Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/390837-2b7b-4684-9557-69c7ea5d8714/1/Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.mft
File:                     Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.mft (raw, json)
Hash identifier:          cbko/tG4q0+IPWdyjQHPlBCC95S+3+ZVObc2nKhCmmY=
Subject key identifier:   11:AC:CF:93:BF:33:FA:5B:0E:9A:71:98:4A:3B:C4:6B:60:EB:CC:79
Authority key identifier: 16:2F:EE:2E:69:06:E0:CF:D7:C9:4C:37:C6:4F:AB:F4:1E:14:C7:B6
Certificate issuer:       /CN=162fee2e6906e0cfd7c94c37c64fabf41e14c7b6
Certificate serial:       0196BDEE832E1B6789989684725DDEE886B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/390837-2b7b-4684-9557-69c7ea5d8714/1/Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.mft
Manifest number:          0317
Signing time:             Sun 11 May 2025 06:00:47 +0000
Manifest this update:     Sun 11 May 2025 06:00:47 +0000
Manifest next update:     Mon 12 May 2025 06:00:47 +0000
Files and hashes:         1: Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.crl (hash: kp2QeRNXdh+RHz/9tmI3BS26/yRX9Z23KvYUOI9AhVg=)
                          2: KN3Pqvfy1GqF2HSIy087TZo7Qs0.roa (hash: oGzQ0+1tlhBDajtg9SkNTia0clrGxHNnBRyqbyuthV8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/390837-2b7b-4684-9557-69c7ea5d8714/1/Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/390837-2b7b-4684-9557-69c7ea5d8714/1/Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bd:ee:83:2e:1b:67:89:98:96:84:72:5d:de:e8:86:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=162fee2e6906e0cfd7c94c37c64fabf41e14c7b6
        Validity
            Not Before: May 11 06:00:47 2025 GMT
            Not After : May 12 06:00:47 2025 GMT
        Subject: CN=11accf93bf33fa5b0e9a71984a3bc46b60ebcc79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:5e:0d:c6:41:b0:c7:42:09:e7:44:48:3c:33:
                    ac:9c:af:ec:9e:56:a3:82:5c:46:85:37:01:a0:af:
                    68:17:70:46:23:fc:14:ff:2e:f2:48:01:30:ce:43:
                    96:37:ae:4b:f6:d0:bd:20:97:58:ea:9b:c7:9e:4b:
                    56:9d:13:69:6b:77:35:90:d3:95:6d:a2:08:eb:04:
                    85:0d:10:19:f0:6b:f1:8b:92:32:65:69:9c:2e:e7:
                    02:18:ac:ee:75:dd:62:4c:39:b3:e6:05:ab:a5:30:
                    0d:96:e0:73:fe:d1:96:4d:4a:e7:19:de:9c:69:84:
                    07:80:b8:c4:38:dd:1c:4e:06:35:08:22:aa:88:35:
                    aa:d9:81:42:0c:bf:7a:45:e1:0b:c8:5e:dd:ac:1d:
                    52:f2:97:06:2a:9c:54:14:83:d6:44:80:22:d9:56:
                    95:2b:1c:7d:45:87:73:3d:e9:d6:69:46:14:e7:63:
                    bf:b8:bb:61:7b:5f:fb:33:94:19:35:df:62:ad:bb:
                    a4:3f:36:d8:b6:08:e3:f7:65:7b:85:48:64:d4:58:
                    9f:50:83:25:88:4f:9c:26:26:c6:6e:66:14:a3:96:
                    06:aa:14:8f:20:48:ce:ed:35:67:6a:32:69:b3:1f:
                    a3:e3:20:c8:cd:d6:12:1f:0a:53:71:08:e7:74:a8:
                    97:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:AC:CF:93:BF:33:FA:5B:0E:9A:71:98:4A:3B:C4:6B:60:EB:CC:79
            X509v3 Authority Key Identifier:
                keyid:16:2F:EE:2E:69:06:E0:CF:D7:C9:4C:37:C6:4F:AB:F4:1E:14:C7:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/390837-2b7b-4684-9557-69c7ea5d8714/1/Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/390837-2b7b-4684-9557-69c7ea5d8714/1/Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:81:3f:3b:8a:0d:72:c8:8f:b8:89:3e:8e:50:36:7e:eb:1c:
         8f:0e:16:fc:2b:a0:9b:33:76:89:d6:d4:e5:79:35:ea:e4:ec:
         d7:4f:99:8e:bd:ec:37:75:4e:86:94:e6:ee:84:60:1f:8e:cb:
         fa:a4:14:97:5d:e6:29:77:07:76:4c:0c:8e:32:43:6e:a6:bc:
         6e:b8:a7:9a:ff:03:09:9c:48:16:22:da:57:81:64:9a:bd:28:
         a2:2e:5e:ea:e4:fd:a4:1a:b8:13:68:58:50:05:87:e9:35:70:
         1b:1e:ed:04:56:7b:85:c2:72:d8:72:54:d4:f3:9f:c1:a2:61:
         af:3a:06:a9:18:fc:e4:72:6b:4c:ef:bd:30:e7:b9:cb:b4:b3:
         57:96:a1:3e:6d:47:be:c0:3b:ad:55:0b:ba:a4:dd:13:1e:89:
         61:6c:7b:44:17:8a:92:b0:79:06:84:0c:55:79:35:eb:e9:33:
         0d:7f:31:c0:31:33:f0:f3:34:d4:99:d1:99:09:22:f6:29:24:
         f9:fe:68:62:14:11:2d:09:a3:f8:ed:04:d0:83:2c:a1:9e:65:
         48:f5:ff:03:55:ee:de:84:5e:fb:7b:c4:0b:2d:f3:b0:fe:62:
         e1:45:ca:eb:58:05:e8:92:8b:67:c4:09:ec:65:6f:7d:bd:80:
         07:41:e6:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:13:34 2025 by rpki-client