Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/063bc3-8c76-475e-b9f1-f0bbbebbd6a9/1/MT2hk1fLxn2n1V-jWqs2lbwE0E8.mft
File:                     MT2hk1fLxn2n1V-jWqs2lbwE0E8.mft (raw, json)
Hash identifier:          9Aj9nipFSmNTqFUKnuAoPHsTCdb8nMRAh3xnLeFmCpo=
Subject key identifier:   36:AD:35:BC:79:07:85:03:44:9B:8B:6A:1E:D2:51:8B:13:62:CC:1F
Authority key identifier: 31:3D:A1:93:57:CB:C6:7D:A7:D5:5F:A3:5A:AB:36:95:BC:04:D0:4F
Certificate issuer:       /CN=313da19357cbc67da7d55fa35aab3695bc04d04f
Certificate serial:       019694F20422EAC1AB0577D4BD80E994A6B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MT2hk1fLxn2n1V-jWqs2lbwE0E8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/063bc3-8c76-475e-b9f1-f0bbbebbd6a9/1/MT2hk1fLxn2n1V-jWqs2lbwE0E8.mft
Manifest number:          088E
Signing time:             Sat 03 May 2025 07:00:10 +0000
Manifest this update:     Sat 03 May 2025 07:00:10 +0000
Manifest next update:     Sun 04 May 2025 07:00:10 +0000
Files and hashes:         1: MT2hk1fLxn2n1V-jWqs2lbwE0E8.crl (hash: aCTdDxqzwqAy+frwJbF6uoJ6OLdhXtJJwMSeneDwwxY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/063bc3-8c76-475e-b9f1-f0bbbebbd6a9/1/MT2hk1fLxn2n1V-jWqs2lbwE0E8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/063bc3-8c76-475e-b9f1-f0bbbebbd6a9/1/MT2hk1fLxn2n1V-jWqs2lbwE0E8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MT2hk1fLxn2n1V-jWqs2lbwE0E8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:94:f2:04:22:ea:c1:ab:05:77:d4:bd:80:e9:94:a6:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=313da19357cbc67da7d55fa35aab3695bc04d04f
        Validity
            Not Before: May  3 07:00:10 2025 GMT
            Not After : May  4 07:00:10 2025 GMT
        Subject: CN=36ad35bc79078503449b8b6a1ed2518b1362cc1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:41:81:76:4e:68:a6:4e:28:a6:15:88:e5:bd:
                    97:2e:cc:74:21:d9:e6:c9:1b:7a:22:e1:71:9c:40:
                    2f:f5:d5:0f:b6:3e:59:95:62:13:19:9f:0b:ba:3e:
                    6e:20:d1:59:16:18:8b:1f:d5:17:2c:6d:61:28:69:
                    0e:de:62:6f:96:a8:c8:23:24:f8:07:65:72:46:f1:
                    a3:c4:e5:8c:39:bf:68:d2:e3:a4:4d:82:76:64:4f:
                    28:4c:f3:37:36:71:fc:5d:e9:9b:ab:37:a0:d8:f5:
                    aa:b8:63:c4:c5:50:36:c7:d6:85:bd:f9:7b:47:ce:
                    9f:5a:98:7b:00:15:57:35:92:7a:59:a0:bd:eb:57:
                    ac:cf:1a:72:1c:04:c9:8e:52:38:af:f4:cb:c4:a6:
                    8b:25:64:42:f7:72:51:b3:95:ec:ec:93:73:25:11:
                    16:3f:1f:80:56:23:b1:16:aa:30:0f:93:22:3c:d9:
                    e2:09:e6:95:f5:9a:87:2c:ad:47:77:0e:70:f2:a3:
                    ed:33:3d:ad:71:ba:2a:21:b8:8b:62:10:4c:20:54:
                    12:37:4d:fd:49:fd:44:58:43:24:f7:b9:09:cc:c2:
                    89:aa:10:04:a3:23:d9:77:09:ad:00:2a:d5:12:4f:
                    28:3f:80:dd:09:14:db:66:df:d0:4f:cb:f2:5c:f0:
                    db:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:AD:35:BC:79:07:85:03:44:9B:8B:6A:1E:D2:51:8B:13:62:CC:1F
            X509v3 Authority Key Identifier:
                keyid:31:3D:A1:93:57:CB:C6:7D:A7:D5:5F:A3:5A:AB:36:95:BC:04:D0:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MT2hk1fLxn2n1V-jWqs2lbwE0E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/063bc3-8c76-475e-b9f1-f0bbbebbd6a9/1/MT2hk1fLxn2n1V-jWqs2lbwE0E8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/063bc3-8c76-475e-b9f1-f0bbbebbd6a9/1/MT2hk1fLxn2n1V-jWqs2lbwE0E8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:6c:bf:6f:de:99:41:30:5c:b3:63:95:f6:34:59:73:a0:eb:
         f0:c8:e7:87:c2:95:11:2e:c5:8b:f1:ab:dd:fe:56:6e:35:c3:
         a7:ea:1c:70:6e:9f:8a:df:26:17:be:0a:9c:c2:dc:70:d9:40:
         19:1a:17:e3:12:f5:de:00:73:5e:59:21:08:ea:e1:97:5c:9a:
         a5:a8:12:8b:78:03:37:b1:50:92:ca:4d:31:d9:0d:00:9f:d6:
         7c:94:f7:b4:88:e8:d6:d7:0a:13:b2:29:49:70:43:b3:88:00:
         a1:28:fb:26:d7:cb:2b:b4:9e:13:61:8c:82:a6:00:c6:b6:65:
         3d:bc:09:c8:d0:45:d8:04:6d:17:41:27:ae:13:1e:6f:76:83:
         aa:a3:88:e2:fe:de:f1:06:9d:85:27:fe:92:a6:94:54:36:72:
         b0:f0:29:35:52:dd:64:5f:45:54:70:ac:82:c8:23:83:1b:9b:
         2f:32:87:87:69:5b:33:69:b9:ef:f6:a9:c8:7f:71:50:95:dc:
         ed:cb:79:5d:e4:33:a2:f0:e6:f1:22:da:91:5a:5f:e6:b6:3d:
         8c:28:a2:f3:3b:42:9e:ba:fb:5c:ef:c4:cc:56:cf:5d:38:8e:
         98:53:92:54:19:d8:f7:81:54:c2:cf:9a:42:05:4d:dd:98:50:
         23:38:a9:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 12:35:25 2025 by rpki-client