Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/766240-2403-4cd1-9943-b5bb005a6a06/1/c0YEYfnEnrkXwZEVgLoORDLBJVc.mft
File:                     c0YEYfnEnrkXwZEVgLoORDLBJVc.mft (raw, json)
Hash identifier:          ByqfA6Dw7XKMPemkJaX6B53z+2ZzW3/ZOc9y5MNiCAc=
Subject key identifier:   63:6B:AA:35:B7:64:97:B0:15:96:BA:51:1E:D2:43:D7:B5:64:6C:45
Authority key identifier: 73:46:04:61:F9:C4:9E:B9:17:C1:91:15:80:BA:0E:44:32:C1:25:57
Certificate issuer:       /CN=73460461f9c49eb917c1911580ba0e4432c12557
Certificate serial:       0196760CAEFC5F096111BBE4D723EBA6CED9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c0YEYfnEnrkXwZEVgLoORDLBJVc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/766240-2403-4cd1-9943-b5bb005a6a06/1/c0YEYfnEnrkXwZEVgLoORDLBJVc.mft
Manifest number:          05AD
Signing time:             Sun 27 Apr 2025 07:01:04 +0000
Manifest this update:     Sun 27 Apr 2025 07:01:04 +0000
Manifest next update:     Mon 28 Apr 2025 07:01:04 +0000
Files and hashes:         1: c0YEYfnEnrkXwZEVgLoORDLBJVc.crl (hash: eQoMIFQrshlp4vbqq19CFC5n24f98bwac+i0aXHGGtU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/766240-2403-4cd1-9943-b5bb005a6a06/1/c0YEYfnEnrkXwZEVgLoORDLBJVc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/766240-2403-4cd1-9943-b5bb005a6a06/1/c0YEYfnEnrkXwZEVgLoORDLBJVc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c0YEYfnEnrkXwZEVgLoORDLBJVc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:0c:ae:fc:5f:09:61:11:bb:e4:d7:23:eb:a6:ce:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73460461f9c49eb917c1911580ba0e4432c12557
        Validity
            Not Before: Apr 27 07:01:04 2025 GMT
            Not After : Apr 28 07:01:04 2025 GMT
        Subject: CN=636baa35b76497b01596ba511ed243d7b5646c45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:da:8a:77:ca:95:11:9e:d8:a6:c8:8f:7f:ab:
                    01:0e:3f:4e:2f:85:cf:00:67:9a:4d:cf:a3:7d:e0:
                    be:2a:a9:1d:44:ae:90:97:e5:6e:ea:1f:9a:10:6d:
                    c9:b8:a9:07:54:42:dd:f3:09:c2:73:c8:1a:62:48:
                    b5:4b:56:ed:ac:8c:c8:d0:d3:9c:05:b4:fd:c4:56:
                    5c:27:17:c9:c7:1d:46:7b:d6:63:d0:27:1c:45:40:
                    09:77:19:bd:41:d6:b1:3d:53:a4:71:c0:fe:22:4c:
                    66:75:bb:d1:a4:27:af:cc:71:07:3a:89:69:4e:f2:
                    17:cc:1a:2d:0c:31:5d:4f:d4:9a:87:95:ab:61:7a:
                    9d:81:8c:8b:7a:12:26:7d:08:ea:b6:58:e2:28:c5:
                    c2:3c:e5:4c:65:03:33:5b:56:c6:a0:72:2d:bd:94:
                    e3:9f:c2:33:52:43:6f:0d:be:f2:2c:fc:b2:5f:eb:
                    58:bc:4a:43:39:ea:02:6d:1d:b1:3d:08:04:fc:f3:
                    f0:0f:d0:e9:45:74:06:47:40:89:e5:e1:30:94:75:
                    59:56:64:c8:2f:73:1d:b9:b5:69:d3:56:ed:62:69:
                    3a:3e:81:26:c9:3c:7a:d1:f3:6f:d0:1e:58:72:30:
                    49:4f:2e:6e:ba:53:11:a4:b6:c5:b3:e4:d7:da:d9:
                    39:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:6B:AA:35:B7:64:97:B0:15:96:BA:51:1E:D2:43:D7:B5:64:6C:45
            X509v3 Authority Key Identifier:
                keyid:73:46:04:61:F9:C4:9E:B9:17:C1:91:15:80:BA:0E:44:32:C1:25:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0YEYfnEnrkXwZEVgLoORDLBJVc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/766240-2403-4cd1-9943-b5bb005a6a06/1/c0YEYfnEnrkXwZEVgLoORDLBJVc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/766240-2403-4cd1-9943-b5bb005a6a06/1/c0YEYfnEnrkXwZEVgLoORDLBJVc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:79:83:3f:61:6d:50:fb:8c:ff:b7:13:dd:7c:30:79:ba:4e:
         44:3b:19:d2:48:b5:76:81:dd:6a:4d:5c:2a:39:bf:a6:ed:91:
         2c:19:62:81:4f:fa:fa:83:30:5f:09:09:f7:89:b0:c8:b2:f5:
         88:21:7d:11:c1:3f:8b:71:13:4a:0a:44:95:97:b5:1f:60:28:
         d0:e8:ca:da:88:a6:f5:dd:cd:28:43:45:7e:42:77:61:9c:55:
         ff:14:01:1b:4a:e0:a4:b5:2d:35:25:1d:36:ef:4e:53:27:a7:
         13:ec:29:e0:cc:38:e2:6c:24:13:24:71:5d:5f:0f:73:66:48:
         eb:53:1f:8e:8c:2c:70:55:76:68:c9:0c:ab:a5:2b:3e:91:96:
         89:9a:21:70:5f:91:08:65:cd:1e:c3:c1:c3:fa:09:ab:cd:ff:
         06:f7:02:dd:bc:02:60:ac:14:41:1e:25:fc:10:d2:0d:72:d5:
         c4:a9:71:a6:94:17:aa:ef:22:4e:4a:af:5f:2e:84:ed:10:a0:
         c5:f6:c1:d1:dc:d8:c0:a0:19:3c:ac:42:bf:c7:3d:60:a7:14:
         d2:9c:3d:48:e5:4e:36:e5:12:9a:53:63:ba:de:fe:27:72:3e:
         41:42:72:65:95:4c:2f:27:82:bc:37:9d:9a:e9:5c:98:08:a1:
         10:51:be:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:51:25 2025 by rpki-client