Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.mft
File:                     2c-g5Eir4w0msGZanClNKcl7fr8.mft (raw, json)
Hash identifier:          e+Ds+RdSCNFnyCeD6+m0VbOYm80dj1YCSckvTqO6no4=
Subject key identifier:   17:F9:B5:CA:7D:D4:B7:01:BD:42:9E:1D:44:EF:20:34:99:D2:C7:A4
Authority key identifier: D9:CF:A0:E4:48:AB:E3:0D:26:B0:66:5A:9C:29:4D:29:C9:7B:7E:BF
Certificate issuer:       /CN=d9cfa0e448abe30d26b0665a9c294d29c97b7ebf
Certificate serial:       019679446958BF6B17C3923D7205FC5E77A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2c-g5Eir4w0msGZanClNKcl7fr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.mft
Manifest number:          150D
Signing time:             Sun 27 Apr 2025 22:00:48 +0000
Manifest this update:     Sun 27 Apr 2025 22:00:48 +0000
Manifest next update:     Mon 28 Apr 2025 22:00:48 +0000
Files and hashes:         1: 2c-g5Eir4w0msGZanClNKcl7fr8.crl (hash: 1YR2IDtAw/C3k3Et5pSheuT9jM7AIsr5dsDByEWKyMw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2c-g5Eir4w0msGZanClNKcl7fr8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 22:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:79:44:69:58:bf:6b:17:c3:92:3d:72:05:fc:5e:77:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9cfa0e448abe30d26b0665a9c294d29c97b7ebf
        Validity
            Not Before: Apr 27 22:00:48 2025 GMT
            Not After : Apr 28 22:00:48 2025 GMT
        Subject: CN=17f9b5ca7dd4b701bd429e1d44ef203499d2c7a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:5d:73:3a:0f:fd:16:4f:68:da:68:c3:f3:bb:
                    40:33:54:c8:0f:21:01:7d:de:bc:12:67:58:36:80:
                    24:c5:1c:9a:2a:8e:d2:13:26:e6:36:e8:d1:cb:e1:
                    97:a2:15:fe:ca:4e:71:f8:42:56:74:57:53:5d:a0:
                    d5:35:31:f0:67:00:b8:a1:99:19:20:6e:2b:25:8b:
                    c5:c6:da:f7:10:4a:df:65:c9:de:0a:eb:85:c2:3f:
                    96:4e:00:8d:a5:4a:e4:ec:9f:c3:99:9d:09:a3:30:
                    06:e8:33:c2:95:47:67:be:ff:7c:3c:56:47:e8:ce:
                    25:f1:3a:4d:8c:40:54:44:75:54:3e:e8:13:ed:56:
                    c6:05:76:26:f4:0f:60:5e:bb:df:4e:f8:55:20:d4:
                    e6:5f:30:37:6a:1a:9b:ed:03:46:b4:16:55:c5:37:
                    58:0a:c6:60:4b:1b:df:88:5b:fc:f1:4f:46:61:76:
                    61:9d:0d:8a:c1:cf:2f:56:6e:8f:73:6f:dc:83:49:
                    f0:1c:4c:f5:3e:cc:1d:61:fa:76:f2:ac:5f:e8:18:
                    ec:28:b1:68:47:0d:52:de:3f:05:41:d2:a4:33:82:
                    88:8f:47:82:cc:3b:e5:a9:13:88:c7:04:b8:17:4f:
                    db:09:10:46:3d:5d:9e:cf:19:f9:f7:e9:f2:bd:43:
                    ad:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:F9:B5:CA:7D:D4:B7:01:BD:42:9E:1D:44:EF:20:34:99:D2:C7:A4
            X509v3 Authority Key Identifier:
                keyid:D9:CF:A0:E4:48:AB:E3:0D:26:B0:66:5A:9C:29:4D:29:C9:7B:7E:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c-g5Eir4w0msGZanClNKcl7fr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:d8:37:06:11:b9:12:22:b2:91:01:1b:56:40:f1:d0:24:b0:
         53:41:5b:11:59:4e:8b:47:94:7b:0d:e0:77:d6:db:d3:7e:ff:
         a9:ae:f1:cc:39:e2:08:96:5f:6b:c5:c4:18:af:da:3f:04:e3:
         87:82:b7:55:1e:9a:f8:61:58:54:9a:0a:4a:de:cb:dc:0d:07:
         21:1d:4b:eb:80:bb:bd:38:9b:97:97:55:b7:6b:ff:b8:35:11:
         bb:60:ba:59:e9:d1:d8:79:6e:ea:88:ae:07:7c:f5:4a:ac:a8:
         60:75:09:9c:71:7a:94:3b:ea:f4:77:80:d1:6b:a7:91:7c:e8:
         f4:08:0a:f8:4f:92:8f:8e:8b:ad:fb:59:d0:bc:d7:5a:f3:32:
         12:c1:93:e8:5f:94:ca:c9:8b:5e:7e:9f:06:03:89:88:e0:93:
         5f:e9:b8:b1:ae:dd:93:07:b9:49:a4:2a:5f:0b:3d:eb:0a:8e:
         a4:49:5b:57:83:db:d9:3f:d1:f8:cb:1e:62:c8:c6:b2:96:59:
         a8:45:64:d5:37:61:96:c4:5d:67:b8:69:d5:25:d5:68:ff:23:
         c9:94:c4:33:3c:77:e5:20:cb:01:20:cb:ff:f8:ce:26:da:5d:
         82:05:ae:05:83:6d:21:2f:74:9e:2a:29:c8:75:68:a5:8b:75:
         4b:73:6a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:21:00 2025 by rpki-client