Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft
File:                     dUE1hHAyFWSttCp213OuPK57vVY.mft (raw, json)
Hash identifier:          a/fnHSUjL4XL8K5DmGjJz7zg3Q3VrtmkindxnNt5eN4=
Subject key identifier:   FC:BF:E2:A9:34:EF:04:AC:F4:8E:C2:A4:1F:55:66:D4:0B:C5:93:41
Authority key identifier: 75:41:35:84:70:32:15:64:AD:B4:2A:76:D7:73:AE:3C:AE:7B:BD:56
Certificate issuer:       /CN=7541358470321564adb42a76d773ae3cae7bbd56
Certificate serial:       019679B2070DF351878CF141CED4456BC28D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dUE1hHAyFWSttCp213OuPK57vVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft
Manifest number:          035C
Signing time:             Mon 28 Apr 2025 00:00:32 +0000
Manifest this update:     Mon 28 Apr 2025 00:00:32 +0000
Manifest next update:     Tue 29 Apr 2025 00:00:32 +0000
Files and hashes:         1: dUE1hHAyFWSttCp213OuPK57vVY.crl (hash: V89KGrPcjsZP3S1iODLIPxrndKRs5O3NrP5f7/9TlyA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dUE1hHAyFWSttCp213OuPK57vVY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:79:b2:07:0d:f3:51:87:8c:f1:41:ce:d4:45:6b:c2:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7541358470321564adb42a76d773ae3cae7bbd56
        Validity
            Not Before: Apr 28 00:00:32 2025 GMT
            Not After : Apr 29 00:00:32 2025 GMT
        Subject: CN=fcbfe2a934ef04acf48ec2a41f5566d40bc59341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3c:dd:ce:05:c2:d0:dc:c9:2c:ac:47:4d:86:
                    26:c2:53:36:a2:2e:fa:b1:79:98:8c:e3:0d:a9:2c:
                    b7:5f:77:5c:47:be:54:46:2b:68:39:6f:d8:05:27:
                    e3:7a:5b:41:c3:1a:5b:01:f9:eb:91:bd:de:a4:24:
                    53:36:fc:bb:07:60:b8:06:4c:17:bf:13:cc:bd:dc:
                    45:a1:50:22:21:bc:9d:61:32:bc:cd:85:eb:fe:ba:
                    54:d6:6d:6c:0d:fa:83:c6:73:65:cc:6b:ff:7b:1e:
                    05:d0:b8:8a:e5:4d:34:6a:5c:83:ce:b1:00:fb:d6:
                    d3:16:71:1d:20:c7:81:6b:8e:aa:32:81:45:99:94:
                    c6:04:08:c2:36:75:a4:52:32:4e:c9:16:f9:d0:33:
                    72:84:0b:b6:ad:89:c4:8f:54:8b:cf:9d:6c:18:f1:
                    67:51:6c:ce:65:70:b1:31:09:23:f9:54:96:da:27:
                    12:1c:77:19:20:33:e2:6f:fd:ce:9b:dc:3e:cf:65:
                    9f:63:51:ef:62:34:78:99:e6:02:df:5c:1b:49:ea:
                    72:20:ff:47:72:80:a6:28:da:f0:fd:90:81:b3:9a:
                    f1:35:3d:b6:f3:ac:bf:04:30:b1:33:77:eb:2b:9b:
                    85:09:2c:c1:a5:17:10:b8:b8:6e:d6:37:01:0f:68:
                    c6:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:BF:E2:A9:34:EF:04:AC:F4:8E:C2:A4:1F:55:66:D4:0B:C5:93:41
            X509v3 Authority Key Identifier:
                keyid:75:41:35:84:70:32:15:64:AD:B4:2A:76:D7:73:AE:3C:AE:7B:BD:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dUE1hHAyFWSttCp213OuPK57vVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:83:6a:7c:94:18:68:89:b2:e4:ac:0b:3b:67:5a:79:64:c0:
         e6:21:39:17:69:e5:ed:63:bd:6a:c2:4d:cd:3a:51:96:ed:7d:
         13:4a:fd:0f:9e:fd:4c:cd:08:e4:ec:e9:25:3c:af:f6:dd:97:
         8f:ac:4a:2e:70:98:2f:93:0e:4c:ee:3c:fe:71:da:44:86:cb:
         5a:91:f0:08:10:97:1f:41:53:fd:2b:82:63:09:f6:3d:02:31:
         d1:47:74:76:50:26:c4:63:cc:37:76:ae:ec:b8:ed:83:5f:1d:
         be:44:6b:99:2f:ae:2f:02:8a:c4:df:d8:ba:76:e1:a2:7d:d6:
         65:58:8a:34:ff:5f:20:29:55:9e:f6:36:ec:87:86:3a:67:c0:
         e4:04:03:06:44:a8:c6:e2:1c:13:ee:4b:37:c6:3f:4a:51:70:
         9a:2d:bf:48:f9:a7:44:e2:f8:86:55:c6:ad:ee:8f:0f:e1:4e:
         dc:29:c7:2d:51:07:cd:c2:36:a5:46:22:fb:35:1d:29:56:15:
         09:ce:25:44:53:5a:10:c7:ff:49:8e:9d:9b:d3:93:92:91:4d:
         6c:f0:f7:2e:28:54:90:93:36:15:ed:56:f6:33:4d:7f:00:98:
         a0:56:b2:ac:14:fb:02:e5:8e:d5:bf:e9:50:e8:16:dd:27:5f:
         2e:42:b2:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 07:52:16 2025 by rpki-client