Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.mft
File:                     Sv7PZkKkULU7B21EZILZwaid7XQ.mft (raw, json)
Hash identifier:          3cmHtMH1m22s9zXJ4PcWj8KL2ul76k50+1o0NAsCKV0=
Subject key identifier:   46:DF:26:1C:C2:62:4A:98:0A:55:2C:68:B0:D4:47:97:DA:B2:85:AB
Authority key identifier: 4A:FE:CF:66:42:A4:50:B5:3B:07:6D:44:64:82:D9:C1:A8:9D:ED:74
Certificate issuer:       /CN=4afecf6642a450b53b076d446482d9c1a89ded74
Certificate serial:       0196C871E12FB7500D4D6FC838AE90614815
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sv7PZkKkULU7B21EZILZwaid7XQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.mft
Manifest number:          14CC
Signing time:             Tue 13 May 2025 07:00:28 +0000
Manifest this update:     Tue 13 May 2025 07:00:28 +0000
Manifest next update:     Wed 14 May 2025 07:00:28 +0000
Files and hashes:         1: Sv7PZkKkULU7B21EZILZwaid7XQ.crl (hash: 0AmrXFF9sQZOaRYhfm7PwF+s3f4e0G5YYWeJBCxPHxs=)
                          2: p61VML8uLf1Dr4htLC12P2Sv8GU.roa (hash: RPd5GMtMlOZE/03iU2ovXiDZPGo3A/MLaIBoa6BmxD0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sv7PZkKkULU7B21EZILZwaid7XQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 07:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c8:71:e1:2f:b7:50:0d:4d:6f:c8:38:ae:90:61:48:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4afecf6642a450b53b076d446482d9c1a89ded74
        Validity
            Not Before: May 13 07:00:28 2025 GMT
            Not After : May 14 07:00:28 2025 GMT
        Subject: CN=46df261cc2624a980a552c68b0d44797dab285ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f0:27:cf:ce:c4:76:1f:7c:e7:f8:fd:53:31:
                    df:20:fd:6d:1f:11:c3:ad:34:d1:eb:98:fa:71:5e:
                    c0:76:db:2f:75:67:92:d7:1b:8a:45:6e:26:17:9e:
                    92:2d:54:56:f9:0e:5f:f2:72:40:d9:94:62:21:42:
                    65:61:fc:0e:64:ab:52:68:25:da:2b:74:c9:9b:55:
                    06:af:e6:10:3f:0e:bc:c5:07:61:ae:65:26:a6:f3:
                    51:ce:92:f6:bc:99:97:1b:28:e6:08:96:c6:44:8c:
                    dd:18:1f:4f:f1:0a:df:fe:c2:c4:2f:a3:63:33:6e:
                    65:39:32:a1:f7:cd:e3:55:da:e3:be:2a:dc:7b:30:
                    be:b7:9e:c5:63:fb:a9:25:16:b9:5b:ba:e8:13:5a:
                    91:43:0e:e4:36:68:af:c8:7e:40:63:85:2c:09:3e:
                    9d:f5:c1:27:df:09:d4:46:d1:4a:5e:f4:5f:42:89:
                    7b:a1:91:ae:62:7c:4c:e2:74:48:06:14:a9:42:2a:
                    03:37:a0:c9:2e:f3:a2:52:d8:f9:bd:19:68:a6:cf:
                    c3:39:18:52:2b:e4:4e:1e:53:26:49:69:b8:6a:9e:
                    2f:23:2d:62:04:3b:84:44:75:21:22:e6:f6:88:5f:
                    79:13:24:ce:1f:4d:84:02:e0:fe:92:32:9d:ee:b4:
                    8c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:DF:26:1C:C2:62:4A:98:0A:55:2C:68:B0:D4:47:97:DA:B2:85:AB
            X509v3 Authority Key Identifier:
                keyid:4A:FE:CF:66:42:A4:50:B5:3B:07:6D:44:64:82:D9:C1:A8:9D:ED:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sv7PZkKkULU7B21EZILZwaid7XQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:8a:9e:db:cb:39:e1:0c:04:da:e8:b1:61:f8:0a:72:bd:00:
         1d:e3:e7:b5:3b:69:71:d5:e4:78:09:7d:7d:c1:a7:03:80:11:
         25:c1:0d:e0:3c:51:49:19:e7:dd:ee:12:86:25:91:68:b4:41:
         32:64:84:4b:91:1b:fa:34:57:a1:1c:0d:bd:1a:e1:7a:7b:7e:
         b6:d2:60:7d:65:92:01:65:42:49:6d:2b:ce:c0:62:e3:54:60:
         7e:19:b7:3f:3f:75:6c:03:ef:42:63:89:62:e8:09:63:f4:00:
         cb:57:eb:90:20:39:4f:79:65:1c:46:4d:de:54:f5:a7:69:f4:
         9e:8f:23:ef:1a:1f:d7:fa:dc:ca:7b:92:71:a7:b6:fd:a1:50:
         d0:8d:88:f3:e3:ce:57:84:54:ce:71:69:c2:ea:6f:9f:6d:00:
         68:3d:06:f0:ff:9a:4e:09:9b:59:68:1a:43:5d:65:25:4a:60:
         06:60:92:5d:a0:d6:f1:a1:7e:8e:4b:36:64:d6:6b:a7:0b:f1:
         95:b5:2b:9f:82:e4:fb:30:b7:89:a0:cd:60:91:60:32:7c:4f:
         17:dd:22:66:97:db:13:2c:1c:b6:99:51:e0:21:37:a9:fa:f7:
         6b:0f:6c:0b:8f:e7:aa:62:e4:ca:cc:5a:e2:9b:cd:f9:13:5c:
         84:27:eb:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 12:35:05 2025 by rpki-client