Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/24dd54-e910-4e4b-a921-ae8d84003ff1/1/xxXNOs87ay1XvDSFZ1gnU8nMCTM.mft
File:                     xxXNOs87ay1XvDSFZ1gnU8nMCTM.mft (raw, json)
Hash identifier:          ex/Wc0mBS4NHPlE/ASRPDxGuThEw1YGcnr9Bf8hbNtc=
Subject key identifier:   EC:1A:1E:36:E2:70:7C:5A:88:2E:D6:17:52:9D:8D:EB:ED:21:6C:3D
Authority key identifier: C7:15:CD:3A:CF:3B:6B:2D:57:BC:34:85:67:58:27:53:C9:CC:09:33
Certificate issuer:       /CN=c715cd3acf3b6b2d57bc348567582753c9cc0933
Certificate serial:       0196C5A79271AD794710C87AB3422286DF7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xxXNOs87ay1XvDSFZ1gnU8nMCTM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/24dd54-e910-4e4b-a921-ae8d84003ff1/1/xxXNOs87ay1XvDSFZ1gnU8nMCTM.mft
Manifest number:          1535
Signing time:             Mon 12 May 2025 18:00:15 +0000
Manifest this update:     Mon 12 May 2025 18:00:15 +0000
Manifest next update:     Tue 13 May 2025 18:00:15 +0000
Files and hashes:         1: xxXNOs87ay1XvDSFZ1gnU8nMCTM.crl (hash: NIDGloQYA8WiX4Xn/+8Catd7Smt1okV/Vg/ODIHCLlE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/24dd54-e910-4e4b-a921-ae8d84003ff1/1/xxXNOs87ay1XvDSFZ1gnU8nMCTM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/24dd54-e910-4e4b-a921-ae8d84003ff1/1/xxXNOs87ay1XvDSFZ1gnU8nMCTM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xxXNOs87ay1XvDSFZ1gnU8nMCTM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 14:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c5:a7:92:71:ad:79:47:10:c8:7a:b3:42:22:86:df:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c715cd3acf3b6b2d57bc348567582753c9cc0933
        Validity
            Not Before: May 12 18:00:15 2025 GMT
            Not After : May 13 18:00:15 2025 GMT
        Subject: CN=ec1a1e36e2707c5a882ed617529d8debed216c3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1b:f4:ca:65:79:80:8e:b2:b3:83:16:62:74:
                    40:6f:ad:ad:32:89:88:47:42:9c:4c:a7:b6:25:48:
                    a7:67:24:a3:ba:dc:ac:bf:34:31:a9:b5:77:80:f9:
                    f5:8f:ee:e8:28:1c:10:94:e7:da:b9:5c:64:5a:3e:
                    00:f3:f1:84:6d:f8:9c:c5:0d:ea:53:fc:63:d3:a4:
                    17:77:c5:0b:af:a1:46:d3:53:d0:50:f8:07:ab:b3:
                    30:e8:6e:31:8b:99:8f:37:0b:23:be:7b:18:87:b3:
                    3f:d1:59:79:73:7e:1f:82:fa:df:70:a7:93:14:e8:
                    d1:b3:b9:52:07:ef:ea:86:70:91:d5:d5:d3:08:59:
                    21:63:09:a8:9a:7b:b5:18:cd:d4:35:6a:ee:79:29:
                    7e:a7:57:81:dd:64:28:22:bd:14:ac:80:38:33:22:
                    98:9c:dc:c0:fa:14:ea:a8:ec:c7:17:7a:3f:38:7d:
                    a5:8f:df:5c:6c:70:00:1d:40:89:87:0b:6c:69:6f:
                    1a:0a:23:8d:10:48:28:a9:44:48:ba:08:08:43:d9:
                    17:6b:8d:2b:a1:60:eb:2a:43:a2:fb:b8:57:99:f8:
                    2b:19:f3:43:3a:0c:cd:87:7c:e3:ee:06:d6:49:03:
                    10:dd:c0:b0:52:f2:01:87:e1:52:f1:f8:16:27:c6:
                    38:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:1A:1E:36:E2:70:7C:5A:88:2E:D6:17:52:9D:8D:EB:ED:21:6C:3D
            X509v3 Authority Key Identifier:
                keyid:C7:15:CD:3A:CF:3B:6B:2D:57:BC:34:85:67:58:27:53:C9:CC:09:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xxXNOs87ay1XvDSFZ1gnU8nMCTM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/24dd54-e910-4e4b-a921-ae8d84003ff1/1/xxXNOs87ay1XvDSFZ1gnU8nMCTM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/24dd54-e910-4e4b-a921-ae8d84003ff1/1/xxXNOs87ay1XvDSFZ1gnU8nMCTM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:06:bf:2e:7f:1b:fe:e2:06:fd:07:fe:b7:7f:35:fd:02:d6:
         b4:74:36:2d:e4:5a:17:6c:75:75:18:d8:e3:53:f6:7b:8e:a9:
         4f:8d:c5:b6:64:67:56:1e:72:5a:c0:b5:f3:2b:d7:07:da:bd:
         11:65:0f:66:86:a0:25:b9:ed:fc:38:f1:8f:60:b0:67:0c:2d:
         f1:d2:09:3c:f5:47:8f:bd:58:73:a3:76:05:f7:db:f2:b4:c0:
         a5:46:94:dd:fa:6e:1e:99:65:fc:7e:f9:9b:cd:25:f1:74:48:
         16:aa:87:10:49:14:f5:1a:b3:12:4e:c2:cd:e2:a4:37:ee:ad:
         b4:75:8e:c1:16:1a:a8:3d:84:68:60:d8:70:49:fc:9d:38:79:
         51:41:73:a7:b2:31:3b:d2:ff:01:6b:30:96:13:0b:55:96:58:
         99:d8:dc:62:17:bd:b1:d7:d0:80:b9:b0:92:86:8c:2d:a8:43:
         b4:a3:19:1d:50:eb:ea:f9:98:07:21:ca:c4:b4:52:a9:cd:f7:
         31:01:e2:0a:c7:f4:cc:05:9c:12:2a:84:74:5b:cd:7f:90:d2:
         7d:9f:fe:d8:ac:02:2d:48:22:dd:4a:67:12:7c:d8:5f:a6:a5:
         4f:7e:f5:f7:e3:77:bf:db:97:ee:3f:fc:98:b3:80:6e:65:17:
         48:0f:32:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:08:05 2025 by rpki-client