Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.mft
File:                     nVK4OxL6igcTLMgIM6ED4J2L0E8.mft (raw, json)
Hash identifier:          9Akoj0oxc6YA6BBuwVlFbTYgIyAOmKUTaaYTeQV+e4g=
Subject key identifier:   89:B3:12:49:C2:94:E0:84:78:3D:F8:DE:88:53:20:36:C4:22:9E:BD
Authority key identifier: 9D:52:B8:3B:12:FA:8A:07:13:2C:C8:08:33:A1:03:E0:9D:8B:D0:4F
Certificate issuer:       /CN=9d52b83b12fa8a07132cc80833a103e09d8bd04f
Certificate serial:       0196C0B853F8FD6378ECE05C0A0CDD4C9D34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nVK4OxL6igcTLMgIM6ED4J2L0E8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.mft
Manifest number:          022D
Signing time:             Sun 11 May 2025 19:00:27 +0000
Manifest this update:     Sun 11 May 2025 19:00:27 +0000
Manifest next update:     Mon 12 May 2025 19:00:27 +0000
Files and hashes:         1: nVK4OxL6igcTLMgIM6ED4J2L0E8.crl (hash: BQmp2RNYXbW2tmrje4X91r/sOqI3vqDzYOCY1dcrEuo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nVK4OxL6igcTLMgIM6ED4J2L0E8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c0:b8:53:f8:fd:63:78:ec:e0:5c:0a:0c:dd:4c:9d:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d52b83b12fa8a07132cc80833a103e09d8bd04f
        Validity
            Not Before: May 11 19:00:27 2025 GMT
            Not After : May 12 19:00:27 2025 GMT
        Subject: CN=89b31249c294e084783df8de88532036c4229ebd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:72:db:05:99:ba:d0:9f:ed:9b:fd:95:b5:94:
                    97:9f:98:6d:8e:f8:07:7e:91:a7:43:b3:c2:e8:b0:
                    96:b9:c4:a1:29:65:ab:c0:ab:c1:1c:a4:94:06:7e:
                    17:a5:37:b8:f5:6b:8b:5c:d4:8c:76:c9:16:96:1d:
                    29:8d:9d:e7:53:71:44:b6:34:3b:56:cc:71:e9:90:
                    d7:84:8f:11:6e:96:26:88:88:e1:ee:a4:94:10:db:
                    fa:a0:d0:3e:88:58:67:79:7c:7d:7c:d3:8e:e6:92:
                    c2:c3:4b:29:39:89:36:c1:56:e1:d8:f3:90:c4:94:
                    47:5f:a1:06:22:75:d2:a8:52:6e:25:e3:a2:bf:47:
                    26:af:29:15:bf:f9:08:e5:00:54:c0:60:15:77:0a:
                    88:4b:80:66:55:07:1d:05:76:2a:af:68:e0:b4:41:
                    b7:0d:4a:07:d4:82:8d:22:4e:93:a3:1b:0d:ed:d7:
                    fd:04:e4:2e:ba:34:5a:1c:5b:f8:d3:ed:d6:bb:53:
                    eb:73:a0:e8:ac:10:18:58:cd:f1:c2:fd:5d:a2:08:
                    1f:dd:63:7b:7c:a2:10:1c:43:6b:3e:e5:b2:cd:b3:
                    a3:3e:9d:95:4d:29:a9:35:54:1a:5e:d7:cc:09:1d:
                    a7:15:08:5d:93:3c:d0:95:21:24:12:19:e0:0e:0c:
                    84:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:B3:12:49:C2:94:E0:84:78:3D:F8:DE:88:53:20:36:C4:22:9E:BD
            X509v3 Authority Key Identifier:
                keyid:9D:52:B8:3B:12:FA:8A:07:13:2C:C8:08:33:A1:03:E0:9D:8B:D0:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVK4OxL6igcTLMgIM6ED4J2L0E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:8b:3e:55:9c:b7:e6:de:21:a9:04:4f:64:3b:76:7b:9b:9d:
         13:ae:1d:c5:19:76:e8:14:0d:f9:4e:24:cf:84:00:28:4f:77:
         28:3a:89:1a:3d:d3:12:df:49:91:38:36:07:3a:8c:56:6b:d6:
         21:67:6d:36:44:75:26:c9:6d:b9:8b:0b:21:14:f9:e5:36:da:
         c1:26:c3:74:fa:f5:72:f8:dc:8f:58:00:22:91:44:2b:3d:a0:
         9f:c1:b3:e6:3b:a5:06:b1:72:f3:56:b1:2a:2e:e0:ce:08:c6:
         6c:98:9d:5b:5b:b2:cd:a1:9f:8d:87:78:7b:ad:22:78:d8:ab:
         09:13:c0:7e:1e:4b:79:01:43:54:43:75:2e:e2:65:c5:19:5e:
         97:cf:85:14:a3:12:2c:e4:f8:9c:21:7a:b2:0d:42:38:d1:ec:
         4f:cc:05:ce:22:b4:c5:d7:25:d5:2d:ab:88:4a:26:79:63:fa:
         a5:40:ae:4e:95:42:06:35:16:45:68:82:06:ed:79:5c:7c:73:
         6f:d4:5b:a3:de:11:b6:a2:e9:3f:f7:86:14:f6:61:df:41:ad:
         06:3f:5d:ad:91:a4:c9:a4:86:13:90:74:12:f4:59:4c:76:f8:
         0e:1c:72:15:a2:2e:88:98:60:32:66:bb:60:e4:95:04:2e:62:
         25:7b:77:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 00:16:58 2025 by rpki-client