Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.mft
File:                     7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.mft (raw, json)
Hash identifier:          DZRilnCofFixM5WofS0wFrjViWZ/AKGRhsKf27n6VIo=
Subject key identifier:   80:8D:BF:1A:AC:22:21:07:53:07:00:DD:DB:88:40:A8:4A:A9:25:E2
Authority key identifier: EF:FC:8A:6F:3C:44:B8:ED:D1:77:FE:51:A5:99:91:58:B8:DC:F8:19
Certificate issuer:       /CN=effc8a6f3c44b8edd177fe51a5999158b8dcf819
Certificate serial:       0196D13E3C62A9A30B069A538ADF696D8639
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.mft
Manifest number:          0D95
Signing time:             Thu 15 May 2025 00:00:38 +0000
Manifest this update:     Thu 15 May 2025 00:00:38 +0000
Manifest next update:     Fri 16 May 2025 00:00:38 +0000
Files and hashes:         1: 7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.crl (hash: 7bTKZKgow+icwhILdQIV+O0JB2D5KXnhMFlMkTEYAx8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:d1:3e:3c:62:a9:a3:0b:06:9a:53:8a:df:69:6d:86:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=effc8a6f3c44b8edd177fe51a5999158b8dcf819
        Validity
            Not Before: May 15 00:00:38 2025 GMT
            Not After : May 16 00:00:38 2025 GMT
        Subject: CN=808dbf1aac222107530700dddb8840a84aa925e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c6:eb:cb:d9:bc:61:77:a1:69:6b:f9:72:5f:
                    de:db:1c:d1:ed:14:cc:37:04:7e:1a:d3:82:85:1c:
                    e0:6b:00:69:63:b7:de:f8:26:52:2e:9a:2d:e0:a8:
                    81:5d:f5:37:21:d1:76:0a:10:40:16:be:e7:9a:8f:
                    38:bf:7f:68:e9:da:68:92:12:1f:4a:6b:4a:29:34:
                    bb:15:44:b7:69:6f:7b:f1:8c:67:e3:19:35:ea:d1:
                    3f:63:32:d2:aa:54:cc:63:8c:4b:af:c8:4d:3d:0c:
                    0d:ff:c1:dd:c0:9a:19:4c:00:99:20:52:fa:bd:ce:
                    06:53:61:48:0b:b8:a9:a3:a2:6e:d5:4e:ed:19:c0:
                    67:a7:c6:9c:39:70:31:a9:2a:1d:7e:f6:f1:2e:4c:
                    f1:43:00:01:24:f0:19:05:02:ff:14:37:5d:67:1c:
                    df:e6:39:fe:cb:54:2c:cb:18:2d:f2:8c:3c:8f:c0:
                    32:b5:a4:14:c8:d9:4e:94:6c:6b:90:8a:bc:df:b3:
                    f3:7d:ef:13:13:42:a6:84:e1:c4:cb:21:3b:20:4e:
                    3e:4c:a7:5e:39:79:e2:79:84:f7:25:72:68:57:c5:
                    75:3e:95:4e:c5:96:eb:29:27:88:d4:93:4d:e3:5d:
                    fb:18:22:76:f5:3c:43:76:70:99:0b:96:38:f9:5f:
                    b1:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:8D:BF:1A:AC:22:21:07:53:07:00:DD:DB:88:40:A8:4A:A9:25:E2
            X509v3 Authority Key Identifier:
                keyid:EF:FC:8A:6F:3C:44:B8:ED:D1:77:FE:51:A5:99:91:58:B8:DC:F8:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:ce:d8:2e:cc:ae:b4:ae:26:9f:bb:b8:18:5b:15:fd:9e:04:
         08:fa:79:f6:fe:55:b5:e3:fe:ae:93:7c:5b:20:29:22:80:7f:
         75:a8:a7:9d:d0:05:03:19:d7:46:6e:2f:c1:7b:55:52:f3:7b:
         8e:c3:55:19:ec:9f:e5:af:4f:02:47:18:88:d8:11:82:99:9d:
         38:c0:30:c9:b5:c9:88:36:ae:1a:49:a3:b6:f6:9f:85:a1:45:
         a9:00:70:89:87:4e:39:51:d4:d8:0a:f3:ad:8b:4d:9f:04:20:
         a5:41:33:48:62:a2:7d:c5:c9:06:ce:4e:5c:62:eb:69:e9:bb:
         a0:80:f1:4a:e7:67:90:3a:52:b6:c4:42:5b:55:c2:5a:cc:f4:
         95:29:4e:dd:b2:ec:e0:08:4b:f3:9c:e7:7d:94:52:60:f0:a2:
         d2:cf:c6:da:33:d3:63:c2:8e:ac:2c:71:37:3e:58:8a:1e:da:
         9c:07:ea:b3:a8:7a:97:e5:c6:d9:b5:7e:f8:65:82:50:7a:ca:
         17:95:02:d5:e4:87:52:06:35:c6:a5:c9:5f:47:91:d8:56:b7:
         5e:c8:41:27:1d:db:e4:ca:f3:c0:b2:b8:77:11:b4:2a:38:52:
         1b:a4:20:5e:de:aa:00:0a:72:a2:fb:af:eb:d3:34:6e:4b:52:
         2b:e7:f2:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 08:07:43 2025 by rpki-client