Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/d8aca2-4a8f-41f1-bd9e-7eab0485d34d/1/eS7-37uW3KrRVl0hv0qoVnsLZJ8.mft
File:                     eS7-37uW3KrRVl0hv0qoVnsLZJ8.mft (raw, json)
Hash identifier:          aevp+/sepiyoZcKDZfz5bag97xMoa6yKvWm6FQ//NK8=
Subject key identifier:   D6:EE:7C:83:6D:8E:11:E6:66:0E:C1:AA:BA:0D:EF:A0:8F:8B:66:19
Authority key identifier: 79:2E:FE:DF:BB:96:DC:AA:D1:56:5D:21:BF:4A:A8:56:7B:0B:64:9F
Certificate issuer:       /CN=792efedfbb96dcaad1565d21bf4aa8567b0b649f
Certificate serial:       01969D19B0C0200545210C3751A5B79682E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eS7-37uW3KrRVl0hv0qoVnsLZJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/d8aca2-4a8f-41f1-bd9e-7eab0485d34d/1/eS7-37uW3KrRVl0hv0qoVnsLZJ8.mft
Manifest number:          1520
Signing time:             Sun 04 May 2025 21:00:28 +0000
Manifest this update:     Sun 04 May 2025 21:00:28 +0000
Manifest next update:     Mon 05 May 2025 21:00:28 +0000
Files and hashes:         1: eS7-37uW3KrRVl0hv0qoVnsLZJ8.crl (hash: 3gG4E+GBcZvA0KVwcfh7YZETOga0Vp9uEvWGxngrbDs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/d8aca2-4a8f-41f1-bd9e-7eab0485d34d/1/eS7-37uW3KrRVl0hv0qoVnsLZJ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/d8aca2-4a8f-41f1-bd9e-7eab0485d34d/1/eS7-37uW3KrRVl0hv0qoVnsLZJ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eS7-37uW3KrRVl0hv0qoVnsLZJ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 May 2025 21:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9d:19:b0:c0:20:05:45:21:0c:37:51:a5:b7:96:82:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=792efedfbb96dcaad1565d21bf4aa8567b0b649f
        Validity
            Not Before: May  4 21:00:28 2025 GMT
            Not After : May  5 21:00:28 2025 GMT
        Subject: CN=d6ee7c836d8e11e6660ec1aaba0defa08f8b6619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:28:a5:bc:0b:f9:03:4d:3b:ba:8e:bd:94:67:
                    1d:91:a0:1d:3f:b7:ca:20:2c:5f:9d:03:d1:a9:12:
                    5f:90:c3:04:02:bd:2d:ae:02:1d:6f:2c:63:3e:02:
                    ae:12:3a:09:a5:29:cb:92:79:76:04:5d:5f:1c:26:
                    9f:6f:16:05:57:c5:4f:85:05:b7:be:36:06:be:e3:
                    11:8a:3a:da:20:77:20:d6:af:f6:80:9d:3a:24:ce:
                    33:a8:8c:23:85:f9:c3:fa:49:43:76:b9:6d:0f:b2:
                    68:7d:db:24:87:35:fa:28:23:14:19:5c:12:33:8f:
                    20:22:82:41:b3:56:36:e9:90:18:be:3b:a1:6c:61:
                    94:b5:e7:47:ae:bf:7d:7d:67:bb:fd:7d:e4:68:52:
                    7f:13:e4:29:14:f4:10:ba:44:a3:3d:b0:33:ed:4f:
                    68:e5:18:0c:05:5a:54:74:f3:6c:3e:95:73:19:d1:
                    e2:37:44:23:d2:9d:60:c1:6d:c6:7b:07:9d:3f:db:
                    06:a4:c2:a2:33:50:37:1d:4f:ab:34:55:d1:4c:65:
                    19:84:ba:32:db:2f:5b:0b:01:a1:81:e4:07:d1:99:
                    fd:ca:73:7b:9a:20:fb:89:bf:81:1a:ee:be:72:7c:
                    72:09:91:d3:3d:80:1f:18:33:ef:62:9f:0a:b6:20:
                    2d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:EE:7C:83:6D:8E:11:E6:66:0E:C1:AA:BA:0D:EF:A0:8F:8B:66:19
            X509v3 Authority Key Identifier:
                keyid:79:2E:FE:DF:BB:96:DC:AA:D1:56:5D:21:BF:4A:A8:56:7B:0B:64:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eS7-37uW3KrRVl0hv0qoVnsLZJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d8aca2-4a8f-41f1-bd9e-7eab0485d34d/1/eS7-37uW3KrRVl0hv0qoVnsLZJ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d8aca2-4a8f-41f1-bd9e-7eab0485d34d/1/eS7-37uW3KrRVl0hv0qoVnsLZJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:74:b7:9d:bb:25:c3:e0:fb:96:c7:49:fa:54:33:ba:55:71:
         e8:5d:57:34:fa:18:17:0c:2b:2e:88:01:d7:18:bc:36:01:dc:
         d2:68:97:75:ab:72:34:84:30:a7:00:11:7b:60:38:e0:8a:23:
         f7:19:0f:d7:0f:4d:05:90:50:55:14:ba:26:3d:13:5d:ad:cf:
         d9:3e:4c:af:0a:a4:5a:13:b4:56:aa:2e:b9:43:cb:2f:bc:44:
         fe:68:64:dd:38:be:de:33:a3:43:94:c1:58:93:a3:65:f3:ca:
         26:f0:50:d2:a0:65:da:36:fb:f1:97:20:32:cb:2d:bd:69:b1:
         0c:99:01:69:bd:5e:ba:ab:55:49:b8:37:c5:24:cc:0e:70:60:
         bd:65:f5:2e:44:1b:49:88:5b:b1:05:a1:78:43:7e:5f:f6:e5:
         18:81:72:cf:9c:ba:4a:11:51:59:6e:92:a9:58:a9:80:e9:f9:
         64:62:67:15:d2:b0:76:8a:c9:8c:8f:71:ec:aa:a9:ba:d5:df:
         99:94:2a:e6:65:86:8f:6f:2e:0c:e2:4a:41:5e:1f:98:b6:6e:
         94:d0:9b:79:fc:2a:77:4a:9b:14:02:d4:5b:d6:5a:d2:94:c6:
         ec:c7:cd:db:77:f0:d6:07:21:82:28:24:bf:0b:8a:4c:1a:a3:
         19:53:2d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 05:35:19 2025 by rpki-client