Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft
File:                     MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft (raw, json)
Hash identifier:          HXMuTUkjfRuessDe/YoXAOJhvV2Ea3ZXFXFo1BTMayM=
Subject key identifier:   6A:C0:F0:3C:6A:92:30:52:0D:16:A2:A9:2C:9B:45:27:DB:89:7F:F1
Authority key identifier: 31:DA:92:03:21:C6:C8:2C:EE:69:29:E7:98:FC:93:72:BA:CC:B9:25
Certificate issuer:       /CN=31da920321c6c82cee6929e798fc9372baccb925
Certificate serial:       0196A654C7D8332450D78557232B874B28E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MdqSAyHGyCzuaSnnmPyTcrrMuSU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft
Manifest number:          0723
Signing time:             Tue 06 May 2025 16:01:36 +0000
Manifest this update:     Tue 06 May 2025 16:01:36 +0000
Manifest next update:     Wed 07 May 2025 16:01:36 +0000
Files and hashes:         1: MdqSAyHGyCzuaSnnmPyTcrrMuSU.crl (hash: cdoZM6txUs1QBfbwwLLKJTXmJuAZJcPehRGCZFr1jZc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MdqSAyHGyCzuaSnnmPyTcrrMuSU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 14:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a6:54:c7:d8:33:24:50:d7:85:57:23:2b:87:4b:28:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31da920321c6c82cee6929e798fc9372baccb925
        Validity
            Not Before: May  6 16:01:36 2025 GMT
            Not After : May  7 16:01:36 2025 GMT
        Subject: CN=6ac0f03c6a9230520d16a2a92c9b4527db897ff1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:0e:27:0e:c1:25:1d:a4:d6:c8:ec:25:78:7f:
                    f9:30:5e:31:c8:cc:78:30:72:e4:15:8f:55:81:1b:
                    15:87:a3:ac:d5:41:89:d8:34:5e:c3:78:1a:a0:f2:
                    aa:a3:e5:3a:7c:d0:6c:7d:14:00:be:e8:7a:ed:da:
                    b8:eb:56:93:81:db:1b:04:56:12:d6:35:cd:df:7a:
                    6b:58:21:ea:ef:3c:93:01:d1:1b:43:7e:5e:a3:11:
                    7c:00:f9:4b:5e:c9:cf:33:2b:79:be:5a:a5:42:71:
                    e7:9f:32:14:48:4c:92:91:19:3d:fe:ce:de:23:78:
                    8a:b0:a2:d9:40:3e:39:b7:28:2d:19:ad:39:41:fa:
                    9a:94:16:e2:c5:cd:ea:ca:92:2c:1b:fb:49:ad:fa:
                    c0:ee:a0:8f:4f:0b:2c:64:1b:6c:16:ac:57:17:99:
                    91:80:d1:b1:0e:a6:e8:92:77:65:4e:c0:37:44:72:
                    20:5e:7a:9b:f9:0b:d0:50:b7:00:95:f6:62:87:56:
                    6f:a9:8b:f6:d0:ae:b2:09:75:89:63:cb:e6:36:9c:
                    98:82:22:28:f8:ee:7a:6b:ed:b7:6e:90:2d:35:a2:
                    72:9e:71:d6:65:8e:de:a1:80:b7:ed:23:6d:ce:71:
                    31:c1:d4:06:ef:c8:bf:1e:2a:f8:e7:81:3e:bb:57:
                    1a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:C0:F0:3C:6A:92:30:52:0D:16:A2:A9:2C:9B:45:27:DB:89:7F:F1
            X509v3 Authority Key Identifier:
                keyid:31:DA:92:03:21:C6:C8:2C:EE:69:29:E7:98:FC:93:72:BA:CC:B9:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdqSAyHGyCzuaSnnmPyTcrrMuSU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:b7:e3:81:fa:d8:ba:1e:e5:3b:fd:91:ee:4e:a6:9f:83:6f:
         5b:b4:c8:3d:f6:0b:ca:f4:2a:55:ec:4b:83:be:e1:ea:d1:60:
         ad:67:e6:d7:d5:60:4a:76:44:7a:ed:bc:86:b1:87:2f:76:77:
         3a:4f:a8:16:00:be:9b:e1:b6:0a:c8:68:64:9f:3b:79:7a:f9:
         66:91:51:24:5b:78:20:bc:ff:b5:9d:ae:3e:16:cd:6c:8a:08:
         93:50:03:0c:67:15:ad:f0:9d:9b:ed:8d:f8:20:c1:33:42:b7:
         92:22:bf:9f:ae:07:85:54:d6:78:19:29:59:1d:a5:4e:d7:5a:
         06:ef:d6:09:53:a3:4d:43:ab:7e:39:af:4c:08:e6:ee:1c:1e:
         5d:06:9e:11:8a:f4:02:47:99:39:b4:1c:ab:b0:65:7a:e2:69:
         f2:4d:9a:c3:8e:7f:6d:9b:3f:5a:61:7d:0f:09:09:53:1b:63:
         c9:f6:d5:42:2c:44:88:56:69:d2:1c:5b:d8:d0:b0:81:02:d8:
         54:2f:29:cf:c6:6d:72:f5:0c:33:9c:6c:94:bb:4e:14:d1:04:
         f1:cb:69:77:65:3f:d8:9f:ee:b9:49:7d:27:98:83:91:29:1c:
         e4:32:07:0d:c5:e0:0b:5a:86:7c:a8:3d:55:68:a8:53:3b:2f:
         ff:7e:97:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 21:07:55 2025 by rpki-client