Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.mft
File:                     1-rZRJK62A6DdXFzuGgq2UhOX22A.mft (raw, json)
Hash identifier:          IIDNDpmhViCyCTdIQg9pR2AhAd90tHo3EkpYJ+LhtzQ=
Subject key identifier:   DB:D3:E6:31:8C:C3:8D:FE:60:A9:99:8B:92:31:BA:61:BD:87:60:A1
Authority key identifier: FA:B6:51:24:AE:B6:03:A0:DD:5C:5C:EE:1A:0A:B6:52:13:97:DB:60
Certificate issuer:       /CN=fab65124aeb603a0dd5c5cee1a0ab6521397db60
Certificate serial:       01968B13A6BC1E1007FB2D7C029A5999178B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-rZRJK62A6DdXFzuGgq2UhOX22A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.mft
Manifest number:          0874
Signing time:             Thu 01 May 2025 09:00:43 +0000
Manifest this update:     Thu 01 May 2025 09:00:43 +0000
Manifest next update:     Fri 02 May 2025 09:00:43 +0000
Files and hashes:         1: 1-rZRJK62A6DdXFzuGgq2UhOX22A.crl (hash: WX24O8PvN0RvMYLeilBD9FMaBRIietpJRDi9mlH1Ew8=)
                          2: p41jrQB80nM3Fi93nL78jR6iBMo.roa (hash: nJZUqGT5BG1vu4ck1mxKQBzWxDOQCEnlZy8FawGaQcs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-rZRJK62A6DdXFzuGgq2UhOX22A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8b:13:a6:bc:1e:10:07:fb:2d:7c:02:9a:59:99:17:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fab65124aeb603a0dd5c5cee1a0ab6521397db60
        Validity
            Not Before: May  1 09:00:43 2025 GMT
            Not After : May  2 09:00:43 2025 GMT
        Subject: CN=dbd3e6318cc38dfe60a9998b9231ba61bd8760a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ac:d8:70:56:7d:2d:a5:42:dc:0f:21:d1:99:
                    ef:a5:aa:f5:05:8a:c5:8d:53:98:8e:1a:97:d3:49:
                    15:52:53:52:6e:01:11:b2:c4:d1:e5:a5:2f:1e:6a:
                    af:10:6b:7a:4f:95:3c:8b:13:38:8d:2f:ab:e2:d7:
                    a9:b3:dd:e0:63:2f:ec:51:8a:6d:ec:a8:d2:59:d2:
                    1b:db:e0:34:0c:3f:6d:b6:dc:4e:10:89:dd:dc:bd:
                    a5:0b:2a:f8:1a:6f:2e:f3:a9:18:06:ef:74:41:9a:
                    6d:a4:0c:d7:0a:29:ad:9a:ad:d7:c8:95:d8:2b:bf:
                    f8:8e:81:17:a9:bd:c6:80:4d:d7:69:be:49:f0:cb:
                    b9:87:97:a0:d2:90:97:3f:82:bb:61:cc:32:f7:18:
                    e7:dc:24:e0:71:41:63:04:31:16:1d:e0:63:23:c0:
                    64:ea:8e:93:f5:59:99:9a:60:f0:9b:7a:c7:a1:76:
                    26:26:73:bf:e0:ec:1d:28:a5:da:9c:43:0c:7e:c9:
                    b9:e3:49:77:42:38:09:cc:33:d0:69:99:3e:50:74:
                    3f:a4:d2:5f:f8:ba:39:5a:c4:08:87:9c:fc:2d:90:
                    8d:c3:53:e8:4c:46:d5:56:9a:bd:b0:bb:f1:bc:76:
                    7f:51:a2:54:6f:46:70:56:5a:ca:f2:f0:17:28:78:
                    3c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:D3:E6:31:8C:C3:8D:FE:60:A9:99:8B:92:31:BA:61:BD:87:60:A1
            X509v3 Authority Key Identifier:
                keyid:FA:B6:51:24:AE:B6:03:A0:DD:5C:5C:EE:1A:0A:B6:52:13:97:DB:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-rZRJK62A6DdXFzuGgq2UhOX22A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:af:c3:c1:61:41:a0:23:08:ec:1d:47:2c:99:c9:7d:df:1a:
         d4:6e:d6:2e:a6:38:99:eb:03:62:99:ec:0b:fb:af:2f:fd:6f:
         72:3c:5c:90:18:3d:51:fa:fb:f7:af:ef:99:a4:8a:7e:3c:da:
         ce:e4:3b:24:5c:45:15:51:e0:2b:9b:c6:bc:b3:5a:95:e6:5f:
         23:5b:23:3f:24:79:b7:6b:d8:33:4d:56:3b:80:6a:a5:d2:4a:
         4a:09:df:c8:7d:02:75:46:b8:77:ac:9a:cd:a2:43:4b:26:94:
         27:bb:e3:e4:0e:4b:cc:75:7b:25:37:2c:c1:5b:95:b7:de:89:
         08:3d:fc:e1:00:ef:5d:01:a0:ab:cc:d2:ff:e0:3d:21:c0:9b:
         8b:a3:3f:eb:fb:72:d0:3f:26:21:56:f8:85:79:40:c1:5c:f6:
         ea:63:71:53:33:d9:cc:ad:30:ff:73:75:2e:73:24:f5:99:d8:
         40:93:d7:c8:2d:29:ae:96:8f:60:e4:ea:24:ca:b8:9d:88:d9:
         07:9d:b5:37:ea:e9:99:ee:5b:89:5f:87:a6:07:80:c7:b6:6d:
         05:7d:fe:62:6a:5f:03:e8:fb:56:04:0d:0a:66:80:1a:ab:55:
         da:53:96:82:d2:ca:18:0e:11:59:56:2a:b4:c9:0c:a3:06:41:
         2e:b2:92:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 18:01:11 2025 by rpki-client