Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
File:                     1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft (raw, json)
Hash identifier:          dzusJl8wGZmSjcX7f1xA0ZeuMik03UJc6rTvDciT9MU=
Subject key identifier:   9C:09:9C:D3:F3:47:75:37:D6:56:E6:EB:45:A4:52:28:BB:5E:E4:35
Authority key identifier: D7:18:7A:0A:BB:3E:EE:41:10:33:8B:7D:8F:3F:7E:7E:12:5B:E6:C4
Certificate issuer:       /CN=d7187a0abb3eee4110338b7d8f3f7e7e125be6c4
Certificate serial:       0196B1EA0163C8E9C33739AEAE7E48A567EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
Manifest number:          0A5E
Signing time:             Thu 08 May 2025 22:00:25 +0000
Manifest this update:     Thu 08 May 2025 22:00:25 +0000
Manifest next update:     Fri 09 May 2025 22:00:25 +0000
Files and hashes:         1: 1xh6Crs-7kEQM4t9jz9-fhJb5sQ.crl (hash: ULVQGd/eQc3Aj3SeiV0jjVy37V3cvyXTlTZebH/vTKQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 22:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b1:ea:01:63:c8:e9:c3:37:39:ae:ae:7e:48:a5:67:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7187a0abb3eee4110338b7d8f3f7e7e125be6c4
        Validity
            Not Before: May  8 22:00:25 2025 GMT
            Not After : May  9 22:00:25 2025 GMT
        Subject: CN=9c099cd3f3477537d656e6eb45a45228bb5ee435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c4:7b:57:4c:0d:e5:8b:e7:78:d5:92:cb:7d:
                    4d:47:e5:a3:03:e1:d5:a3:1d:cf:3d:74:17:5f:51:
                    d5:52:ac:6a:65:f7:2a:35:20:7b:78:70:4c:2a:bf:
                    30:dc:10:eb:55:ef:18:61:bc:41:21:e0:a1:e6:78:
                    ff:58:cf:53:6c:63:53:b1:aa:bc:dd:dd:65:0d:d9:
                    50:e8:79:aa:24:d0:7c:78:db:00:e6:48:14:97:4f:
                    2a:6f:8c:cd:94:05:90:b0:1e:6e:0c:2d:7c:c0:7f:
                    f2:1f:b9:5d:f0:55:78:9a:76:b2:e4:ed:a5:87:4f:
                    dc:76:ab:13:9d:e5:3d:9d:5c:0d:6e:e7:dc:04:e4:
                    71:bb:f8:d6:b1:45:4c:53:59:b0:08:e7:da:b4:0b:
                    52:35:be:3c:fb:4d:c9:8f:1d:94:11:cc:17:e7:12:
                    06:ab:7e:07:a3:3c:c7:fe:b0:33:cf:79:21:11:5d:
                    8a:5b:fe:67:c5:85:63:50:2b:95:79:2f:0d:0a:80:
                    a8:6d:52:99:e0:b3:37:42:3d:3f:1c:f1:19:70:7c:
                    ff:57:67:f4:5d:2e:55:eb:04:bc:52:a0:78:93:7a:
                    90:fb:03:8d:96:ae:86:d9:ea:36:b5:47:dc:88:69:
                    1c:51:b9:75:e5:8b:a8:21:b2:d8:8f:88:29:36:67:
                    96:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:09:9C:D3:F3:47:75:37:D6:56:E6:EB:45:A4:52:28:BB:5E:E4:35
            X509v3 Authority Key Identifier:
                keyid:D7:18:7A:0A:BB:3E:EE:41:10:33:8B:7D:8F:3F:7E:7E:12:5B:E6:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:d3:e6:c6:0f:cb:86:39:0a:5b:42:00:84:70:1c:1f:ec:98:
         3a:39:1c:47:b1:c1:9d:84:89:26:4f:d1:7a:e9:90:f1:6d:5c:
         02:b7:0b:37:ef:a4:0a:79:ac:19:69:25:e6:b1:3f:20:27:79:
         cf:43:3b:1d:d3:f7:ae:2b:5a:f2:26:a1:2f:bc:6e:6d:dc:50:
         4a:fd:c1:50:5c:06:28:6c:ff:01:9b:04:74:ec:58:d7:de:3b:
         2b:ea:ec:ba:df:ac:65:39:1f:12:77:2d:90:41:81:c5:34:c9:
         fd:43:d9:51:0e:6b:98:b1:49:19:f9:62:2c:b0:2d:96:97:6b:
         d0:50:8b:8c:d4:fe:f4:b0:4f:32:bb:6c:5d:a3:7e:c4:af:fe:
         b9:ad:82:60:5d:5b:85:b1:32:d2:06:00:47:67:ec:30:15:ee:
         43:0b:57:57:63:dc:68:b8:e7:74:d8:62:c0:16:01:92:47:9b:
         c0:58:b5:fd:67:ca:60:0e:ee:85:ff:1d:b5:b0:e1:19:0a:be:
         61:bf:82:ae:72:cc:a6:c7:45:0b:b0:98:f9:17:e6:e8:33:97:
         91:3a:26:39:bd:5d:a6:c3:d0:71:43:34:98:30:92:3b:4b:4c:
         b0:b1:21:02:40:53:35:95:c9:de:55:49:25:eb:a7:1e:21:c7:
         3f:44:9e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 03:10:34 2025 by rpki-client