Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/9cb6b5-7a53-406f-af7a-17c38d9c3768/1/__8PpR5pOdAdyqK7PV3KptAEPaI.mft
File:                     __8PpR5pOdAdyqK7PV3KptAEPaI.mft (raw, json)
Hash identifier:          kwul2aIRMsEdIbWY8dFlfhZh38W8TJYFb8rDfd0rmwU=
Subject key identifier:   DB:15:D0:C1:02:DB:A5:75:A3:DE:13:CC:66:86:C7:A3:CA:3C:16:F3
Authority key identifier: FF:FF:0F:A5:1E:69:39:D0:1D:CA:A2:BB:3D:5D:CA:A6:D0:04:3D:A2
Certificate issuer:       /CN=ffff0fa51e6939d01dcaa2bb3d5dcaa6d0043da2
Certificate serial:       0196759E620EACDA8ACD4C0148459010505E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/__8PpR5pOdAdyqK7PV3KptAEPaI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/9cb6b5-7a53-406f-af7a-17c38d9c3768/1/__8PpR5pOdAdyqK7PV3KptAEPaI.mft
Manifest number:          1510
Signing time:             Sun 27 Apr 2025 05:00:36 +0000
Manifest this update:     Sun 27 Apr 2025 05:00:36 +0000
Manifest next update:     Mon 28 Apr 2025 05:00:36 +0000
Files and hashes:         1: __8PpR5pOdAdyqK7PV3KptAEPaI.crl (hash: o/ooIIib016+7DnHM+mG6WyGz1J7YyNaFoBTW5Xlcno=)
                          2: q2RHTYlkcDgCjrfVNvYYh8gtuZ0.roa (hash: rnMDx8HFmMRUD1wSEEKi54fuapDGJDZJ6EgL5LNncSg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/9cb6b5-7a53-406f-af7a-17c38d9c3768/1/__8PpR5pOdAdyqK7PV3KptAEPaI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/9cb6b5-7a53-406f-af7a-17c38d9c3768/1/__8PpR5pOdAdyqK7PV3KptAEPaI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/__8PpR5pOdAdyqK7PV3KptAEPaI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:75:9e:62:0e:ac:da:8a:cd:4c:01:48:45:90:10:50:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffff0fa51e6939d01dcaa2bb3d5dcaa6d0043da2
        Validity
            Not Before: Apr 27 05:00:36 2025 GMT
            Not After : Apr 28 05:00:36 2025 GMT
        Subject: CN=db15d0c102dba575a3de13cc6686c7a3ca3c16f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:91:ce:a3:ee:f0:a1:5b:61:b0:15:91:e3:8b:
                    81:0c:1b:73:a2:fb:36:1f:5a:15:81:44:24:1e:f7:
                    6f:10:40:b4:a6:fe:49:18:b3:62:e6:ac:aa:67:3a:
                    77:78:fa:2b:8e:f6:ee:6c:84:5e:7e:96:aa:37:36:
                    39:46:3b:62:76:c2:25:70:da:74:42:6b:43:d7:50:
                    66:7a:58:bd:cd:c8:e7:19:3e:a9:1b:e6:77:dc:d0:
                    0f:42:b2:ad:d5:c9:82:c2:3c:56:fa:b1:6f:73:3e:
                    e8:a3:fe:c4:fd:ae:5c:16:52:d2:bd:b7:9a:94:0a:
                    24:7f:81:34:30:0f:09:6f:bd:af:f4:57:dc:3d:dc:
                    5c:41:2a:ff:db:f3:0d:ad:33:04:5f:bd:d1:12:b0:
                    0a:d4:74:e7:d1:08:82:7b:c7:d6:77:cc:47:94:ea:
                    af:f5:bd:08:85:33:4e:f9:f8:9d:b4:26:57:f1:aa:
                    46:72:2b:6c:90:31:68:35:01:53:7b:79:ec:10:4b:
                    d6:8d:f3:ab:ba:ac:da:48:48:91:38:e7:cd:0e:7e:
                    3e:f6:6c:50:90:8d:dd:dc:4e:59:b7:e6:56:98:7b:
                    fd:88:8c:4f:ea:52:50:a9:ea:78:4c:e5:1f:e1:1c:
                    76:28:c2:c9:df:b8:30:7d:f1:32:a3:40:2b:df:26:
                    80:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:15:D0:C1:02:DB:A5:75:A3:DE:13:CC:66:86:C7:A3:CA:3C:16:F3
            X509v3 Authority Key Identifier:
                keyid:FF:FF:0F:A5:1E:69:39:D0:1D:CA:A2:BB:3D:5D:CA:A6:D0:04:3D:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__8PpR5pOdAdyqK7PV3KptAEPaI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9cb6b5-7a53-406f-af7a-17c38d9c3768/1/__8PpR5pOdAdyqK7PV3KptAEPaI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9cb6b5-7a53-406f-af7a-17c38d9c3768/1/__8PpR5pOdAdyqK7PV3KptAEPaI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:0d:eb:95:70:7a:28:d6:31:a5:07:e4:6c:46:5b:2e:86:8f:
         c1:af:c6:e7:33:f3:f9:39:e9:cc:6f:30:84:16:af:07:d3:57:
         73:57:aa:4f:2b:68:16:0a:58:75:4d:c0:6b:cb:6e:63:e2:c6:
         f4:41:c0:a0:80:6c:96:60:6f:80:48:9c:50:f0:de:88:c1:87:
         2f:b4:cd:5c:cb:d3:2b:64:15:b3:0a:35:66:78:f9:a8:24:34:
         b9:20:10:67:e8:84:d9:9e:a1:30:ad:88:38:a3:7b:5c:ef:56:
         5d:db:6e:47:be:72:7c:9c:1d:a1:97:80:00:0d:3b:93:40:13:
         e6:c6:3e:8e:53:eb:c8:1b:27:bb:c5:6f:96:56:47:fa:50:74:
         f2:a5:24:5c:af:77:fd:05:9f:19:6a:07:36:1e:a6:d5:35:7a:
         ec:b9:18:43:2f:6a:16:ed:04:44:14:d1:6d:92:ce:ed:b8:57:
         fd:02:ef:55:90:4d:42:33:9d:e5:42:4c:ce:72:65:43:71:27:
         bb:86:40:4d:b4:b9:57:17:7c:7f:e2:40:45:46:2f:ce:01:23:
         91:6a:35:71:f7:d2:22:17:e0:43:45:78:17:1b:c7:ed:fe:51:
         e2:fa:42:01:16:9d:16:a8:dc:fe:60:16:88:b5:fc:8c:a9:17:
         a8:09:ef:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:15:11 2025 by rpki-client