Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6ca8ec-6916-4384-9cf5-c4f53e17ddb0/1/7ixtYoTxFl0J6-20TeYXX-Azt3Q.mft
File:                     7ixtYoTxFl0J6-20TeYXX-Azt3Q.mft (raw, json)
Hash identifier:          NWIF5v1pkbxWVlqjt8TL6LyN7TNbOP1EGgUKlyX7Tps=
Subject key identifier:   66:79:32:57:94:05:25:AF:B5:C7:6B:85:63:BF:20:69:58:0C:D1:EB
Authority key identifier: EE:2C:6D:62:84:F1:16:5D:09:EB:ED:B4:4D:E6:17:5F:E0:33:B7:74
Certificate issuer:       /CN=ee2c6d6284f1165d09ebedb44de6175fe033b774
Certificate serial:       0196760CEFEBE82E3B6557C5972DF7C59259
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7ixtYoTxFl0J6-20TeYXX-Azt3Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6ca8ec-6916-4384-9cf5-c4f53e17ddb0/1/7ixtYoTxFl0J6-20TeYXX-Azt3Q.mft
Manifest number:          086D
Signing time:             Sun 27 Apr 2025 07:01:21 +0000
Manifest this update:     Sun 27 Apr 2025 07:01:21 +0000
Manifest next update:     Mon 28 Apr 2025 07:01:21 +0000
Files and hashes:         1: 7ixtYoTxFl0J6-20TeYXX-Azt3Q.crl (hash: /QoD4Yj+tzG6TN5Rp/6h8vOWR+dg5DTj6ewAhaTkd2k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/6ca8ec-6916-4384-9cf5-c4f53e17ddb0/1/7ixtYoTxFl0J6-20TeYXX-Azt3Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/6ca8ec-6916-4384-9cf5-c4f53e17ddb0/1/7ixtYoTxFl0J6-20TeYXX-Azt3Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7ixtYoTxFl0J6-20TeYXX-Azt3Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:0c:ef:eb:e8:2e:3b:65:57:c5:97:2d:f7:c5:92:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee2c6d6284f1165d09ebedb44de6175fe033b774
        Validity
            Not Before: Apr 27 07:01:21 2025 GMT
            Not After : Apr 28 07:01:21 2025 GMT
        Subject: CN=66793257940525afb5c76b8563bf2069580cd1eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:24:94:f8:90:48:ff:f9:e0:fb:e1:aa:f1:72:
                    87:b1:b1:26:0f:bd:4b:2f:1b:2e:99:f4:30:dc:fa:
                    51:85:98:d6:dd:e3:b8:be:27:3d:2c:07:31:43:8d:
                    bd:fc:0f:43:b5:d1:d5:0d:5a:ae:f4:07:81:1b:21:
                    0b:04:02:7d:f6:aa:a2:08:a9:5b:76:1c:47:7d:32:
                    a4:42:32:f5:c1:57:25:66:e2:75:69:a4:ce:2b:d3:
                    94:23:c2:ac:40:c5:c4:05:c9:56:e0:3a:e8:94:1c:
                    4b:19:a0:c3:65:5a:35:82:31:9d:14:f2:62:62:4b:
                    61:78:8d:3a:2a:96:69:7e:ea:57:f6:99:0e:98:e4:
                    2a:6e:62:dd:55:69:57:e4:7b:f4:09:f7:f2:94:d3:
                    3d:26:d0:87:62:04:9a:5e:19:12:92:22:47:e9:b0:
                    f8:cf:35:8c:0d:26:c6:68:b3:82:0f:7a:7e:a1:53:
                    c9:74:ce:27:e8:52:9e:f5:e5:be:0a:67:9d:b2:2a:
                    58:cb:98:89:5c:52:dc:8b:ce:1b:94:db:87:57:18:
                    5a:04:06:09:05:87:26:40:39:1e:71:87:ae:14:ff:
                    dd:f7:d3:71:7e:f4:02:9c:19:e1:ef:10:7d:b4:62:
                    6b:e1:8e:a5:fb:ea:b8:23:d1:c7:f9:e9:6c:6a:ad:
                    5a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:79:32:57:94:05:25:AF:B5:C7:6B:85:63:BF:20:69:58:0C:D1:EB
            X509v3 Authority Key Identifier:
                keyid:EE:2C:6D:62:84:F1:16:5D:09:EB:ED:B4:4D:E6:17:5F:E0:33:B7:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ixtYoTxFl0J6-20TeYXX-Azt3Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6ca8ec-6916-4384-9cf5-c4f53e17ddb0/1/7ixtYoTxFl0J6-20TeYXX-Azt3Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6ca8ec-6916-4384-9cf5-c4f53e17ddb0/1/7ixtYoTxFl0J6-20TeYXX-Azt3Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:53:aa:38:99:c3:ec:67:52:6b:ad:de:5b:cc:84:5d:ee:ee:
         16:47:5f:63:52:31:fe:aa:49:8e:d3:4e:38:2e:82:e7:a0:d8:
         d0:a9:10:e4:55:76:fd:10:23:b9:9d:42:97:32:15:97:b6:04:
         f8:e4:db:ee:a6:43:0f:10:8b:4a:b7:08:3e:05:d0:7e:6a:ec:
         0b:ef:d5:79:c0:59:ec:85:09:9b:69:bd:38:6e:5a:72:14:d5:
         67:81:b6:80:f8:3e:b3:e9:77:2e:ff:c7:9a:ae:8a:45:10:98:
         22:e5:64:81:46:84:ef:03:d0:b5:4e:2b:10:96:4d:82:31:86:
         bc:29:14:30:72:2b:6d:45:41:49:77:62:18:66:06:a2:b0:5d:
         01:00:ba:f1:4e:6d:6d:1b:a1:61:e3:2b:5f:7d:b6:d5:2e:61:
         9f:c8:0a:d7:80:b0:ae:48:d7:37:db:4d:cf:11:73:2d:2d:73:
         31:cd:be:4c:74:98:e8:1b:b7:d4:78:56:b1:67:02:4b:56:ff:
         c6:99:26:4e:6d:03:33:d5:bc:ae:6e:f1:76:17:9c:4a:ec:20:
         c5:4c:38:35:0d:02:0f:fe:28:c3:da:8e:8a:2d:b8:b6:36:cc:
         cc:8e:ac:0a:60:f4:58:83:04:41:bf:85:43:43:d2:8c:91:97:
         6e:e9:95:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:22:36 2025 by rpki-client