Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/22efbb-3659-4a3d-bea4-962d4f0c29b0/1/ny8WbQXql29prtWORqQfflBSRHU.mft
File:                     ny8WbQXql29prtWORqQfflBSRHU.mft (raw, json)
Hash identifier:          43X+e9iEe2LkryYay/Z6SK4OTnI5kV4ejdUxLaruons=
Subject key identifier:   02:63:87:9B:F8:63:88:DC:5F:64:1C:AF:D2:F0:5C:5A:13:56:AB:EA
Authority key identifier: 9F:2F:16:6D:05:EA:97:6F:69:AE:D5:8E:46:A4:1F:7E:50:52:44:75
Certificate issuer:       /CN=9f2f166d05ea976f69aed58e46a41f7e50524475
Certificate serial:       019678D6C626B15C1E42E0CE609599835FF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ny8WbQXql29prtWORqQfflBSRHU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/22efbb-3659-4a3d-bea4-962d4f0c29b0/1/ny8WbQXql29prtWORqQfflBSRHU.mft
Manifest number:          1287
Signing time:             Sun 27 Apr 2025 20:01:03 +0000
Manifest this update:     Sun 27 Apr 2025 20:01:03 +0000
Manifest next update:     Mon 28 Apr 2025 20:01:03 +0000
Files and hashes:         1: ny8WbQXql29prtWORqQfflBSRHU.crl (hash: sy5+PPLF2cwSumiivlK+JOsOxz5imM+Yup8wk13FF+8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/22efbb-3659-4a3d-bea4-962d4f0c29b0/1/ny8WbQXql29prtWORqQfflBSRHU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/22efbb-3659-4a3d-bea4-962d4f0c29b0/1/ny8WbQXql29prtWORqQfflBSRHU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ny8WbQXql29prtWORqQfflBSRHU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 20:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:78:d6:c6:26:b1:5c:1e:42:e0:ce:60:95:99:83:5f:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f2f166d05ea976f69aed58e46a41f7e50524475
        Validity
            Not Before: Apr 27 20:01:03 2025 GMT
            Not After : Apr 28 20:01:03 2025 GMT
        Subject: CN=0263879bf86388dc5f641cafd2f05c5a1356abea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5b:e0:53:b2:b1:40:25:a1:fb:1f:d8:5e:6d:
                    1f:84:a9:a6:54:f3:75:5a:13:9d:f6:12:d5:54:17:
                    a1:5a:47:a6:2e:51:4c:ce:9e:46:38:e6:51:e3:b4:
                    50:cf:6e:4d:f2:cb:79:f7:6e:25:e3:ba:7e:d1:3a:
                    45:ee:76:c7:10:58:bc:da:04:53:a3:41:93:fa:d5:
                    9e:fb:f8:2f:60:0a:50:ef:88:ad:1c:b9:d9:4e:03:
                    bc:65:68:71:7f:e9:13:81:40:25:46:9a:fa:89:05:
                    30:05:44:ff:8d:36:2c:fc:9b:fa:6b:e2:58:e9:f6:
                    94:6a:2f:9e:be:f5:9f:c3:f8:16:85:6a:03:1b:07:
                    2c:d4:9d:c0:7c:df:e3:02:37:4e:87:87:57:3c:2b:
                    9f:98:6b:20:30:bb:fb:43:46:5a:f5:aa:3f:bf:77:
                    1d:b6:8f:94:97:24:70:95:ed:58:31:c0:0d:09:a6:
                    f2:cb:e4:9a:af:9a:1d:f7:92:c2:4b:6e:bc:6f:9b:
                    83:37:51:7f:72:1f:21:df:cd:5e:e3:b6:2d:7f:13:
                    59:4e:df:7a:29:cc:4b:bf:25:07:85:8e:02:86:25:
                    c7:87:98:41:7e:35:77:ed:d1:07:54:60:d8:0e:00:
                    e6:7a:40:61:58:9d:89:25:f3:00:ef:b6:2b:29:5d:
                    1e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:63:87:9B:F8:63:88:DC:5F:64:1C:AF:D2:F0:5C:5A:13:56:AB:EA
            X509v3 Authority Key Identifier:
                keyid:9F:2F:16:6D:05:EA:97:6F:69:AE:D5:8E:46:A4:1F:7E:50:52:44:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ny8WbQXql29prtWORqQfflBSRHU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/22efbb-3659-4a3d-bea4-962d4f0c29b0/1/ny8WbQXql29prtWORqQfflBSRHU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/22efbb-3659-4a3d-bea4-962d4f0c29b0/1/ny8WbQXql29prtWORqQfflBSRHU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:6f:65:1b:93:7e:9d:fd:7d:be:dc:f7:a4:ce:cf:c6:b6:53:
         ad:da:fa:29:2d:39:83:40:ab:c5:ef:ca:8b:6c:bc:c0:16:34:
         d7:01:54:0f:1d:aa:cc:04:8e:14:be:e4:61:3d:a4:21:ab:78:
         3c:1f:2f:1d:bc:d0:66:8f:1b:a5:ff:cd:cc:e5:72:a6:5f:c9:
         7b:56:4e:7d:a5:5a:f0:1a:eb:4d:6d:31:c4:d9:ee:64:30:6c:
         c8:6f:8a:64:89:5d:eb:8c:1a:2a:82:ad:9f:16:1e:0a:b2:4f:
         cd:1b:ac:f8:7c:a0:53:1e:c2:b3:95:83:47:04:55:dc:ea:4e:
         eb:04:e8:8c:4e:ca:be:45:43:01:95:ed:ea:d1:3b:d7:60:04:
         b3:48:9e:aa:4f:71:9a:ac:b7:54:eb:5c:42:06:9b:ab:9f:6d:
         7a:15:28:ae:7e:61:67:f1:a0:dc:79:78:f9:f2:be:8c:e6:8e:
         c4:a8:79:d8:2d:06:f9:cf:8e:80:34:96:4c:2c:13:c8:0a:fb:
         0d:ea:e9:10:cd:b8:e1:42:11:58:ee:01:6d:66:e1:b8:87:a4:
         d3:c1:f8:e0:78:fc:c9:66:ec:8b:15:18:29:b5:fd:a5:6b:b6:
         cd:ec:7d:a4:1c:c2:ba:e8:87:93:ee:a9:25:2f:32:c1:64:84:
         8e:70:99:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:08:43 2025 by rpki-client