Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/166ece-0624-4070-88d0-1ad23d105ac9/1/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.mft
File:                     7k0wN5YO0ZwHnj4h4f6mdQwMRb4.mft (raw, json)
Hash identifier:          I8aCnA7W9ZeSQ0xRhEOZ+KHEMgNbonCYTlGl9yWLE+E=
Subject key identifier:   A8:73:9B:83:E7:FB:C8:C1:45:59:5C:CD:01:F2:1D:9E:E7:FD:FC:50
Authority key identifier: EE:4D:30:37:96:0E:D1:9C:07:9E:3E:21:E1:FE:A6:75:0C:0C:45:BE
Certificate issuer:       /CN=ee4d3037960ed19c079e3e21e1fea6750c0c45be
Certificate serial:       0196C7289647CBDE5FF3A20FAE6F620E342D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/166ece-0624-4070-88d0-1ad23d105ac9/1/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.mft
Manifest number:          1535
Signing time:             Tue 13 May 2025 01:00:47 +0000
Manifest this update:     Tue 13 May 2025 01:00:47 +0000
Manifest next update:     Wed 14 May 2025 01:00:47 +0000
Files and hashes:         1: 7k0wN5YO0ZwHnj4h4f6mdQwMRb4.crl (hash: +QzXj0a59WU4y2i2AOf6hlpWwxghBxpEi81zr7mnwkI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/166ece-0624-4070-88d0-1ad23d105ac9/1/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/166ece-0624-4070-88d0-1ad23d105ac9/1/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 01:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c7:28:96:47:cb:de:5f:f3:a2:0f:ae:6f:62:0e:34:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee4d3037960ed19c079e3e21e1fea6750c0c45be
        Validity
            Not Before: May 13 01:00:47 2025 GMT
            Not After : May 14 01:00:47 2025 GMT
        Subject: CN=a8739b83e7fbc8c145595ccd01f21d9ee7fdfc50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6b:d0:05:1a:bb:7b:02:10:c9:82:fb:fe:74:
                    a9:94:16:23:79:09:eb:7e:5e:4e:cc:e8:6a:fb:17:
                    0b:6e:b8:a7:f1:b8:9c:cb:ce:79:33:95:a3:6d:c9:
                    f8:f3:ff:dd:13:48:c4:c1:3a:56:69:97:6b:86:cb:
                    c5:1a:29:8b:2c:44:54:cb:c8:84:64:0f:14:1d:3a:
                    8a:ed:fc:70:cd:d0:14:da:fe:34:df:db:ef:8f:70:
                    77:b1:64:07:1a:ad:85:f4:38:13:e1:da:95:2c:94:
                    de:e4:2e:fa:61:b0:fd:de:d8:34:15:ce:b4:22:d2:
                    db:7b:01:f9:a9:43:de:53:f2:6c:a0:24:5b:40:ae:
                    15:6f:c8:5f:ec:b7:b8:48:ae:7d:7f:f7:dc:2d:76:
                    a4:9c:e3:a8:c2:a1:63:fa:0b:00:7d:b7:52:64:a3:
                    78:2a:d1:d1:aa:27:42:3c:f9:af:21:76:92:b9:3c:
                    c0:6a:21:c9:fa:ea:8a:7c:9a:a4:ab:a5:30:65:ef:
                    90:e5:2d:e7:90:5d:ee:99:ef:ae:b9:30:d6:72:da:
                    8f:ef:00:54:1f:4c:1d:76:3a:ff:a5:66:79:cd:87:
                    db:95:9e:fc:70:b0:81:b7:bd:09:01:5d:ca:5f:8c:
                    52:52:42:31:14:ae:3a:cc:e8:60:e2:e6:f1:7f:7c:
                    d7:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:73:9B:83:E7:FB:C8:C1:45:59:5C:CD:01:F2:1D:9E:E7:FD:FC:50
            X509v3 Authority Key Identifier:
                keyid:EE:4D:30:37:96:0E:D1:9C:07:9E:3E:21:E1:FE:A6:75:0C:0C:45:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/166ece-0624-4070-88d0-1ad23d105ac9/1/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/166ece-0624-4070-88d0-1ad23d105ac9/1/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:be:d7:cb:6c:84:0b:84:88:a3:d8:b3:bf:23:ce:26:f5:95:
         63:01:9b:19:02:1b:32:b9:16:c5:0f:e6:51:ad:aa:80:b8:c3:
         45:df:fc:2b:0c:0c:0e:fa:05:e5:26:a9:c8:d7:cb:44:3d:2e:
         29:bb:e8:40:ba:5d:89:82:f3:d2:10:2b:b6:24:ac:43:83:c1:
         92:ff:61:96:ae:e6:23:8b:ef:ff:e9:0c:e9:93:16:a7:a1:81:
         48:7b:f7:e2:ce:bd:8e:92:e7:6b:42:94:dd:96:4e:b8:24:33:
         c2:d6:97:2e:4e:6f:e3:78:7b:fe:fa:db:f2:36:70:7a:22:a1:
         29:91:74:78:5a:70:d7:12:24:5f:8a:e9:e2:d4:00:57:ea:f5:
         41:ed:0e:4c:00:a2:f9:1c:b4:81:60:b0:d8:22:60:01:8e:cb:
         86:0c:97:a5:96:1e:d0:0d:fb:98:cb:d4:31:94:a7:4a:df:5a:
         99:36:28:20:98:d6:b9:15:92:90:e5:6a:b3:b8:a5:d2:d7:6a:
         e7:7d:4a:ec:69:8a:a3:bd:2e:ff:27:0c:69:43:d7:46:51:9a:
         50:e1:21:78:fb:4f:11:60:c8:26:04:ca:b0:0b:99:29:24:a9:
         39:d7:b1:22:e4:92:e3:09:ad:1b:a5:38:2c:47:f2:06:4e:95:
         42:3e:24:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 10:07:50 2025 by rpki-client