Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.mft
File:                     jNmfO_6ZJzajiFx5YyTbM5d_p-k.mft (raw, json)
Hash identifier:          M49BZGZrSThG2LU3za4IRThqHcHD4NNoWrA3IfcpSTY=
Subject key identifier:   94:67:A5:F0:5C:74:08:BC:34:CE:43:71:C4:67:3E:38:10:ED:53:84
Authority key identifier: 8C:D9:9F:3B:FE:99:27:36:A3:88:5C:79:63:24:DB:33:97:7F:A7:E9
Certificate issuer:       /CN=8cd99f3bfe992736a3885c796324db33977fa7e9
Certificate serial:       0196A08921956F7C85FDC8A34ACEB6B44B53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jNmfO_6ZJzajiFx5YyTbM5d_p-k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.mft
Manifest number:          1526
Signing time:             Mon 05 May 2025 13:01:03 +0000
Manifest this update:     Mon 05 May 2025 13:01:03 +0000
Manifest next update:     Tue 06 May 2025 13:01:03 +0000
Files and hashes:         1: jNmfO_6ZJzajiFx5YyTbM5d_p-k.crl (hash: IymfMcNEFRnqBZOxf3uU67D2G47RXjJoVl5HaOO5glA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jNmfO_6ZJzajiFx5YyTbM5d_p-k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a0:89:21:95:6f:7c:85:fd:c8:a3:4a:ce:b6:b4:4b:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cd99f3bfe992736a3885c796324db33977fa7e9
        Validity
            Not Before: May  5 13:01:03 2025 GMT
            Not After : May  6 13:01:03 2025 GMT
        Subject: CN=9467a5f05c7408bc34ce4371c4673e3810ed5384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c7:61:32:d5:17:42:88:4b:27:80:3d:52:fb:
                    99:f1:67:88:6c:76:5e:d8:e3:a7:bd:91:21:48:d9:
                    cf:e0:a6:f2:51:bf:27:51:20:42:cb:98:b7:f2:16:
                    d3:0c:60:fa:08:d1:ac:f6:c9:7f:39:51:a1:51:13:
                    59:44:75:d4:a6:4e:70:58:e1:dd:2e:7a:8f:47:61:
                    4a:b4:56:c1:b0:da:38:92:90:86:c9:0c:38:26:3a:
                    e5:ee:0c:ec:25:bb:24:0e:98:03:ae:33:0f:ae:c0:
                    c5:fe:b3:1f:72:91:93:24:de:4d:00:d8:81:33:33:
                    81:09:d2:b7:e7:e8:35:e2:18:cc:d6:92:9c:25:79:
                    da:c0:f9:ac:f1:32:31:12:34:6f:27:b1:55:98:38:
                    b8:ce:d4:0c:f6:61:c7:bd:a8:59:63:fe:3c:51:24:
                    e6:8b:e1:cc:b6:a0:25:78:26:22:9e:0e:50:38:e4:
                    47:47:39:e8:b3:06:87:00:c8:ac:0d:70:34:09:a6:
                    86:c4:c0:07:39:0e:5c:8b:6d:a1:8d:1b:1d:19:fc:
                    ae:05:e3:ec:a9:76:d5:1d:f9:b6:de:c9:6a:12:e6:
                    37:a4:7c:2e:b7:c1:e4:15:0e:85:fa:53:7f:5c:74:
                    fe:89:97:dc:97:05:3c:f0:d8:a9:ca:84:63:87:84:
                    96:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:67:A5:F0:5C:74:08:BC:34:CE:43:71:C4:67:3E:38:10:ED:53:84
            X509v3 Authority Key Identifier:
                keyid:8C:D9:9F:3B:FE:99:27:36:A3:88:5C:79:63:24:DB:33:97:7F:A7:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNmfO_6ZJzajiFx5YyTbM5d_p-k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:7b:17:7b:5b:dc:79:ab:84:c6:ca:e7:9e:7a:08:01:87:f3:
         5f:d1:0e:a0:b7:ce:61:ee:61:63:88:47:b9:ec:68:bc:5c:3a:
         d8:6d:48:1c:2f:02:20:98:a6:4f:64:16:34:25:94:2f:68:8d:
         29:66:df:9b:48:17:52:62:64:f6:9c:3e:2f:47:ff:9b:0b:a9:
         b1:33:e0:10:fc:3f:5e:52:ca:b3:49:e3:59:bb:ef:4b:0b:45:
         71:12:90:5a:8b:67:90:27:4b:62:68:33:33:6d:a6:94:32:a8:
         b4:12:37:d9:05:1f:1f:2b:c4:bc:a5:44:c4:28:dc:07:45:82:
         f7:32:a4:c4:c4:ee:ed:da:fb:05:22:49:c9:4d:58:32:e6:ed:
         71:74:01:f2:c5:9c:fb:38:b4:fa:48:1d:d1:aa:d3:3d:e9:7b:
         33:2b:21:e6:b5:ed:02:ef:f4:bd:10:02:18:40:53:7b:e5:1d:
         31:d4:e8:cc:13:93:35:8c:1a:83:aa:2c:b8:d0:34:0b:79:af:
         91:0f:2a:bf:39:62:bb:15:61:46:eb:51:81:9f:df:a0:4b:44:
         cc:64:1a:7b:65:94:c5:d9:eb:b9:ba:b7:a5:bc:c0:3a:4c:88:
         9f:a2:63:6a:c8:15:9e:fe:16:c2:92:dd:b0:ac:75:7e:f4:ca:
         e6:5b:e8:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 17:40:03 2025 by rpki-client