Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7108f6-285a-44ed-84d3-24c73884bd04/1/W9eff_HFf_wSxUw94Yi7onQGqIw.mft
File:                     W9eff_HFf_wSxUw94Yi7onQGqIw.mft (raw, json)
Hash identifier:          tk/kBilX2f5JRESsmN8n+Dv98/f/YEyw+xEHe1USuzU=
Subject key identifier:   DC:F0:56:43:00:FC:FB:46:21:32:DF:95:9E:04:AA:C3:6E:A6:45:BA
Authority key identifier: 5B:D7:9F:7F:F1:C5:7F:FC:12:C5:4C:3D:E1:88:BB:A2:74:06:A8:8C
Certificate issuer:       /CN=5bd79f7ff1c57ffc12c54c3de188bba27406a88c
Certificate serial:       0196BAED238AFE67C0572F74BC14997F1C5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W9eff_HFf_wSxUw94Yi7onQGqIw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/7108f6-285a-44ed-84d3-24c73884bd04/1/W9eff_HFf_wSxUw94Yi7onQGqIw.mft
Manifest number:          012A
Signing time:             Sat 10 May 2025 16:00:25 +0000
Manifest this update:     Sat 10 May 2025 16:00:25 +0000
Manifest next update:     Sun 11 May 2025 16:00:25 +0000
Files and hashes:         1: W9eff_HFf_wSxUw94Yi7onQGqIw.crl (hash: NVJnTzOsw/oVf+9G3HCXNA/ZsBSJeIDVqw7BmHs/e6Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/7108f6-285a-44ed-84d3-24c73884bd04/1/W9eff_HFf_wSxUw94Yi7onQGqIw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/7108f6-285a-44ed-84d3-24c73884bd04/1/W9eff_HFf_wSxUw94Yi7onQGqIw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W9eff_HFf_wSxUw94Yi7onQGqIw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ba:ed:23:8a:fe:67:c0:57:2f:74:bc:14:99:7f:1c:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bd79f7ff1c57ffc12c54c3de188bba27406a88c
        Validity
            Not Before: May 10 16:00:25 2025 GMT
            Not After : May 11 16:00:25 2025 GMT
        Subject: CN=dcf0564300fcfb462132df959e04aac36ea645ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:44:b7:24:80:e5:a9:29:1b:27:07:b8:44:ea:
                    3d:02:ff:7c:82:3a:ee:11:e7:c1:62:fd:80:69:aa:
                    0a:64:2e:ab:1c:1e:36:56:73:0e:66:5b:92:c8:c5:
                    e9:a2:39:0d:4f:5b:0c:6b:9e:a3:80:d5:96:ef:f2:
                    44:6f:f7:a4:c7:15:fa:2b:16:ac:13:34:4f:30:96:
                    f9:8a:5a:9c:39:92:75:81:b6:11:c9:cf:f1:ea:f2:
                    41:15:63:9d:86:3d:8e:d2:f1:f0:03:15:58:c1:ac:
                    7b:ab:60:d9:d6:ab:ea:59:db:97:27:01:a5:e9:0f:
                    e9:9b:c7:f4:cb:15:e8:9a:98:f0:fc:43:94:74:13:
                    aa:9b:48:56:7c:d8:e8:f7:91:72:5f:e0:30:f1:82:
                    a8:18:93:8a:1c:25:25:44:4a:48:b8:3e:06:24:20:
                    40:09:8d:4b:51:49:34:8b:20:d1:fb:6f:6f:ae:52:
                    69:0a:5d:75:b7:a4:80:e4:7c:f3:a4:0e:f1:d5:7e:
                    44:f2:b3:39:ef:61:a5:4d:55:aa:a4:73:78:2b:9a:
                    0a:30:3a:a0:0b:7a:74:29:2c:44:1f:7e:79:79:f0:
                    3c:a5:9c:58:48:5c:b9:e5:36:17:08:4b:59:c4:45:
                    85:54:dc:4c:7e:1a:85:85:fd:94:c8:c0:97:27:91:
                    b5:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:F0:56:43:00:FC:FB:46:21:32:DF:95:9E:04:AA:C3:6E:A6:45:BA
            X509v3 Authority Key Identifier:
                keyid:5B:D7:9F:7F:F1:C5:7F:FC:12:C5:4C:3D:E1:88:BB:A2:74:06:A8:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9eff_HFf_wSxUw94Yi7onQGqIw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7108f6-285a-44ed-84d3-24c73884bd04/1/W9eff_HFf_wSxUw94Yi7onQGqIw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7108f6-285a-44ed-84d3-24c73884bd04/1/W9eff_HFf_wSxUw94Yi7onQGqIw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:dd:2b:94:1d:c1:b4:95:41:5b:82:a7:53:82:0b:02:6f:86:
         26:9b:be:6d:a7:4d:05:b8:60:2c:15:85:88:e3:96:de:4b:4f:
         c1:f1:7d:83:b9:35:9d:b5:a7:a9:51:0e:71:4c:af:29:85:c0:
         00:3c:78:53:f3:ea:c1:19:49:82:14:b1:fb:d0:0b:fa:7c:33:
         f9:ce:e3:10:dc:12:65:a0:64:6e:21:1b:e4:b4:2e:73:a1:2a:
         c2:ad:71:4c:f8:17:88:00:65:2d:89:42:b6:63:1e:29:58:aa:
         ba:be:c2:2b:30:34:f2:53:10:ef:22:dc:8b:f4:3f:31:8b:33:
         0d:4a:ef:de:7f:a5:06:c4:51:dc:1e:d6:e4:cd:42:4c:bb:3b:
         c6:c8:e2:7f:7a:eb:59:7e:47:a3:e1:ee:91:c8:05:84:b5:12:
         dc:f3:80:3e:56:62:a0:0c:38:40:af:78:fe:9a:21:a8:6d:ed:
         45:06:24:76:dc:d9:01:9f:84:0f:27:81:57:81:cb:c4:9d:44:
         27:bc:fe:0a:da:2b:b5:c5:27:ad:15:f3:ff:6e:af:d0:55:a1:
         51:69:c7:3e:ef:e7:34:47:a4:9d:43:34:b1:61:89:63:70:2d:
         dc:34:19:b0:bf:98:ee:b1:40:11:12:a7:c8:60:fe:e9:3f:34:
         d9:a9:32:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:51:15 2025 by rpki-client