Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft
File:                     16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft (raw, json)
Hash identifier:          7YUtC4F76Ei+Beo7iHjRlitb9kA9Hbi6PEvpaDmlv3s=
Subject key identifier:   39:B1:6F:EA:16:E2:A3:AD:F9:8F:AB:CB:CB:5E:77:5C:E6:C6:69:78
Authority key identifier: D7:A4:FF:66:3F:A6:71:5D:B0:C6:BF:E7:9A:92:87:EA:DA:6C:B3:E6
Certificate issuer:       /CN=d7a4ff663fa6715db0c6bfe79a9287eada6cb3e6
Certificate serial:       0196C15D3972FC133E8B8354B8402F8693D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/16T_Zj-mcV2wxr_nmpKH6tpss-Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft
Manifest number:          1533
Signing time:             Sun 11 May 2025 22:00:34 +0000
Manifest this update:     Sun 11 May 2025 22:00:34 +0000
Manifest next update:     Mon 12 May 2025 22:00:34 +0000
Files and hashes:         1: 16T_Zj-mcV2wxr_nmpKH6tpss-Y.crl (hash: NNDIMzxRWqPOxDQCQjVT3G26wLiqn9T3qGyY1D/mdfw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/16T_Zj-mcV2wxr_nmpKH6tpss-Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c1:5d:39:72:fc:13:3e:8b:83:54:b8:40:2f:86:93:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7a4ff663fa6715db0c6bfe79a9287eada6cb3e6
        Validity
            Not Before: May 11 22:00:34 2025 GMT
            Not After : May 12 22:00:34 2025 GMT
        Subject: CN=39b16fea16e2a3adf98fabcbcb5e775ce6c66978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:eb:e7:d3:23:32:24:30:63:4c:2a:81:04:6a:
                    c8:44:a4:c0:09:66:e3:9a:88:c3:9c:2e:10:51:49:
                    ed:11:b5:01:a6:1e:3c:4f:af:77:c3:89:d0:8d:11:
                    d9:60:56:51:ce:09:b4:a4:ae:c6:f8:fe:a9:db:34:
                    39:8a:87:0b:03:6e:df:01:a8:cb:52:f0:3b:0e:f7:
                    9b:da:43:0e:8e:9b:b7:f0:f4:ea:1e:c5:1b:94:27:
                    63:59:fe:ce:dc:ba:01:32:e5:6f:c6:8c:88:c7:83:
                    48:21:5d:f5:8b:28:bd:e3:90:e9:38:e7:9c:90:ef:
                    b5:9a:2e:96:53:f2:2d:ea:46:17:d5:bd:33:bc:81:
                    04:67:9e:f5:ae:2c:22:ee:44:14:03:81:db:e8:d5:
                    84:4c:c6:d1:ea:9c:f7:88:8f:d6:c2:d4:d5:0f:91:
                    47:ba:74:95:6c:18:57:8f:ba:d4:36:e5:63:40:ea:
                    7f:6b:05:69:20:7d:b6:07:0b:97:82:bd:0e:c2:b9:
                    d7:8b:79:4b:de:96:a6:bd:9e:6c:30:ed:a0:5e:a1:
                    63:0b:58:a8:11:b9:4e:5d:0e:ac:90:82:90:5b:4c:
                    4c:8c:00:c5:8b:68:f8:10:c5:a2:a1:25:98:31:9c:
                    1b:0d:65:fc:f7:7e:8b:88:1a:02:86:7f:10:3e:14:
                    6c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:B1:6F:EA:16:E2:A3:AD:F9:8F:AB:CB:CB:5E:77:5C:E6:C6:69:78
            X509v3 Authority Key Identifier:
                keyid:D7:A4:FF:66:3F:A6:71:5D:B0:C6:BF:E7:9A:92:87:EA:DA:6C:B3:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/16T_Zj-mcV2wxr_nmpKH6tpss-Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:06:51:85:77:e9:70:c5:31:37:ac:f4:4c:33:70:a2:0b:c2:
         bd:13:18:7f:06:25:00:0d:6d:fa:b1:1d:75:66:8b:43:7e:90:
         c9:66:73:ab:fd:59:4b:80:a7:71:db:f7:d8:7a:2d:d4:00:89:
         df:70:54:14:7d:87:16:21:0f:c8:af:c0:30:44:bd:98:ec:9c:
         06:ab:e8:0f:94:0a:fc:56:79:a7:78:09:88:15:ad:19:c2:be:
         40:b3:de:a0:3d:71:8c:3e:67:5d:27:a4:86:41:dd:dc:db:8c:
         67:cf:4b:25:05:cc:b1:b7:45:43:9c:c3:a9:da:1e:d6:0f:d8:
         fd:89:59:b0:70:eb:b3:18:1b:d8:8b:0f:84:36:40:da:18:56:
         e3:61:e8:6e:39:9c:ea:a3:bc:66:d6:8e:40:a9:9f:48:13:b9:
         0e:b1:28:90:d6:82:be:37:43:49:ea:4d:7f:c7:85:a4:c7:6d:
         a9:23:9d:17:48:c3:d6:07:6e:77:58:d4:62:cf:e8:0c:0c:07:
         c7:bd:05:18:b8:8e:d6:74:6c:2d:60:a1:73:2c:4f:2b:22:eb:
         30:0b:23:8f:0c:6b:9f:e3:cc:25:75:da:8c:aa:4d:d1:b8:4c:
         a1:c7:09:36:c2:a2:aa:75:73:ef:8c:5f:e7:67:f7:69:a7:78:
         10:f9:ee:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 01:32:30 2025 by rpki-client