Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/24908e-4819-4874-a1ed-f059cdc77989/1/_m-zjWufNfVcZIPDeGmR__jVJ0I.mft
File:                     _m-zjWufNfVcZIPDeGmR__jVJ0I.mft (raw, json)
Hash identifier:          Pu8WV1oxZFktfp7lT0lGOQsKApJGRUWUillWLvWEJQU=
Subject key identifier:   67:E6:AD:18:2D:5D:B6:32:2F:62:83:3C:CB:D8:59:B1:FD:A5:70:3B
Authority key identifier: FE:6F:B3:8D:6B:9F:35:F5:5C:64:83:C3:78:69:91:FF:F8:D5:27:42
Certificate issuer:       /CN=fe6fb38d6b9f35f55c6483c3786991fff8d52742
Certificate serial:       01969E9AECF91447C9C5EE8A26756BE6E013
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_m-zjWufNfVcZIPDeGmR__jVJ0I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/24908e-4819-4874-a1ed-f059cdc77989/1/_m-zjWufNfVcZIPDeGmR__jVJ0I.mft
Manifest number:          0C84
Signing time:             Mon 05 May 2025 04:01:15 +0000
Manifest this update:     Mon 05 May 2025 04:01:15 +0000
Manifest next update:     Tue 06 May 2025 04:01:15 +0000
Files and hashes:         1: _m-zjWufNfVcZIPDeGmR__jVJ0I.crl (hash: 9unR1Kf/q/ntXDzvK5i55ZTIQmakxQvGPXrtcp+R+pg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/24908e-4819-4874-a1ed-f059cdc77989/1/_m-zjWufNfVcZIPDeGmR__jVJ0I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/24908e-4819-4874-a1ed-f059cdc77989/1/_m-zjWufNfVcZIPDeGmR__jVJ0I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_m-zjWufNfVcZIPDeGmR__jVJ0I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 04:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9e:9a:ec:f9:14:47:c9:c5:ee:8a:26:75:6b:e6:e0:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe6fb38d6b9f35f55c6483c3786991fff8d52742
        Validity
            Not Before: May  5 04:01:15 2025 GMT
            Not After : May  6 04:01:15 2025 GMT
        Subject: CN=67e6ad182d5db6322f62833ccbd859b1fda5703b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c6:f4:d5:76:74:f0:0c:7d:fc:b7:ac:eb:18:
                    31:c3:5c:f0:a7:0e:78:2b:9a:4f:52:2d:df:33:7c:
                    94:8c:c3:22:9d:8e:1b:10:f0:df:98:2b:15:f1:73:
                    03:bb:fb:94:21:9a:d5:60:26:19:53:3a:61:cc:3f:
                    ab:2c:94:43:29:42:51:e9:31:5d:e6:2e:23:ea:19:
                    0a:63:1c:0e:44:57:6b:fb:b4:15:e7:c4:fd:01:3e:
                    c5:7d:b0:c1:3c:e4:fd:7e:51:7b:35:eb:01:9a:e3:
                    a4:a7:ab:03:fe:ed:2c:72:9a:34:7c:c8:e9:4e:b2:
                    64:a4:7f:5f:66:81:45:e8:dc:f8:02:c6:77:d5:d7:
                    26:95:13:a8:6f:5c:33:82:96:7a:8e:1f:66:97:0b:
                    a3:0f:34:80:c8:92:2b:63:35:36:97:c8:67:91:ee:
                    57:a5:d8:2e:18:9e:7b:5f:91:12:85:ab:6c:6b:87:
                    2b:87:af:e8:9e:76:2f:bb:fd:31:2b:82:05:84:32:
                    f0:80:ec:7e:b1:86:46:a7:00:e4:61:a6:2a:d9:d8:
                    a1:0a:18:85:2d:65:7e:9c:a8:d5:ed:39:47:04:c2:
                    76:55:bd:65:13:74:b9:c7:07:18:a5:36:1f:fb:8a:
                    4d:71:e8:3d:3e:56:32:5c:9f:fa:a1:29:ab:14:de:
                    83:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:E6:AD:18:2D:5D:B6:32:2F:62:83:3C:CB:D8:59:B1:FD:A5:70:3B
            X509v3 Authority Key Identifier:
                keyid:FE:6F:B3:8D:6B:9F:35:F5:5C:64:83:C3:78:69:91:FF:F8:D5:27:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_m-zjWufNfVcZIPDeGmR__jVJ0I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/24908e-4819-4874-a1ed-f059cdc77989/1/_m-zjWufNfVcZIPDeGmR__jVJ0I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/24908e-4819-4874-a1ed-f059cdc77989/1/_m-zjWufNfVcZIPDeGmR__jVJ0I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:16:00:ed:cf:8e:4b:8c:b2:b7:ca:7b:3d:f0:82:34:c5:26:
         37:5b:12:55:aa:ae:0f:7c:8e:a1:e2:30:f7:eb:34:da:a0:93:
         be:14:f6:b6:0e:2e:20:d7:5c:00:03:d9:31:d9:0f:72:2b:05:
         de:12:eb:bf:57:ee:c2:77:ea:96:64:2a:dc:2a:f7:e8:dd:e2:
         d1:78:e1:89:d5:df:3e:63:73:3e:54:10:e1:25:08:bb:c3:44:
         1c:f6:cb:11:85:75:c9:64:ff:37:b5:8b:f5:26:db:6e:85:5f:
         ff:b7:eb:ea:1e:dc:09:25:15:6d:4c:ba:31:1f:3d:ef:d4:e8:
         f5:b9:a5:72:02:b9:48:ec:5e:39:df:28:18:58:e7:e0:64:ad:
         21:2e:4e:29:9e:de:19:bf:34:a6:91:a3:30:ea:c6:43:98:0c:
         7d:cc:4b:a5:62:72:11:79:f8:17:69:53:e1:bc:8f:52:3d:db:
         3f:d2:e9:bc:29:09:52:ea:4c:ee:ff:2a:75:fa:21:40:f9:0e:
         82:f8:ba:c4:b5:f4:d5:76:bc:4f:8f:a7:55:88:4c:0b:af:3a:
         d9:45:e8:be:b2:90:3c:59:95:a6:42:b6:b7:35:58:66:c7:ac:
         ae:58:cc:a5:c3:25:59:0d:20:21:ea:41:5f:2f:49:b4:c1:68:
         07:b6:8f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 13:01:49 2025 by rpki-client