Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.mft
File:                     1FbufkhK4u8JINCVvK4mj6_Wlhk.mft (raw, json)
Hash identifier:          oZyQiQ1pty+dVHHCLIvcTD98XxnEGtvIMWpYDFGzbic=
Subject key identifier:   60:DB:19:C8:C9:08:97:63:F9:20:8C:B2:03:D9:3D:2F:75:2C:0F:28
Authority key identifier: D4:56:EE:7E:48:4A:E2:EF:09:20:D0:95:BC:AE:26:8F:AF:D6:96:19
Certificate issuer:       /CN=d456ee7e484ae2ef0920d095bcae268fafd69619
Certificate serial:       0196944DB9B21228135CE0BA2906CA1548B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1FbufkhK4u8JINCVvK4mj6_Wlhk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.mft
Manifest number:          151C
Signing time:             Sat 03 May 2025 04:00:43 +0000
Manifest this update:     Sat 03 May 2025 04:00:43 +0000
Manifest next update:     Sun 04 May 2025 04:00:43 +0000
Files and hashes:         1: 1FbufkhK4u8JINCVvK4mj6_Wlhk.crl (hash: aU0oy5xvA5NknkNgUzwL4GqENfzFCqJfJRSnsws1Udk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1FbufkhK4u8JINCVvK4mj6_Wlhk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:94:4d:b9:b2:12:28:13:5c:e0:ba:29:06:ca:15:48:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d456ee7e484ae2ef0920d095bcae268fafd69619
        Validity
            Not Before: May  3 04:00:43 2025 GMT
            Not After : May  4 04:00:43 2025 GMT
        Subject: CN=60db19c8c9089763f9208cb203d93d2f752c0f28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fe:20:84:1c:c3:2b:bc:57:30:e8:94:f2:9e:
                    2c:fa:d2:5f:a8:17:a5:64:d6:b4:e7:03:bd:6e:94:
                    a1:08:d3:61:a6:bc:da:2b:31:32:89:8d:a5:8c:b3:
                    2d:42:c3:17:42:f8:f6:6b:a6:ce:03:cb:b2:5a:e4:
                    7f:15:33:8f:ed:13:f0:54:71:1c:78:23:31:43:27:
                    4c:03:27:58:27:cf:82:aa:cf:23:31:22:10:5a:c4:
                    f9:29:27:bd:aa:6b:56:1d:01:cb:28:dc:67:b0:19:
                    43:d4:26:01:ff:5a:de:f8:59:c8:e0:80:46:6e:81:
                    d8:22:87:78:37:2c:ab:0b:dc:f5:a0:ee:fe:ec:cc:
                    25:6b:14:02:6c:15:b9:2a:2d:61:5e:82:eb:46:32:
                    88:ef:85:cf:4b:0a:0c:23:55:dc:9f:5c:d1:5e:ba:
                    bc:ef:18:36:4a:f5:41:4a:07:4e:53:d0:14:b5:55:
                    7c:59:8a:49:d7:32:e9:e7:11:b7:d4:28:9b:3f:7e:
                    b3:16:ab:02:5e:28:ae:28:27:99:c7:22:8e:42:32:
                    8b:44:a7:fd:08:38:75:79:d0:66:82:13:22:0f:b4:
                    37:75:da:e6:1b:18:3e:8e:c0:d7:e3:1f:6a:f8:e6:
                    3d:87:49:0b:4b:14:cc:88:85:83:fe:48:f8:6f:31:
                    3b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:DB:19:C8:C9:08:97:63:F9:20:8C:B2:03:D9:3D:2F:75:2C:0F:28
            X509v3 Authority Key Identifier:
                keyid:D4:56:EE:7E:48:4A:E2:EF:09:20:D0:95:BC:AE:26:8F:AF:D6:96:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FbufkhK4u8JINCVvK4mj6_Wlhk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:33:45:86:a0:6c:84:68:74:fa:58:a8:da:3c:90:75:b8:ee:
         cc:5d:d7:3b:73:27:25:10:14:35:bf:72:b3:38:fb:ce:b9:59:
         78:5f:ca:b4:ae:a0:e7:d5:ca:31:b9:da:c7:ba:e5:78:d2:65:
         fb:70:1d:b6:aa:f3:d6:be:6a:7f:47:70:cb:87:90:50:3b:bd:
         1c:54:01:45:b3:36:3e:b0:0a:d0:2c:f5:dc:73:c9:4f:e4:a1:
         1b:f0:b8:0a:65:7b:f7:ad:1c:b9:03:66:e4:51:81:de:e8:7d:
         95:e6:8b:0b:73:f7:5b:4d:15:5a:7a:24:b6:45:47:83:c5:ac:
         71:bd:98:09:67:e3:a4:12:c3:06:70:24:6b:54:17:f0:c5:30:
         fc:6a:5a:d4:4b:57:55:f7:93:1d:e3:49:10:c7:3c:a9:48:d8:
         2d:82:8e:26:52:6d:fb:ce:43:33:5e:00:0e:d1:9b:31:3f:e7:
         d6:7f:07:d9:03:7f:ff:9f:b7:15:3f:c7:af:67:31:ac:ed:0b:
         1a:02:79:b3:35:a8:1a:95:ed:8c:6a:76:b9:12:6c:51:ea:88:
         bd:e9:dc:d1:2f:06:fb:72:cf:6b:5b:ed:68:2b:30:bb:e8:3d:
         9a:93:0a:f1:95:e1:97:56:8c:02:3b:4c:4f:34:99:cc:30:5b:
         9f:97:20:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 12:37:06 2025 by rpki-client