Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/4fe287-0987-420b-a855-cfb4729c8994/1/adEXVt0Db1nuEef4Gkh6b90jE20.mft
File:                     adEXVt0Db1nuEef4Gkh6b90jE20.mft (raw, json)
Hash identifier:          ngyfwKr655PhCokQ1bapcqvFPvGZ+x1ieEiK9cjHDNI=
Subject key identifier:   79:B9:67:0D:4F:FD:CB:F1:79:56:81:65:25:0D:68:8D:28:B6:43:C6
Authority key identifier: 69:D1:17:56:DD:03:6F:59:EE:11:E7:F8:1A:48:7A:6F:DD:23:13:6D
Certificate issuer:       /CN=69d11756dd036f59ee11e7f81a487a6fdd23136d
Certificate serial:       0196AE0E55D07A55399590750DF10C043EE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/adEXVt0Db1nuEef4Gkh6b90jE20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/4fe287-0987-420b-a855-cfb4729c8994/1/adEXVt0Db1nuEef4Gkh6b90jE20.mft
Manifest number:          073E
Signing time:             Thu 08 May 2025 04:01:37 +0000
Manifest this update:     Thu 08 May 2025 04:01:37 +0000
Manifest next update:     Fri 09 May 2025 04:01:37 +0000
Files and hashes:         1: adEXVt0Db1nuEef4Gkh6b90jE20.crl (hash: 1k6m5HXn+FitZQxm36GISCZTym2iGvMoNe+U9xgMKrg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/4fe287-0987-420b-a855-cfb4729c8994/1/adEXVt0Db1nuEef4Gkh6b90jE20.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/4fe287-0987-420b-a855-cfb4729c8994/1/adEXVt0Db1nuEef4Gkh6b90jE20.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/adEXVt0Db1nuEef4Gkh6b90jE20.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 04:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ae:0e:55:d0:7a:55:39:95:90:75:0d:f1:0c:04:3e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69d11756dd036f59ee11e7f81a487a6fdd23136d
        Validity
            Not Before: May  8 04:01:37 2025 GMT
            Not After : May  9 04:01:37 2025 GMT
        Subject: CN=79b9670d4ffdcbf179568165250d688d28b643c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:54:51:d7:0c:d1:1f:1c:2e:d0:00:e5:cb:83:
                    8c:cf:58:e4:71:6a:b8:e3:e3:ce:bc:58:2f:f5:ad:
                    eb:53:14:57:a8:24:cd:c0:ef:d0:b4:55:91:99:a6:
                    69:08:4c:1a:ca:b6:1a:97:c8:02:de:05:a1:58:33:
                    c6:b3:24:4f:e9:c4:92:22:cb:02:81:ae:b2:d3:dd:
                    64:f7:62:4f:f5:1c:8e:02:40:85:c3:3f:79:71:7b:
                    d8:94:0c:39:ec:9e:f2:1b:fb:35:db:d0:71:85:11:
                    73:4e:37:6d:78:00:fa:b3:4c:dc:58:13:f6:26:11:
                    cc:55:09:7a:b4:74:a7:62:f9:0d:ef:b1:7e:63:60:
                    21:f6:4a:6b:c5:80:f1:23:3b:96:49:6e:0f:f5:8b:
                    ca:56:db:b0:25:7d:03:dc:05:72:94:05:a3:76:27:
                    49:a7:71:00:28:93:27:c9:ed:e4:98:42:1a:3e:30:
                    50:f6:ba:d2:2b:bc:8b:95:89:2c:23:ec:d7:df:cd:
                    32:02:84:56:6d:ca:45:5d:a4:4d:ce:12:bf:dc:dc:
                    48:49:28:72:44:29:79:1b:3e:1e:cb:3b:64:cf:38:
                    9d:ba:06:08:33:5d:c3:2f:d2:67:ea:93:40:90:4c:
                    e7:80:3c:0c:1a:65:c7:35:30:c9:9e:08:17:f9:de:
                    c2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:B9:67:0D:4F:FD:CB:F1:79:56:81:65:25:0D:68:8D:28:B6:43:C6
            X509v3 Authority Key Identifier:
                keyid:69:D1:17:56:DD:03:6F:59:EE:11:E7:F8:1A:48:7A:6F:DD:23:13:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adEXVt0Db1nuEef4Gkh6b90jE20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/4fe287-0987-420b-a855-cfb4729c8994/1/adEXVt0Db1nuEef4Gkh6b90jE20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/4fe287-0987-420b-a855-cfb4729c8994/1/adEXVt0Db1nuEef4Gkh6b90jE20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:78:34:20:49:b8:18:78:b2:7e:21:84:c1:62:44:99:28:97:
         a1:67:95:49:a4:b1:67:bd:e5:14:9f:fe:02:23:12:1a:26:92:
         87:42:3a:07:14:93:d2:dc:a4:e9:d1:94:e3:d4:e5:9a:93:9a:
         b9:4e:43:02:3e:92:84:2b:90:a0:f2:df:89:05:01:fa:8e:e2:
         bf:d2:fc:0e:4f:7f:20:82:4f:2a:9f:d8:73:72:ea:9e:32:9e:
         fb:e4:71:b1:95:60:38:10:a9:e6:29:6d:29:24:33:2a:76:60:
         c0:d8:a9:c8:f3:46:c0:08:09:17:60:fb:01:a5:27:52:58:3e:
         58:b6:63:8d:e8:4c:cf:72:69:c5:a2:3b:79:63:0e:30:85:80:
         6a:e3:14:cd:07:80:36:c4:28:0b:e2:00:a6:33:b2:22:d1:62:
         c5:63:f3:ef:38:7e:7d:ea:c0:65:1a:98:ab:e7:18:ba:d4:8a:
         a4:b4:6c:b4:04:80:6c:4e:89:71:ba:37:0b:96:e0:45:c4:bc:
         44:19:b7:d8:dd:f5:e3:3a:10:15:6c:8f:d3:75:90:5e:d2:69:
         ae:15:ae:ef:9b:e7:76:17:2d:3e:91:9d:9d:22:68:d1:c5:d5:
         b2:ac:13:1f:85:ea:b9:80:77:9a:e1:a3:d1:4a:64:4a:82:62:
         c1:71:a9:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 10:44:39 2025 by rpki-client