Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.mft
File:                     3hItFywTsVKR5B-UVoFSWCb--JI.mft (raw, json)
Hash identifier:          el8UWwni6dHTkuuwA0GetdEaGbVIfFsaKQXriX5Zko0=
Subject key identifier:   4E:23:95:F1:83:C6:42:BD:8F:9F:12:4B:03:72:2D:95:66:0D:88:1B
Authority key identifier: DE:12:2D:17:2C:13:B1:52:91:E4:1F:94:56:81:52:58:26:FE:F8:92
Certificate issuer:       /CN=de122d172c13b15291e41f945681525826fef892
Certificate serial:       0196BB5B50E5978E08CEE5B0B092F379E581
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3hItFywTsVKR5B-UVoFSWCb--JI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.mft
Manifest number:          0E90
Signing time:             Sat 10 May 2025 18:00:45 +0000
Manifest this update:     Sat 10 May 2025 18:00:45 +0000
Manifest next update:     Sun 11 May 2025 18:00:45 +0000
Files and hashes:         1: 3hItFywTsVKR5B-UVoFSWCb--JI.crl (hash: G7rHsBO3KANuIshKHaNJrvRN9dOkuxbYZ7pKQQ9Yc54=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3hItFywTsVKR5B-UVoFSWCb--JI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 18:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bb:5b:50:e5:97:8e:08:ce:e5:b0:b0:92:f3:79:e5:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de122d172c13b15291e41f945681525826fef892
        Validity
            Not Before: May 10 18:00:45 2025 GMT
            Not After : May 11 18:00:45 2025 GMT
        Subject: CN=4e2395f183c642bd8f9f124b03722d95660d881b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:da:aa:c9:85:c3:1d:6f:9f:14:73:e3:09:08:
                    37:7e:0e:d2:69:be:2b:1d:a7:31:4e:3f:cf:34:bb:
                    8c:b5:59:59:8a:66:ac:55:db:45:8d:18:14:9f:10:
                    4a:00:ac:51:60:16:3f:47:9e:04:1f:2f:fb:f8:26:
                    f6:ee:be:e9:18:3b:4a:b9:30:d1:23:66:7e:4c:79:
                    9b:21:30:88:2d:73:40:fc:f8:5a:0c:f6:d6:22:18:
                    45:3b:da:68:92:d4:f3:c9:e4:93:3f:d3:44:7c:a2:
                    ed:3d:4e:ba:36:0b:9e:9b:47:be:f1:6e:1d:2c:27:
                    f0:3f:19:ae:3d:9a:d8:01:51:f3:12:19:43:55:3a:
                    80:d6:fc:8c:e8:59:88:11:f7:ae:6d:e8:e6:c9:6d:
                    36:b3:e7:b0:75:24:4d:00:e6:f6:34:90:29:f6:56:
                    7b:78:81:a9:04:cf:a5:88:22:cb:41:47:e4:ca:36:
                    77:28:c1:e5:f0:80:6f:e9:80:ef:3e:c9:70:63:03:
                    bb:3a:17:67:b3:a3:a6:e4:03:38:76:a2:af:9e:85:
                    c3:44:7d:14:66:2f:e2:c2:dd:62:8a:71:70:1a:4d:
                    63:42:88:34:1d:80:3a:d2:3c:14:49:78:96:32:59:
                    9b:50:c5:5e:c7:db:5d:ee:60:b0:e7:d0:25:2c:d3:
                    22:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:23:95:F1:83:C6:42:BD:8F:9F:12:4B:03:72:2D:95:66:0D:88:1B
            X509v3 Authority Key Identifier:
                keyid:DE:12:2D:17:2C:13:B1:52:91:E4:1F:94:56:81:52:58:26:FE:F8:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hItFywTsVKR5B-UVoFSWCb--JI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:e4:b1:a1:60:7b:93:df:00:cf:0a:e2:77:a6:1a:b7:04:d8:
         bf:4f:71:f4:f0:17:c5:2e:a0:11:4f:ed:fa:b5:8a:38:04:7a:
         6b:95:7a:d4:1f:cd:26:8d:c9:3a:1b:48:08:1a:71:fa:10:6e:
         ae:dd:e5:03:2e:7f:2f:9d:bf:f1:07:86:4c:f2:17:66:31:f5:
         88:68:56:8f:e8:59:39:49:e4:cc:21:4b:01:c5:67:7b:70:e6:
         99:12:ee:d9:13:af:0f:e6:d1:e3:30:e9:eb:7a:6c:ed:89:63:
         e5:d6:7f:ea:7f:78:60:ce:18:7c:36:81:a7:12:31:f0:e1:97:
         49:a9:54:77:43:31:75:8f:59:65:bd:73:bc:62:cd:e8:22:88:
         48:63:96:a5:19:cb:b4:36:94:c6:4b:79:94:eb:35:d2:49:86:
         fe:2f:df:7c:5f:b2:f1:11:c7:79:b5:88:1f:d7:52:98:b9:5a:
         4b:91:c7:8e:30:f7:0e:6f:0b:56:c2:28:fd:8b:f4:a1:f8:8d:
         c0:77:6f:01:e2:15:6f:47:64:77:d1:cf:29:79:ca:a6:a2:a8:
         f1:a6:62:ee:c0:b2:e0:01:4b:21:fb:88:b8:4e:52:6e:ce:d6:
         60:db:5d:e0:92:12:de:66:c5:cc:72:13:d0:3e:7e:67:39:11:
         3a:7b:37:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:30:17 2025 by rpki-client