Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.mft
File:                     mD6ikZcZkNxIb5OBJ4P63Yet6GM.mft (raw, json)
Hash identifier:          vN9ozKcihUQf7Jst8VjAF5Tjprt7POpEIkVytvvIos8=
Subject key identifier:   F6:15:80:1E:F4:DC:49:D1:FA:9A:2A:CF:07:37:06:63:1B:87:1C:91
Authority key identifier: 98:3E:A2:91:97:19:90:DC:48:6F:93:81:27:83:FA:DD:87:AD:E8:63
Certificate issuer:       /CN=983ea291971990dc486f93812783fadd87ade863
Certificate serial:       0196AFFB8D3CF823324CCD6172DAE5A24700
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mD6ikZcZkNxIb5OBJ4P63Yet6GM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.mft
Manifest number:          08F5
Signing time:             Thu 08 May 2025 13:00:20 +0000
Manifest this update:     Thu 08 May 2025 13:00:20 +0000
Manifest next update:     Fri 09 May 2025 13:00:20 +0000
Files and hashes:         1: mD6ikZcZkNxIb5OBJ4P63Yet6GM.crl (hash: SK4dX5TWWHHbL4aa/7fpwO6ShcK6Nq68BeTjweKPS8k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mD6ikZcZkNxIb5OBJ4P63Yet6GM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 13:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:af:fb:8d:3c:f8:23:32:4c:cd:61:72:da:e5:a2:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=983ea291971990dc486f93812783fadd87ade863
        Validity
            Not Before: May  8 13:00:20 2025 GMT
            Not After : May  9 13:00:20 2025 GMT
        Subject: CN=f615801ef4dc49d1fa9a2acf073706631b871c91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:18:08:24:25:a4:00:4e:f4:3b:e6:ac:3f:08:
                    f9:7e:94:30:3c:94:e1:ab:93:47:37:65:e4:55:eb:
                    90:f2:5d:84:ca:86:72:5b:04:28:51:f0:1e:6c:d3:
                    e9:d2:74:10:3b:13:94:d6:6a:b6:62:22:7d:2a:9f:
                    51:6c:c1:d0:4d:c0:a2:51:2b:ac:5b:cf:23:26:57:
                    1f:78:80:cd:33:fd:39:52:19:c7:71:10:ef:0f:d9:
                    92:21:b8:04:4e:3e:1d:e2:51:81:92:c2:ca:a7:dc:
                    b1:45:e8:7a:1e:51:1e:02:52:cc:36:76:d3:b0:4c:
                    2f:ca:0e:0f:3f:96:34:84:4e:01:bd:da:41:c9:80:
                    87:4d:bb:b8:36:45:a6:ec:2b:18:c2:56:02:d9:00:
                    f2:5d:f4:b2:00:d5:8e:7d:ff:c1:18:a1:cf:b8:1e:
                    3e:35:0d:70:2b:d3:cc:61:8d:75:b4:7d:17:11:16:
                    a2:87:d8:a5:a9:2e:cf:f5:07:18:e9:8d:6a:bf:ea:
                    59:c3:cc:ef:c9:c5:26:8f:03:67:92:8e:2f:df:31:
                    c7:b9:fa:ae:26:9e:25:c2:bf:38:c3:ff:f1:02:9c:
                    02:04:57:bf:49:6b:2e:fb:71:23:16:3c:fc:41:bb:
                    e7:40:8e:6e:3f:5a:6b:db:63:46:0e:47:14:8c:0a:
                    32:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:15:80:1E:F4:DC:49:D1:FA:9A:2A:CF:07:37:06:63:1B:87:1C:91
            X509v3 Authority Key Identifier:
                keyid:98:3E:A2:91:97:19:90:DC:48:6F:93:81:27:83:FA:DD:87:AD:E8:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mD6ikZcZkNxIb5OBJ4P63Yet6GM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:b2:34:10:5d:2c:99:5f:72:e2:13:17:95:1f:23:51:b6:49:
         e0:1d:82:f1:d8:1f:5d:44:ce:da:8b:90:30:09:c9:62:2d:01:
         f1:ee:91:18:d3:4e:f0:77:7b:2a:40:e7:a3:f0:3f:91:02:63:
         5c:6e:68:8d:9c:d4:d2:8c:63:c3:b2:6f:08:51:ca:62:e1:5b:
         45:b5:9b:f1:e6:c4:a3:92:5e:c6:63:26:29:4f:21:bc:81:fb:
         06:5a:5d:e9:93:82:70:06:5b:14:c2:27:d9:d0:d2:31:14:da:
         d3:58:d7:f6:82:f0:f5:77:9a:5c:24:63:f1:3f:c6:93:77:1f:
         5d:19:c5:53:63:19:3e:2f:26:a7:b1:40:2d:7c:36:69:65:a8:
         94:ec:dd:96:3f:d6:24:cd:c7:79:e5:21:e6:f3:8c:e8:c1:f1:
         38:67:b8:0c:4c:cc:fc:17:d6:c0:78:b0:86:01:a8:35:2c:9a:
         d0:8c:45:df:0b:32:ee:95:39:44:1b:88:ae:6d:51:f2:0d:d7:
         37:33:cb:96:07:0c:9e:bf:f4:49:7e:29:00:49:06:e2:3a:1b:
         83:eb:23:6f:23:ef:be:58:a2:5e:0b:5c:86:26:6a:f3:0b:49:
         7a:6d:cb:e6:1a:db:09:2e:a9:b2:85:90:f0:4d:cc:ba:e0:90:
         84:34:94:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 21:38:14 2025 by rpki-client