Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/5521d8-09c6-4814-baa6-c2f2ea31e09e/1/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.mft
File:                     txdYsIXRDvJ8w-Fo9JAHXT58Tv4.mft (raw, json)
Hash identifier:          CvrLfvftOoKGZckzY20o3QF8DYJ9Zsdfrfc30Dl2eK8=
Subject key identifier:   5C:92:4A:47:3D:D8:85:30:B8:EF:B1:77:87:F7:E3:6B:4A:01:76:34
Authority key identifier: B7:17:58:B0:85:D1:0E:F2:7C:C3:E1:68:F4:90:07:5D:3E:7C:4E:FE
Certificate issuer:       /CN=b71758b085d10ef27cc3e168f490075d3e7c4efe
Certificate serial:       01969C073B1F5E9E69745A72D2163E8B63BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/5521d8-09c6-4814-baa6-c2f2ea31e09e/1/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.mft
Manifest number:          151F
Signing time:             Sun 04 May 2025 16:00:41 +0000
Manifest this update:     Sun 04 May 2025 16:00:41 +0000
Manifest next update:     Mon 05 May 2025 16:00:41 +0000
Files and hashes:         1: txdYsIXRDvJ8w-Fo9JAHXT58Tv4.crl (hash: hBFqm3C3bvugdGX5qfb/KUAP9cSD0hM2z+ozSXDISb0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/5521d8-09c6-4814-baa6-c2f2ea31e09e/1/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/5521d8-09c6-4814-baa6-c2f2ea31e09e/1/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9c:07:3b:1f:5e:9e:69:74:5a:72:d2:16:3e:8b:63:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b71758b085d10ef27cc3e168f490075d3e7c4efe
        Validity
            Not Before: May  4 16:00:41 2025 GMT
            Not After : May  5 16:00:41 2025 GMT
        Subject: CN=5c924a473dd88530b8efb17787f7e36b4a017634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c4:ad:bb:6d:00:60:1a:0d:0d:78:c4:d7:88:
                    be:e1:04:28:b9:cb:d9:20:e3:1b:05:8e:fb:26:8e:
                    69:54:ef:fc:3a:22:7c:a5:cf:7a:c2:95:1c:4b:79:
                    58:10:e7:dd:0d:9f:a1:a9:7f:e3:8f:57:40:1f:12:
                    28:c1:fe:7e:08:62:ad:92:1e:e6:94:33:39:28:0b:
                    93:2b:f9:9b:8b:32:0c:b7:6e:36:a1:42:11:7b:54:
                    41:0e:fc:08:e7:fc:38:53:01:c2:e8:3e:97:e2:62:
                    49:df:ec:b6:8a:45:ea:2b:53:96:0a:da:ef:31:ba:
                    1a:94:42:e4:b2:dc:4e:a1:1b:92:a4:82:8e:16:0a:
                    b9:92:22:f2:da:e7:ef:47:47:2b:ea:35:f6:9f:4c:
                    91:3d:79:a7:50:86:81:bb:83:e3:b6:e4:2b:01:97:
                    73:d9:c8:b1:ca:03:8e:fe:87:56:15:2f:0f:49:2e:
                    42:36:44:e6:88:4f:9e:d0:c9:9d:83:fb:d0:5a:73:
                    fe:16:0d:e2:5c:07:82:8e:60:46:4a:ca:b2:de:84:
                    3d:1e:80:dc:49:93:f2:aa:a2:15:99:40:78:76:ea:
                    6b:95:b5:9e:57:62:cd:38:0e:52:46:a0:69:21:4e:
                    c7:50:fc:ea:33:11:30:db:39:39:de:97:11:c4:26:
                    ac:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:92:4A:47:3D:D8:85:30:B8:EF:B1:77:87:F7:E3:6B:4A:01:76:34
            X509v3 Authority Key Identifier:
                keyid:B7:17:58:B0:85:D1:0E:F2:7C:C3:E1:68:F4:90:07:5D:3E:7C:4E:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/5521d8-09c6-4814-baa6-c2f2ea31e09e/1/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/5521d8-09c6-4814-baa6-c2f2ea31e09e/1/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:32:81:82:80:bf:c9:0e:04:19:87:2b:1b:fe:9f:31:96:e4:
         52:5a:72:6a:78:28:46:7a:e6:2f:9a:11:21:70:1f:21:0c:a4:
         1c:89:6c:25:cf:14:ee:84:62:15:d8:6d:e2:4e:a8:09:e2:da:
         ca:04:9d:dc:45:36:c0:4f:58:0c:9b:29:01:ec:65:ca:de:50:
         51:55:94:02:48:31:74:1b:d4:14:68:ea:51:d2:46:d8:e7:49:
         a4:c5:17:a3:3f:8b:32:fc:cd:8a:0f:9d:b9:ee:39:04:1f:30:
         6d:df:86:fe:4c:5b:b1:66:bd:03:ed:59:76:5e:da:0e:51:15:
         64:09:fd:08:b4:f7:2b:7c:6e:71:95:15:3c:8b:4b:07:e0:39:
         67:f4:50:08:4e:8f:04:d9:c6:c9:96:82:c5:fb:49:2c:e9:e9:
         16:ee:08:53:c4:fb:eb:76:8c:5e:af:53:73:3e:0e:bf:0d:86:
         c9:9f:ee:ba:b4:ab:f7:3b:a0:37:04:22:07:6d:90:3e:24:a2:
         ca:47:f6:51:53:1b:33:5a:ea:3c:05:12:21:d7:35:eb:fe:2a:
         d6:b8:4c:ba:6c:ee:e3:b4:22:8c:82:04:50:4f:86:c6:61:a4:
         94:35:64:52:75:cd:d1:6e:88:1b:7b:fd:04:26:eb:8f:a6:20:
         de:8a:86:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 00:50:36 2025 by rpki-client