Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/1-zutfQaFmVztNRCLLhFSWnqrFBg.mft
File:                     1-zutfQaFmVztNRCLLhFSWnqrFBg.mft (raw, json)
Hash identifier:          AdIMIqOp7uPcJ8znHlQYL7qfeMxGI9PmjdKre1llwYk=
Subject key identifier:   ED:16:84:5D:2E:DB:BA:5E:81:DF:33:84:7F:2B:06:05:70:78:F5:74
Authority key identifier: FB:3B:AD:7D:06:85:99:5C:ED:35:10:8B:2E:11:52:5A:7A:AB:14:18
Certificate issuer:       /CN=fb3bad7d0685995ced35108b2e11525a7aab1418
Certificate serial:       0196A61D0C9EB646D43D1A8AC3B95E504FA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-zutfQaFmVztNRCLLhFSWnqrFBg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/1-zutfQaFmVztNRCLLhFSWnqrFBg.mft
Manifest number:          061E
Signing time:             Tue 06 May 2025 15:00:43 +0000
Manifest this update:     Tue 06 May 2025 15:00:43 +0000
Manifest next update:     Wed 07 May 2025 15:00:43 +0000
Files and hashes:         1: 1-zutfQaFmVztNRCLLhFSWnqrFBg.crl (hash: 8xCul9dL9mjyUzPPXtRpcfgP8aF20VdSDtxLm+yTCHM=)
                          2: bS2AXyQj6T-v-BFQFVgN8omhTFI.roa (hash: Hlm2+aXt9COQOoJS5S5Wj7t+eBfLw0yjo9KgiG+EY2U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/1-zutfQaFmVztNRCLLhFSWnqrFBg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/1-zutfQaFmVztNRCLLhFSWnqrFBg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-zutfQaFmVztNRCLLhFSWnqrFBg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 14:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a6:1d:0c:9e:b6:46:d4:3d:1a:8a:c3:b9:5e:50:4f:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb3bad7d0685995ced35108b2e11525a7aab1418
        Validity
            Not Before: May  6 15:00:43 2025 GMT
            Not After : May  7 15:00:43 2025 GMT
        Subject: CN=ed16845d2edbba5e81df33847f2b06057078f574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1f:71:31:bb:a1:9e:24:00:0b:64:84:a9:53:
                    71:b6:c9:42:74:a2:d8:1e:de:00:9a:e6:62:51:1b:
                    2c:ff:36:7f:79:15:8e:96:18:d8:ae:b1:bb:06:11:
                    52:d5:bc:8f:4c:66:c7:b7:25:62:f8:2c:f4:13:94:
                    3b:9e:f1:e3:4a:b3:1e:19:82:33:29:84:ba:5b:46:
                    92:fb:f4:a9:75:73:68:04:50:ee:f8:d1:c5:6e:c1:
                    db:31:fa:dd:5d:77:5e:78:c1:f7:04:35:32:b9:18:
                    77:4c:1d:9b:f0:b1:88:08:46:96:18:ce:ec:0a:c2:
                    c0:d9:66:28:60:ac:eb:f3:f8:9b:41:73:fa:85:95:
                    6a:fc:cd:a5:e2:43:34:64:80:21:8a:81:92:ad:36:
                    62:27:34:f8:02:12:c0:b4:95:20:cf:68:8c:4c:46:
                    10:4b:95:26:72:e4:ac:85:cb:65:71:1c:b2:e7:bc:
                    8a:2e:aa:f6:6e:81:7e:61:72:8b:e1:f9:1b:b7:19:
                    61:d9:c6:98:03:96:ba:48:f4:c2:ba:a7:05:60:48:
                    86:ab:bd:6e:d5:71:09:ec:b9:8e:de:46:ed:10:06:
                    dd:97:5e:ad:02:16:dd:42:37:b0:9b:08:2b:61:3c:
                    01:e1:f7:9d:ca:0c:94:02:30:39:61:1f:e8:55:d8:
                    3c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:16:84:5D:2E:DB:BA:5E:81:DF:33:84:7F:2B:06:05:70:78:F5:74
            X509v3 Authority Key Identifier:
                keyid:FB:3B:AD:7D:06:85:99:5C:ED:35:10:8B:2E:11:52:5A:7A:AB:14:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zutfQaFmVztNRCLLhFSWnqrFBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/1-zutfQaFmVztNRCLLhFSWnqrFBg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/1-zutfQaFmVztNRCLLhFSWnqrFBg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:89:62:1e:64:f3:8e:22:d7:8a:39:80:f1:1d:1f:b2:16:74:
         8f:02:7e:f5:c5:6f:39:bc:c7:56:a5:3a:a9:68:35:80:28:bc:
         5d:ef:16:09:72:09:7b:42:c1:e4:1b:37:f6:9c:fa:bf:0c:22:
         f0:13:39:67:36:95:5e:55:8c:dc:32:91:74:72:ff:ff:62:68:
         fd:e2:3a:de:02:b6:ec:ba:48:a5:e1:c9:54:e8:e4:dd:52:c7:
         b7:b5:35:1c:cd:18:83:93:67:e7:d6:7b:88:62:be:8a:06:88:
         ce:0c:ec:10:df:eb:c0:ec:b3:27:8d:f6:34:b9:eb:2d:11:63:
         22:c1:6c:73:a6:d9:ab:58:98:7d:de:1c:d8:fa:1a:11:e5:c7:
         de:2c:65:df:b4:0a:c7:49:ac:65:b9:88:1a:7a:90:ee:eb:44:
         2c:56:be:3c:e7:ec:aa:ea:1f:5c:5c:30:53:bd:3a:4f:b8:4a:
         5d:4f:33:24:f9:d5:a5:0b:f2:a8:50:47:be:a5:8f:62:a8:67:
         ad:69:9b:4d:31:da:29:4e:ca:71:c0:8a:10:7e:a7:a2:79:c6:
         19:ce:cb:50:44:f3:cc:42:f1:d1:0c:e4:3f:ad:ae:ae:40:b6:
         7e:6e:00:be:fd:59:2b:ce:2d:59:c1:6f:64:ee:e2:49:70:64:
         4a:f9:b4:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 18:16:09 2025 by rpki-client