Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft
File:                     mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft (raw, json)
Hash identifier:          c3FQyBLj6pXsF7Mrvh28XJVt8GH13X6aCV47CRUCb50=
Subject key identifier:   63:E9:B1:17:ED:30:CD:3F:F4:FD:74:AE:A8:DF:A8:D0:31:E6:45:A2
Authority key identifier: 99:06:CE:2B:1A:98:0F:BD:1E:F9:9C:3F:56:53:68:AD:62:1B:C4:F4
Certificate issuer:       /CN=9906ce2b1a980fbd1ef99c3f565368ad621bc4f4
Certificate serial:       0196CCBC7789D90FC4424D3689EE9B3827F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mQbOKxqYD70e-Zw_VlNorWIbxPQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft
Manifest number:          026B
Signing time:             Wed 14 May 2025 03:00:25 +0000
Manifest this update:     Wed 14 May 2025 03:00:25 +0000
Manifest next update:     Thu 15 May 2025 03:00:25 +0000
Files and hashes:         1: mQbOKxqYD70e-Zw_VlNorWIbxPQ.crl (hash: Ebmc9KmGrCe2I74puejDq8l6CoVfmsEunTE3oMrmyf0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mQbOKxqYD70e-Zw_VlNorWIbxPQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cc:bc:77:89:d9:0f:c4:42:4d:36:89:ee:9b:38:27:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906ce2b1a980fbd1ef99c3f565368ad621bc4f4
        Validity
            Not Before: May 14 03:00:25 2025 GMT
            Not After : May 15 03:00:25 2025 GMT
        Subject: CN=63e9b117ed30cd3ff4fd74aea8dfa8d031e645a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:de:cb:c2:9e:15:63:a5:d5:fd:f2:71:89:4c:
                    53:aa:f1:b3:d9:b7:ae:c3:e0:0f:29:2a:99:71:9b:
                    53:a7:46:d9:c1:e1:a6:fb:77:4c:9c:f2:8c:82:39:
                    c7:97:ad:26:81:8b:37:20:6f:2d:3e:ea:d6:d5:1e:
                    69:83:50:c3:98:23:25:30:58:4b:b7:f8:88:49:e1:
                    68:06:88:b2:f4:1a:b6:05:97:31:f4:04:77:46:79:
                    fe:08:03:54:ad:7f:cb:83:8c:03:e0:5c:e5:2a:51:
                    b8:96:cc:3c:6f:97:a9:89:f8:d1:86:8d:db:80:b1:
                    ac:30:7b:db:ae:b6:50:6d:78:f2:67:19:cf:06:16:
                    a0:75:cf:9f:b0:14:b4:33:39:e4:6e:91:39:22:30:
                    a5:3f:6e:b6:94:6f:69:3e:96:33:3f:9a:74:ec:84:
                    d6:e2:98:f7:00:86:cd:dc:1a:36:94:80:ed:10:5f:
                    40:aa:18:f1:00:71:33:33:c8:75:4c:75:42:c0:a2:
                    a9:a2:bb:09:22:90:d2:7b:0a:d7:70:76:32:f8:02:
                    e5:28:ce:ba:02:60:51:54:2e:58:19:c0:27:1a:b2:
                    63:6f:4a:fc:03:13:41:0d:c8:e2:9d:53:45:2d:0e:
                    40:18:76:25:61:ba:0d:75:78:c4:60:17:53:03:78:
                    17:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:E9:B1:17:ED:30:CD:3F:F4:FD:74:AE:A8:DF:A8:D0:31:E6:45:A2
            X509v3 Authority Key Identifier:
                keyid:99:06:CE:2B:1A:98:0F:BD:1E:F9:9C:3F:56:53:68:AD:62:1B:C4:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQbOKxqYD70e-Zw_VlNorWIbxPQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:cb:57:05:74:c7:30:92:dc:00:ff:1c:cb:9b:37:3e:86:c5:
         95:73:0a:3a:b0:ea:d9:5c:03:14:b9:ee:f3:d7:4f:0a:18:e3:
         3b:87:b6:7b:36:7f:cc:a9:a1:6f:0e:a3:45:92:9c:8a:3d:b4:
         11:7b:a0:66:6d:3e:ff:e6:99:a6:22:58:47:55:52:b1:71:83:
         94:50:48:db:be:0d:ef:8d:63:f1:ef:b9:7e:32:e2:ae:77:ac:
         a4:cc:ed:9b:18:ef:1e:7a:b2:07:10:ca:33:5f:d0:45:db:34:
         39:cf:ab:09:7c:62:0a:dd:dc:32:4a:61:a1:82:d5:f5:b0:04:
         2d:76:8f:88:83:4e:d7:ef:fe:2c:e3:b8:66:8c:09:b7:f6:4b:
         61:82:a8:bc:ee:24:86:5e:fa:de:75:42:c6:44:38:8c:53:01:
         6c:de:03:72:db:e6:c2:c6:e0:2b:f5:80:f3:27:48:8a:59:77:
         00:a7:67:2f:94:b1:6f:e9:08:e5:4a:da:5f:ac:05:da:a2:9b:
         9a:1b:b9:27:1e:90:93:fd:bc:ec:5c:0f:30:ab:91:25:de:10:
         c3:93:a7:e3:a1:6c:d4:d2:db:c8:16:54:dc:38:8c:d3:b0:39:
         12:16:0c:3a:d1:58:bd:b7:4b:f7:93:24:6e:0f:09:0f:fb:ba:
         21:69:ef:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 09:12:15 2025 by rpki-client