Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/9ad77a-729d-4727-9aaa-f57bdcc73b16/1/SInGeZ92tFIvCZH2uTNP1ttUHVs.mft
File:                     SInGeZ92tFIvCZH2uTNP1ttUHVs.mft (raw, json)
Hash identifier:          ewcwV9uhd14CjzDRYHwStHxkpP0z1uPwRskByLBcBR0=
Subject key identifier:   D6:3C:7D:DA:12:1A:D2:ED:57:B5:8B:C7:A5:F6:E8:EE:F9:6F:99:B7
Authority key identifier: 48:89:C6:79:9F:76:B4:52:2F:09:91:F6:B9:33:4F:D6:DB:54:1D:5B
Certificate issuer:       /CN=4889c6799f76b4522f0991f6b9334fd6db541d5b
Certificate serial:       0196B032817E47946172336C597E89ACFD0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SInGeZ92tFIvCZH2uTNP1ttUHVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/9ad77a-729d-4727-9aaa-f57bdcc73b16/1/SInGeZ92tFIvCZH2uTNP1ttUHVs.mft
Manifest number:          1028
Signing time:             Thu 08 May 2025 14:00:22 +0000
Manifest this update:     Thu 08 May 2025 14:00:22 +0000
Manifest next update:     Fri 09 May 2025 14:00:22 +0000
Files and hashes:         1: SInGeZ92tFIvCZH2uTNP1ttUHVs.crl (hash: newr0DUwq7Fa4cYWm9qwggp8F9BC0FmCG63v+C8BFHs=)
                          2: W9LIimzmvADZP7RqK5-CS9hx7F8.roa (hash: 0bKnzD+/f66zg904NSAl0qUDPLAd/0RlfEWM3sOW+wk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/9ad77a-729d-4727-9aaa-f57bdcc73b16/1/SInGeZ92tFIvCZH2uTNP1ttUHVs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/9ad77a-729d-4727-9aaa-f57bdcc73b16/1/SInGeZ92tFIvCZH2uTNP1ttUHVs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SInGeZ92tFIvCZH2uTNP1ttUHVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b0:32:81:7e:47:94:61:72:33:6c:59:7e:89:ac:fd:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4889c6799f76b4522f0991f6b9334fd6db541d5b
        Validity
            Not Before: May  8 14:00:22 2025 GMT
            Not After : May  9 14:00:22 2025 GMT
        Subject: CN=d63c7dda121ad2ed57b58bc7a5f6e8eef96f99b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f4:a4:4d:04:b3:18:c3:21:1f:f4:cf:0c:aa:
                    7f:72:06:b7:57:74:fa:fe:3a:35:4e:65:57:57:1f:
                    56:ae:1f:41:0a:5a:11:38:6d:96:27:c2:42:a1:00:
                    66:83:0d:3f:b0:43:c3:da:33:bd:46:8c:3a:ca:22:
                    76:35:45:75:6d:61:55:e6:0f:0a:2c:16:64:c8:ad:
                    b8:cc:64:ee:30:26:5a:48:ca:d8:2a:b2:2c:f5:8a:
                    7f:55:31:5b:be:5c:f7:b4:22:0f:ce:0d:19:9b:31:
                    77:ba:78:c7:ce:98:fc:96:89:98:47:f1:3e:ad:1d:
                    f8:4e:f2:21:47:97:65:fd:d6:fb:63:64:55:04:d4:
                    bc:f0:f2:ac:1f:70:79:d1:68:91:4c:e5:40:9a:b3:
                    c2:1b:5a:fc:bf:20:3b:32:9e:7a:11:e6:6a:12:6d:
                    f9:52:39:66:d9:67:9f:b9:07:8e:41:0c:64:89:88:
                    fb:92:b9:8c:78:23:18:8d:58:8e:c1:19:4c:d3:bd:
                    3e:52:33:d9:22:d1:ef:a3:a5:cd:36:dc:96:f4:54:
                    13:dc:ea:26:60:74:97:8d:5b:13:6a:7b:61:54:b9:
                    35:69:4d:a5:f9:9a:5b:a7:91:08:c2:d9:aa:91:21:
                    1a:06:e2:62:bb:91:03:2c:8b:51:4a:0c:2b:37:f5:
                    57:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:3C:7D:DA:12:1A:D2:ED:57:B5:8B:C7:A5:F6:E8:EE:F9:6F:99:B7
            X509v3 Authority Key Identifier:
                keyid:48:89:C6:79:9F:76:B4:52:2F:09:91:F6:B9:33:4F:D6:DB:54:1D:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SInGeZ92tFIvCZH2uTNP1ttUHVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/9ad77a-729d-4727-9aaa-f57bdcc73b16/1/SInGeZ92tFIvCZH2uTNP1ttUHVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/9ad77a-729d-4727-9aaa-f57bdcc73b16/1/SInGeZ92tFIvCZH2uTNP1ttUHVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:f8:cc:95:7e:2f:6c:dc:62:92:ae:bb:25:9b:0a:10:e7:f1:
         05:67:69:13:a1:60:d5:5e:15:ae:da:ee:ae:61:5d:a5:78:53:
         81:22:e2:0f:bd:08:95:45:97:0c:32:f3:8b:70:ff:cb:a4:dc:
         e2:7f:d9:1a:20:a2:0d:3d:34:5b:c7:cb:9c:4c:09:92:43:f6:
         02:5f:d7:34:3c:51:0d:85:b0:34:4e:07:68:86:27:7f:1f:dc:
         ef:fd:f3:6e:86:21:56:9c:84:db:ed:06:f2:ba:26:4c:d0:3c:
         8d:3a:a6:7b:b3:53:f5:54:4d:66:f1:92:3f:8b:2e:66:02:ed:
         d2:d8:b4:22:d8:19:b1:b1:68:da:13:ce:0a:fd:f2:7d:9c:eb:
         d4:dd:2e:f5:98:f3:a3:1a:ec:15:ba:f9:e7:3b:13:43:68:c2:
         ce:8b:64:19:1d:e6:d7:c4:85:09:b0:54:21:5a:ef:fd:59:19:
         c5:c1:8d:05:a5:52:95:aa:70:ff:56:c8:46:18:21:96:69:51:
         b8:ae:12:45:57:e8:2d:48:e0:87:ff:9f:16:76:1e:0b:69:f8:
         f1:61:00:e5:cf:1d:02:de:35:06:ca:21:af:44:97:e8:6e:6d:
         a4:c7:6f:1f:de:44:bc:96:2a:90:31:9e:87:e8:bb:25:91:d6:
         1f:b8:97:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 16:12:05 2025 by rpki-client