Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.mft
File:                     ff9xZV_eWNsEa4NfOewQ4tT3q_o.mft (raw, json)
Hash identifier:          1146cvm/xIf7PDSpR+r88Ejl8J3smeXN0Z1LIPCi0Io=
Subject key identifier:   93:F1:D8:10:29:49:9F:6B:3B:1F:F0:9F:67:D8:FA:A4:BF:18:7C:92
Authority key identifier: 7D:FF:71:65:5F:DE:58:DB:04:6B:83:5F:39:EC:10:E2:D4:F7:AB:FA
Certificate issuer:       /CN=7dff71655fde58db046b835f39ec10e2d4f7abfa
Certificate serial:       0196741E8B457027428262938C95346EEC16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ff9xZV_eWNsEa4NfOewQ4tT3q_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.mft
Manifest number:          150B
Signing time:             Sat 26 Apr 2025 22:01:20 +0000
Manifest this update:     Sat 26 Apr 2025 22:01:20 +0000
Manifest next update:     Sun 27 Apr 2025 22:01:20 +0000
Files and hashes:         1: ff9xZV_eWNsEa4NfOewQ4tT3q_o.crl (hash: UehuhbPNqf5YepOYJVRuHcInDLKadGG24sU4Jv/RiTY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ff9xZV_eWNsEa4NfOewQ4tT3q_o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 22:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:1e:8b:45:70:27:42:82:62:93:8c:95:34:6e:ec:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dff71655fde58db046b835f39ec10e2d4f7abfa
        Validity
            Not Before: Apr 26 22:01:20 2025 GMT
            Not After : Apr 27 22:01:20 2025 GMT
        Subject: CN=93f1d81029499f6b3b1ff09f67d8faa4bf187c92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:43:58:b4:5a:e0:a8:9f:5e:d8:ab:68:7c:a4:
                    aa:f9:8e:e9:ee:32:8f:56:f2:26:2d:0a:26:2e:d7:
                    d2:e2:d7:01:f1:98:60:33:70:a4:44:85:3d:8e:9e:
                    aa:ba:a5:68:ee:8a:e1:c7:6a:34:7d:d0:28:87:25:
                    81:1a:5d:1b:0d:16:46:f3:17:c8:84:58:a8:3f:9e:
                    c6:8c:7b:b5:1f:31:a6:5c:4f:cd:c1:85:cc:fa:7e:
                    59:a4:a0:aa:2b:bf:e0:ad:83:88:5c:ba:05:98:c8:
                    61:46:7e:cd:a6:10:b7:47:a8:19:10:4f:26:71:ae:
                    5c:f0:b9:72:2d:7e:41:aa:79:0d:fb:56:57:8a:20:
                    cd:97:55:ed:ea:d2:3c:69:2f:99:cd:94:2e:39:1e:
                    33:90:04:97:2a:3d:dd:e1:83:24:3e:47:c9:c4:cc:
                    7f:6f:22:43:40:91:e9:3b:66:ba:af:19:e9:98:16:
                    36:88:91:16:48:d7:fb:9d:06:5f:3c:ec:19:f3:be:
                    de:5a:3f:d3:8d:61:d5:ca:d6:95:23:2f:fa:f3:4a:
                    fb:1c:8b:45:f8:43:60:3c:c3:98:09:df:76:dd:16:
                    16:79:62:16:a2:82:44:55:b5:9c:71:48:b9:95:fb:
                    0a:f6:cf:9f:fa:11:a0:5d:7e:81:db:2f:16:54:b2:
                    b7:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:F1:D8:10:29:49:9F:6B:3B:1F:F0:9F:67:D8:FA:A4:BF:18:7C:92
            X509v3 Authority Key Identifier:
                keyid:7D:FF:71:65:5F:DE:58:DB:04:6B:83:5F:39:EC:10:E2:D4:F7:AB:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff9xZV_eWNsEa4NfOewQ4tT3q_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:b5:c4:da:1a:7a:80:bb:f0:8b:88:de:6d:59:b3:f0:a4:fe:
         c6:23:59:d9:e7:2b:2b:92:ac:cd:d5:4b:24:7d:eb:2f:4a:46:
         8c:84:a4:a4:2a:21:84:14:11:5c:d7:42:17:78:5a:83:9b:ee:
         1c:e0:8c:56:44:6a:24:b7:3d:6f:6f:16:91:80:94:e5:f6:57:
         ca:38:51:55:28:ed:82:bb:07:1a:de:e4:9a:51:0b:2f:a8:59:
         dd:41:b0:75:1a:96:58:0b:84:74:48:97:6d:c5:b0:35:89:4b:
         4b:ec:5a:28:f5:b6:58:91:b6:53:11:8b:cc:70:64:cf:f7:7d:
         cc:ff:54:47:29:12:a5:31:0a:70:76:fc:61:c7:3b:e9:2c:cc:
         2b:f4:41:df:ef:0a:0b:9f:0d:ca:1c:ef:58:7a:ae:d6:8b:d5:
         04:c9:f2:d4:27:b0:14:4f:55:0b:c8:e5:42:25:a5:70:a8:80:
         ef:64:02:94:9c:6e:b9:b7:b4:b4:be:87:b9:79:6c:75:26:13:
         81:e6:36:30:ba:c3:44:52:20:72:20:15:ed:c5:5c:72:6c:59:
         bb:2c:6e:35:99:e3:86:96:6a:e4:7f:55:3f:7d:54:35:bf:eb:
         b7:b3:27:57:85:0c:32:df:74:8f:d6:b4:a9:96:dc:16:cc:10:
         a9:31:64:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:08:31 2025 by rpki-client