Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/65e973-b41b-4103-aa56-fcccea681b7a/1/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.mft
File:                     1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.mft (raw, json)
Hash identifier:          HVFdaw1MJ6UmftWPVrj2zPW+W3ocnVk8mkK0wrjo+Vw=
Subject key identifier:   48:8B:2E:B3:99:69:BE:77:BE:56:F0:CE:44:FA:61:62:A7:0A:23:5B
Authority key identifier: F8:9E:88:22:76:F8:0E:67:50:49:0E:EF:00:6D:E9:43:DA:CB:6E:0F
Certificate issuer:       /CN=f89e882276f80e6750490eef006de943dacb6e0f
Certificate serial:       019680590F2F66BACB7C93883FC166211748
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/65e973-b41b-4103-aa56-fcccea681b7a/1/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.mft
Manifest number:          07C5
Signing time:             Tue 29 Apr 2025 07:00:42 +0000
Manifest this update:     Tue 29 Apr 2025 07:00:42 +0000
Manifest next update:     Wed 30 Apr 2025 07:00:42 +0000
Files and hashes:         1: 1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.crl (hash: k2JWGNbvWnJRYpls2zDv7ECHjpjSirpNHepOXMJ9ab0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/65e973-b41b-4103-aa56-fcccea681b7a/1/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/65e973-b41b-4103-aa56-fcccea681b7a/1/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 07:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:80:59:0f:2f:66:ba:cb:7c:93:88:3f:c1:66:21:17:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f89e882276f80e6750490eef006de943dacb6e0f
        Validity
            Not Before: Apr 29 07:00:42 2025 GMT
            Not After : Apr 30 07:00:42 2025 GMT
        Subject: CN=488b2eb39969be77be56f0ce44fa6162a70a235b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:3f:91:16:df:db:ff:b5:fc:8f:6a:ef:0d:08:
                    b0:a5:e8:5c:d3:0b:b3:1e:bd:0a:ad:c0:6a:f9:80:
                    bf:79:3a:e4:6c:65:83:f5:53:07:db:44:f3:cf:2c:
                    8a:1d:e4:ef:1e:89:09:74:8e:07:99:5c:7d:0c:4b:
                    6f:f7:72:2d:c3:95:e6:f4:0c:22:e7:cf:2c:d1:d0:
                    cd:fc:49:e6:7b:14:73:8f:75:8b:54:16:f5:59:d0:
                    50:ac:0f:6b:d2:1e:32:fa:a4:ec:2d:15:1c:90:9e:
                    9c:3c:1e:d4:c8:1d:3c:64:08:fd:38:e6:1a:9e:10:
                    53:e3:8c:27:57:c9:35:1b:de:dc:d7:60:36:c7:0a:
                    b0:fb:45:f1:b4:43:d3:b7:31:89:50:e5:b3:14:7c:
                    7a:f1:82:87:90:48:68:32:47:2a:2d:fe:2f:e1:35:
                    24:a2:ce:45:bc:99:5a:cb:54:b8:57:dd:d0:dc:4a:
                    52:39:f2:b5:b0:6a:76:66:2c:c6:44:ce:0a:fd:3d:
                    95:ed:6e:4f:1e:9f:6c:8f:3e:14:29:22:42:f8:69:
                    91:c4:0e:77:12:6b:e9:3e:06:df:14:9e:0e:cb:7d:
                    f5:b8:7f:27:3a:29:06:ef:31:06:1b:68:58:80:b3:
                    f3:71:e9:1c:da:77:d6:78:28:23:78:4c:ea:a9:32:
                    98:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:8B:2E:B3:99:69:BE:77:BE:56:F0:CE:44:FA:61:62:A7:0A:23:5B
            X509v3 Authority Key Identifier:
                keyid:F8:9E:88:22:76:F8:0E:67:50:49:0E:EF:00:6D:E9:43:DA:CB:6E:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/65e973-b41b-4103-aa56-fcccea681b7a/1/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/65e973-b41b-4103-aa56-fcccea681b7a/1/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:56:bb:b8:32:8f:d8:ce:66:0e:1d:2e:6e:f8:e1:35:bf:6c:
         97:63:22:48:dc:b4:7c:a3:9b:59:ed:e7:cf:10:a7:31:6c:83:
         95:bd:a2:5a:64:ba:cc:c7:82:e0:e8:20:02:26:11:27:98:7f:
         00:e6:22:d6:53:c2:27:17:d5:34:84:90:ec:49:64:5f:bb:cf:
         ff:8e:38:f2:a6:d8:aa:3a:62:a4:db:d1:75:ed:37:f6:2d:56:
         4f:ce:5b:cf:3b:c7:54:54:cf:02:2c:f9:51:d4:57:3c:eb:2d:
         cb:71:cf:6c:0c:da:68:52:ec:4a:43:b6:9a:e1:ae:09:1e:60:
         58:ec:f3:68:86:8d:1f:21:a0:e8:fb:2a:8a:30:25:17:ab:f0:
         6c:1d:05:13:23:90:8c:8e:f1:39:6d:65:65:79:03:78:0d:a7:
         86:07:07:92:0c:12:7b:fb:cb:c1:a2:a3:20:48:f1:e5:c4:e7:
         7e:7b:32:32:35:d4:ed:a4:8c:9b:78:9f:3a:e9:4c:19:45:e8:
         d6:64:e3:70:a1:6c:03:18:0d:47:27:1e:7a:4b:e1:51:51:d6:
         2c:f6:c5:f9:10:07:07:53:cc:0d:3d:42:ab:22:f5:db:9f:e9:
         08:1d:df:eb:fc:cc:aa:93:60:05:08:cb:51:1f:54:4b:44:66:
         e0:06:12:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:13:27 2025 by rpki-client