Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.mft
File:                     9keQtSf6QLqj8ts_oqFL-UzSgv8.mft (raw, json)
Hash identifier:          vSyK/f1KH9LMvcl2Inx0Gn0IOxZ/PJ9jyC6K5hDVM1A=
Subject key identifier:   61:DF:4B:F8:C6:00:11:97:40:0A:17:64:9B:16:23:FA:BB:98:2D:25
Authority key identifier: F6:47:90:B5:27:FA:40:BA:A3:F2:DB:3F:A2:A1:4B:F9:4C:D2:82:FF
Certificate issuer:       /CN=f64790b527fa40baa3f2db3fa2a14bf94cd282ff
Certificate serial:       0196A72F5F54E1BD2405700B0FC9318CCCAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9keQtSf6QLqj8ts_oqFL-UzSgv8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.mft
Manifest number:          0251
Signing time:             Tue 06 May 2025 20:00:21 +0000
Manifest this update:     Tue 06 May 2025 20:00:21 +0000
Manifest next update:     Wed 07 May 2025 20:00:21 +0000
Files and hashes:         1: 9keQtSf6QLqj8ts_oqFL-UzSgv8.crl (hash: Kk33XeNqyTQUNE6mTJHt9ozTJULmpKhijXUqvLl8Xbg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9keQtSf6QLqj8ts_oqFL-UzSgv8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 16:14:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a7:2f:5f:54:e1:bd:24:05:70:0b:0f:c9:31:8c:cc:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f64790b527fa40baa3f2db3fa2a14bf94cd282ff
        Validity
            Not Before: May  6 20:00:21 2025 GMT
            Not After : May  7 20:00:21 2025 GMT
        Subject: CN=61df4bf8c6001197400a17649b1623fabb982d25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6d:40:77:67:7a:5d:7a:56:9a:16:d6:19:3e:
                    9e:43:8d:ba:e3:74:eb:6f:c9:04:b9:f1:a8:89:53:
                    3e:79:2e:2b:14:ce:ba:b9:57:c7:28:34:31:81:64:
                    23:26:9d:44:74:c0:26:81:83:06:1a:ea:a9:5e:47:
                    65:2e:ad:0e:cb:1f:76:3b:9a:ff:f2:ec:cf:31:7d:
                    d8:22:ee:4e:a2:47:3a:b8:92:23:42:98:e8:f7:34:
                    1e:bc:cc:93:af:c9:bc:23:fc:db:50:31:fc:cf:4c:
                    f7:1f:e5:6f:3e:03:a1:6d:93:8a:0b:05:79:a6:7c:
                    15:ab:74:d3:fb:3f:da:fd:f4:a7:1d:a0:a5:9d:fa:
                    10:9f:16:4d:ca:f6:25:15:cf:6e:18:46:60:01:f2:
                    82:26:a3:ee:ab:49:32:45:f4:4d:45:65:e5:de:db:
                    55:b6:1c:43:fd:42:73:0c:da:f4:5a:e7:77:06:e2:
                    e6:ad:1d:01:67:8b:9a:7a:32:33:d6:02:81:0a:de:
                    20:e3:5b:8d:6b:94:1d:c6:dc:dd:b5:60:f0:a7:dc:
                    cd:03:a4:b5:f7:08:9f:32:76:13:43:96:df:8c:ff:
                    52:71:26:34:91:f3:00:3d:c9:a5:c4:8c:28:d0:f1:
                    0a:14:74:25:75:cc:e4:26:d3:99:47:8b:8f:f2:20:
                    72:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:DF:4B:F8:C6:00:11:97:40:0A:17:64:9B:16:23:FA:BB:98:2D:25
            X509v3 Authority Key Identifier:
                keyid:F6:47:90:B5:27:FA:40:BA:A3:F2:DB:3F:A2:A1:4B:F9:4C:D2:82:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9keQtSf6QLqj8ts_oqFL-UzSgv8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:bd:14:d6:29:0b:84:12:56:d4:df:04:25:01:b6:da:ca:2e:
         87:74:78:82:b0:3d:75:e7:01:d1:9e:18:c8:ac:58:db:f5:37:
         87:03:c2:b0:72:42:17:a6:a0:f2:a3:6b:bb:22:7e:a9:dd:51:
         10:7f:b2:af:f1:d3:e5:e4:c6:6f:01:bc:e6:d8:50:a0:1c:be:
         b7:6f:61:db:58:5a:31:20:ba:56:67:99:f9:eb:18:e4:18:6b:
         6a:24:2d:ad:02:18:f0:e0:79:54:1f:ab:cd:e1:7b:69:59:42:
         5e:7f:bd:9e:48:6b:59:e2:cf:ac:35:74:bc:ff:37:27:d0:eb:
         e7:c0:b7:27:0c:de:17:49:af:ea:a4:37:41:33:20:a5:0d:0c:
         16:d4:41:75:b2:b8:a2:13:e7:87:ec:a1:6d:17:e3:62:3a:53:
         f5:f2:a7:1c:22:06:64:33:58:bd:ba:f2:13:f1:58:c1:12:ae:
         9c:8f:22:a9:f9:ba:19:33:ca:a6:70:8b:dc:71:08:b6:a8:67:
         e2:37:b0:fb:40:35:ae:f4:94:ab:63:cf:ff:d4:45:af:0d:d3:
         cb:29:22:e7:97:0d:a9:a1:4d:88:ca:52:54:0b:e9:9c:6e:2a:
         f5:2d:f9:7d:72:56:92:9b:8f:a3:26:6e:d2:ad:82:1b:09:5c:
         4b:6e:73:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 01:22:58 2025 by rpki-client