File:                     rHhiwpnWCIcYdgqWFoJy_Mv9qXA.mft (raw, json)
Hash identifier:          rIHYvbHcs64WxCsi2m/Bz10ZaliX8QvYI/SqMM5aimA=
Subject key identifier:   14:4B:FF:87:A1:85:B5:96:56:87:8C:D3:A3:05:33:22:C9:42:87:E3
Authority key identifier: AC:78:62:C2:99:D6:08:87:18:76:0A:96:16:82:72:FC:CB:FD:A9:70
Certificate issuer:       /CN=ac7862c299d6088718760a96168272fccbfda970
Certificate serial:       01968DDD9E6F39C97DEB35E5B1FD286A186A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.mft
Manifest number:          035B
Signing time:             Thu 01 May 2025 22:00:33 +0000
Manifest this update:     Thu 01 May 2025 22:00:33 +0000
Manifest next update:     Fri 02 May 2025 22:00:33 +0000
Files and hashes:         1: rHhiwpnWCIcYdgqWFoJy_Mv9qXA.crl (hash: 1qn0TY0Q81P+X6alw2f1KgTGkKm5GrO4NIsie1Avqxs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 22:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8d:dd:9e:6f:39:c9:7d:eb:35:e5:b1:fd:28:6a:18:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac7862c299d6088718760a96168272fccbfda970
        Validity
            Not Before: May  1 22:00:33 2025 GMT
            Not After : May  2 22:00:33 2025 GMT
        Subject: CN=144bff87a185b59656878cd3a3053322c94287e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0c:c8:6d:d2:00:04:7d:30:8a:97:3b:b7:1a:
                    2d:02:6a:3a:b1:01:ed:e4:9f:02:6a:96:0d:40:7b:
                    d9:b3:46:24:34:40:07:bd:01:c0:85:a8:93:e0:92:
                    16:df:ac:dd:d0:7e:63:5b:53:ed:bf:1f:28:a0:16:
                    51:8d:16:b8:85:d3:99:ff:cd:50:f7:ec:6d:bc:4a:
                    fc:13:6d:50:cc:82:01:68:56:cf:b1:2b:fe:55:08:
                    ce:ea:b8:b8:5e:30:45:ee:e8:d3:c4:2c:e2:1b:b2:
                    c2:c9:31:74:72:64:83:6a:22:c3:d4:eb:3d:20:4d:
                    0a:f2:0b:5f:25:34:f7:5a:c4:4d:81:5e:80:83:1d:
                    61:a7:70:10:4f:cd:88:c0:1c:87:6f:ee:e4:f3:45:
                    bb:73:af:b5:8e:0a:aa:c5:d7:61:85:72:5b:0b:15:
                    1c:fb:38:b6:93:82:1a:8e:57:c7:1d:33:52:56:1f:
                    ea:1f:9f:c2:0d:7c:75:fe:36:1e:85:7d:7c:67:2c:
                    ec:a4:f9:db:f5:d0:e9:a6:26:fd:0e:7a:d3:e6:b1:
                    25:b7:6d:8d:a1:66:e7:bc:b0:66:a3:c9:1f:02:61:
                    06:44:36:7f:ef:df:8b:0d:e5:c3:1d:29:6a:ae:3c:
                    21:8e:30:1b:7f:bf:db:0e:23:28:94:1b:a0:63:21:
                    ce:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:4B:FF:87:A1:85:B5:96:56:87:8C:D3:A3:05:33:22:C9:42:87:E3
            X509v3 Authority Key Identifier:
                keyid:AC:78:62:C2:99:D6:08:87:18:76:0A:96:16:82:72:FC:CB:FD:A9:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:5f:04:0c:ed:31:31:05:d8:51:35:07:4b:42:b1:db:6b:96:
         f2:d2:d6:76:ce:8e:c1:b8:4d:90:82:74:e0:c0:07:dc:3a:aa:
         ad:01:18:24:b6:17:2a:d0:fc:db:e1:61:d3:7d:c6:69:68:01:
         cd:5b:40:fc:94:4f:2d:c6:03:b3:5d:cd:03:88:93:17:88:e3:
         c3:23:11:33:ff:1f:6d:97:29:ef:e0:71:c7:cb:23:3c:ac:5c:
         2b:0e:73:0f:39:c9:e6:13:a6:a9:3b:81:53:ea:04:5d:ad:a3:
         0f:75:bc:08:33:f9:48:39:04:10:fa:f7:ce:84:2a:13:96:5f:
         52:cf:27:ab:d7:7a:80:bb:a0:14:e1:db:94:b0:09:a0:87:07:
         09:e2:26:32:90:a7:03:4e:73:3e:9d:f6:3c:00:46:bd:e7:8a:
         41:27:ee:a3:14:4b:3b:33:94:14:28:0e:b5:8b:45:a3:dd:f7:
         9e:05:bd:9e:51:49:b9:8f:e5:19:4e:f7:fb:dd:bb:be:45:23:
         f5:58:66:05:82:3c:82:d5:f4:f5:0a:2c:d3:3b:b6:f5:d7:a0:
         69:99:23:48:1e:b2:35:f0:3f:f9:48:54:f2:15:56:92:98:89:
         86:1c:b7:16:3f:e4:46:2c:fa:fd:07:b5:11:2b:b6:d1:61:59:
         0c:a5:ee:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 06:05:57 2025 by rpki-client