Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/3dd37d-6b0b-4f1f-b0fb-93238fcd1622/1/d6W3Uxx6reukfRwv65uee6qxu7c.mft
File:                     d6W3Uxx6reukfRwv65uee6qxu7c.mft (raw, json)
Hash identifier:          NLjyUbvSVRVkdLKdYAOUNpQwuUskqmqFQaPRv52UUA0=
Subject key identifier:   80:11:AE:65:A4:AA:E3:E1:A5:7D:AB:E6:CE:81:D1:39:D1:03:1D:EA
Authority key identifier: 77:A5:B7:53:1C:7A:AD:EB:A4:7D:1C:2F:EB:9B:9E:7B:AA:B1:BB:B7
Certificate issuer:       /CN=77a5b7531c7aadeba47d1c2feb9b9e7baab1bbb7
Certificate serial:       019675D52B446D67EAA8E8A898AA039E0FA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d6W3Uxx6reukfRwv65uee6qxu7c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/3dd37d-6b0b-4f1f-b0fb-93238fcd1622/1/d6W3Uxx6reukfRwv65uee6qxu7c.mft
Manifest number:          150D
Signing time:             Sun 27 Apr 2025 06:00:26 +0000
Manifest this update:     Sun 27 Apr 2025 06:00:26 +0000
Manifest next update:     Mon 28 Apr 2025 06:00:26 +0000
Files and hashes:         1: d6W3Uxx6reukfRwv65uee6qxu7c.crl (hash: XCXuZEE0Bku6zZJJzO8DGdpEoOPvmvLN+3PzVUFii6c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/3dd37d-6b0b-4f1f-b0fb-93238fcd1622/1/d6W3Uxx6reukfRwv65uee6qxu7c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/3dd37d-6b0b-4f1f-b0fb-93238fcd1622/1/d6W3Uxx6reukfRwv65uee6qxu7c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d6W3Uxx6reukfRwv65uee6qxu7c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:75:d5:2b:44:6d:67:ea:a8:e8:a8:98:aa:03:9e:0f:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77a5b7531c7aadeba47d1c2feb9b9e7baab1bbb7
        Validity
            Not Before: Apr 27 06:00:26 2025 GMT
            Not After : Apr 28 06:00:26 2025 GMT
        Subject: CN=8011ae65a4aae3e1a57dabe6ce81d139d1031dea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:82:89:80:c4:5c:cb:56:31:d8:61:c6:03:43:
                    5b:67:28:07:65:e6:12:3d:98:47:1d:26:90:e1:b6:
                    f8:ad:e4:c9:f5:14:93:43:9d:8d:80:8d:e4:d3:1a:
                    d8:56:8c:f8:ce:69:1f:8b:02:3e:42:01:f6:f1:21:
                    03:a9:57:ff:a1:63:02:34:0d:5a:2a:42:54:fd:81:
                    6c:5f:17:a2:af:2d:1b:5d:0d:77:37:ec:f5:7a:f1:
                    c4:57:35:ac:f0:66:b8:bf:24:01:6b:bc:fa:ba:19:
                    00:e8:df:fd:07:4e:ad:42:bd:1a:a1:61:73:cf:69:
                    69:61:45:0e:be:71:01:c9:a0:92:79:d0:4c:ba:1e:
                    59:89:e7:da:bb:45:3a:5c:1b:45:b3:d1:bc:f8:7e:
                    f6:f1:ca:f2:44:20:82:24:d6:52:e8:dc:f3:af:6d:
                    72:fa:31:46:c7:ca:c7:a0:40:6d:c4:6a:e2:3f:cd:
                    25:a3:ab:97:1f:6a:3a:7d:11:0f:77:40:14:82:25:
                    ed:3e:f0:10:be:e7:e9:0e:13:33:b0:42:29:f0:cc:
                    77:64:81:03:37:97:28:35:b1:29:66:2b:5c:94:5d:
                    57:a7:8a:6c:ea:a7:4e:25:f8:85:46:4b:5f:7c:c5:
                    85:37:15:2f:19:ea:42:99:d0:3c:b2:b9:a4:6a:a0:
                    27:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:11:AE:65:A4:AA:E3:E1:A5:7D:AB:E6:CE:81:D1:39:D1:03:1D:EA
            X509v3 Authority Key Identifier:
                keyid:77:A5:B7:53:1C:7A:AD:EB:A4:7D:1C:2F:EB:9B:9E:7B:AA:B1:BB:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6W3Uxx6reukfRwv65uee6qxu7c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/3dd37d-6b0b-4f1f-b0fb-93238fcd1622/1/d6W3Uxx6reukfRwv65uee6qxu7c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/3dd37d-6b0b-4f1f-b0fb-93238fcd1622/1/d6W3Uxx6reukfRwv65uee6qxu7c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:21:da:65:ef:b5:99:57:61:c3:02:10:1b:ff:35:ee:af:1d:
         64:e7:d6:f6:96:41:e9:89:73:fd:6b:ee:7d:f8:71:50:74:5b:
         bb:9f:51:0e:fe:21:db:e4:02:55:2f:cd:1c:cc:48:b0:19:77:
         1c:57:a4:5f:c3:42:48:cd:94:01:9e:64:34:41:d2:dc:28:d4:
         39:ca:7b:7e:be:15:21:56:f7:7a:a1:b9:ba:8f:88:14:3c:cc:
         cb:02:58:79:ac:15:0a:f3:a9:a6:86:8f:b8:d3:46:68:0b:16:
         6d:5c:c9:da:4b:c8:a9:68:fd:f3:5e:be:89:77:dc:04:80:30:
         32:f2:b0:0e:7c:6f:ec:cc:c7:6b:db:59:6b:4a:41:7c:f1:22:
         8a:3a:3c:f1:0b:2e:4f:4c:ff:62:72:4e:60:3a:61:27:7b:ed:
         7d:0c:32:a3:4a:e0:2c:67:15:3b:10:84:fd:f5:2a:ed:bf:70:
         b0:ef:4f:1f:85:35:0a:98:f7:fa:a8:ed:c8:57:c9:69:23:fb:
         49:70:4b:9c:07:9b:38:d2:7c:2c:47:8f:0f:83:24:8f:b2:26:
         01:99:8e:1a:59:19:55:ce:36:25:57:25:b0:93:d9:c7:fe:7d:
         50:6e:dd:e1:f5:b0:8a:f6:d9:21:15:2d:6b:74:49:f6:26:3a:
         85:ce:b2:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:16:50 2025 by rpki-client