Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/55b8b2-18d4-4527-8f6b-56e44f9f9914/1/fgTdnIKxkaXwnWBspVDAF3ha7sQ.mft
File:                     fgTdnIKxkaXwnWBspVDAF3ha7sQ.mft (raw, json)
Hash identifier:          EtGwsMPNBs9U0adoTBKj/iYkK5zbuIXlyvHFK8Ihnmg=
Subject key identifier:   1F:4F:F6:E5:78:F5:47:79:D9:E0:65:A8:67:03:B4:4F:52:FC:0B:5D
Authority key identifier: 7E:04:DD:9C:82:B1:91:A5:F0:9D:60:6C:A5:50:C0:17:78:5A:EE:C4
Certificate issuer:       /CN=7e04dd9c82b191a5f09d606ca550c017785aeec4
Certificate serial:       0196BB92CDD42042CE503E5BC17601BFE279
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fgTdnIKxkaXwnWBspVDAF3ha7sQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/55b8b2-18d4-4527-8f6b-56e44f9f9914/1/fgTdnIKxkaXwnWBspVDAF3ha7sQ.mft
Manifest number:          152F
Signing time:             Sat 10 May 2025 19:01:22 +0000
Manifest this update:     Sat 10 May 2025 19:01:22 +0000
Manifest next update:     Sun 11 May 2025 19:01:22 +0000
Files and hashes:         1: fgTdnIKxkaXwnWBspVDAF3ha7sQ.crl (hash: Lr5F3deUEFtBefAaur4nz3cnt+my4MSgkqY+yHXliz0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/55b8b2-18d4-4527-8f6b-56e44f9f9914/1/fgTdnIKxkaXwnWBspVDAF3ha7sQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/55b8b2-18d4-4527-8f6b-56e44f9f9914/1/fgTdnIKxkaXwnWBspVDAF3ha7sQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fgTdnIKxkaXwnWBspVDAF3ha7sQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 19:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bb:92:cd:d4:20:42:ce:50:3e:5b:c1:76:01:bf:e2:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e04dd9c82b191a5f09d606ca550c017785aeec4
        Validity
            Not Before: May 10 19:01:22 2025 GMT
            Not After : May 11 19:01:22 2025 GMT
        Subject: CN=1f4ff6e578f54779d9e065a86703b44f52fc0b5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:21:d8:c7:71:ee:92:9a:fe:24:9d:55:b7:46:
                    7f:dc:98:9f:0d:7d:cc:31:86:69:6a:57:15:ff:25:
                    e2:57:db:34:63:ee:db:10:10:75:fe:0e:0c:3e:b7:
                    25:20:a6:84:ae:77:88:d0:5c:e3:12:a5:96:78:54:
                    3e:26:34:27:c1:cb:19:1f:f3:fd:a3:04:72:94:0c:
                    86:00:6c:f0:16:e4:f9:47:d8:e0:1e:0a:28:db:bc:
                    d5:eb:63:53:c6:f0:dd:a4:26:d5:93:dc:41:bf:91:
                    1d:04:51:16:c9:22:d9:c1:59:55:a4:fc:64:8a:6d:
                    1f:0e:5a:24:f2:e5:80:c8:85:1c:81:73:dc:a0:d7:
                    58:84:e8:3c:d2:90:9a:8c:a4:7d:b5:e8:a2:e5:3b:
                    8c:65:18:07:2d:7e:66:57:2b:64:dd:b7:86:05:3c:
                    a3:bb:56:a1:c0:f0:52:f5:c4:9e:5b:36:bd:35:d4:
                    03:d9:78:80:a8:85:f4:cc:7d:9d:8a:16:08:24:fb:
                    66:63:b6:63:fb:48:d4:ed:38:29:c4:9c:93:84:34:
                    2c:fb:e7:13:73:0c:a6:dd:00:c0:6b:74:a7:c4:4c:
                    5a:a9:79:20:e2:c0:53:e2:48:4b:6b:f2:16:bb:45:
                    3c:49:04:16:61:05:e7:76:73:90:b4:d0:cf:d3:c2:
                    b0:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:4F:F6:E5:78:F5:47:79:D9:E0:65:A8:67:03:B4:4F:52:FC:0B:5D
            X509v3 Authority Key Identifier:
                keyid:7E:04:DD:9C:82:B1:91:A5:F0:9D:60:6C:A5:50:C0:17:78:5A:EE:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgTdnIKxkaXwnWBspVDAF3ha7sQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/55b8b2-18d4-4527-8f6b-56e44f9f9914/1/fgTdnIKxkaXwnWBspVDAF3ha7sQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/55b8b2-18d4-4527-8f6b-56e44f9f9914/1/fgTdnIKxkaXwnWBspVDAF3ha7sQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:d3:0e:6c:24:89:b6:33:09:7c:a3:18:f1:77:aa:84:ed:c8:
         80:25:83:68:24:1e:07:8b:db:ec:73:c5:ab:41:26:03:e3:c4:
         94:ff:b3:4e:1b:be:fc:e5:3f:d9:27:12:c9:6d:72:15:3b:b9:
         c8:90:7f:f1:9f:43:6c:16:fd:26:f0:a2:c4:f7:17:92:ee:72:
         c8:d7:5c:29:9b:3f:81:b3:ca:26:b9:fb:9c:99:61:5a:95:05:
         ef:52:55:e4:b5:ef:82:4f:99:eb:ce:1c:62:e7:0a:44:0a:ad:
         c3:03:ce:52:27:80:76:b9:a3:68:2a:81:89:ab:4d:59:bc:dd:
         1c:51:53:21:4d:b9:b8:ac:21:bb:87:d3:6f:46:ad:91:5f:38:
         33:e3:e0:9d:48:84:09:a7:f7:b2:6e:92:d3:1d:12:b1:95:55:
         5f:9d:a3:dc:dc:e5:8e:04:4f:ad:81:f7:63:fa:86:30:37:54:
         9f:1f:e5:57:40:35:8b:35:73:1d:08:b2:85:86:c3:fd:7c:ac:
         24:d7:5c:91:41:0c:05:07:e9:61:e9:cc:f1:fe:0b:34:88:d3:
         14:05:13:3c:be:1a:c2:b6:86:00:c3:e1:9e:f8:f3:65:c1:90:
         ed:11:79:64:3b:01:d1:e7:40:c2:d3:44:5e:1e:9e:ed:8e:0c:
         d9:95:ec:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:16:42 2025 by rpki-client