Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.mft
File:                     CvFmObpIfvljxWzLMm8lCNGoPv0.mft (raw, json)
Hash identifier:          0r3y8atyu2E1+l7rQrLKnkWKhCl+tHAG52YV8ZStT9s=
Subject key identifier:   9C:5C:E8:15:68:47:A7:9F:A6:DF:9C:89:DD:8B:00:56:78:18:38:62
Authority key identifier: 0A:F1:66:39:BA:48:7E:F9:63:C5:6C:CB:32:6F:25:08:D1:A8:3E:FD
Certificate issuer:       /CN=0af16639ba487ef963c56ccb326f2508d1a83efd
Certificate serial:       0196A0890FB01CE1BE2BF6E849A403CABB65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CvFmObpIfvljxWzLMm8lCNGoPv0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.mft
Manifest number:          0814
Signing time:             Mon 05 May 2025 13:00:59 +0000
Manifest this update:     Mon 05 May 2025 13:00:59 +0000
Manifest next update:     Tue 06 May 2025 13:00:59 +0000
Files and hashes:         1: CvFmObpIfvljxWzLMm8lCNGoPv0.crl (hash: zAdMVJ178sqGCIrDWpjvIpATZdEcAJI7RnyqsuCHuKo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CvFmObpIfvljxWzLMm8lCNGoPv0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a0:89:0f:b0:1c:e1:be:2b:f6:e8:49:a4:03:ca:bb:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0af16639ba487ef963c56ccb326f2508d1a83efd
        Validity
            Not Before: May  5 13:00:59 2025 GMT
            Not After : May  6 13:00:59 2025 GMT
        Subject: CN=9c5ce8156847a79fa6df9c89dd8b005678183862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f7:0e:4d:92:7a:07:98:37:16:2a:83:24:be:
                    ec:34:24:01:c7:fd:4e:96:8d:2c:a4:5e:13:e5:7e:
                    9f:7e:5b:98:90:80:a2:55:e1:2f:d5:6d:ba:b4:50:
                    12:e5:05:da:09:ae:5f:49:fd:37:26:7b:16:70:86:
                    74:17:fa:df:89:77:d8:56:3c:0d:09:6a:b4:be:3c:
                    e7:07:a6:79:a8:9c:2a:80:eb:d3:88:1a:6b:f1:26:
                    b9:48:6f:25:ff:f5:75:0e:df:e3:bd:e7:93:0e:59:
                    53:57:e8:95:b6:9c:9f:b7:2e:0f:70:9b:8d:fa:43:
                    5b:ea:d3:61:68:41:95:f8:9d:43:82:17:92:ad:33:
                    74:35:12:10:82:7b:98:d5:d2:4f:49:dd:85:f2:9d:
                    be:43:f8:98:90:07:47:70:1f:1b:0f:50:12:ba:8d:
                    36:85:cc:51:08:75:52:f8:e6:8b:bc:07:6e:7f:70:
                    ee:0b:26:56:12:53:6f:a2:40:34:b1:20:fa:db:9e:
                    30:2b:a5:ba:db:23:76:1c:35:60:8f:7d:79:bf:de:
                    77:4f:31:04:27:64:e6:36:f7:f9:98:aa:23:35:f7:
                    6b:95:3b:38:18:91:48:ef:a2:d6:8e:09:8d:b1:56:
                    3a:97:91:d9:91:5f:c0:f8:e8:c4:90:2f:56:42:25:
                    8d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:5C:E8:15:68:47:A7:9F:A6:DF:9C:89:DD:8B:00:56:78:18:38:62
            X509v3 Authority Key Identifier:
                keyid:0A:F1:66:39:BA:48:7E:F9:63:C5:6C:CB:32:6F:25:08:D1:A8:3E:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvFmObpIfvljxWzLMm8lCNGoPv0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:43:26:44:e2:0b:1e:10:cf:51:16:ba:2b:aa:0c:34:35:ad:
         59:d3:fa:7a:c3:c1:e9:c1:97:d7:88:15:ba:75:45:c7:ed:77:
         64:5c:4f:bc:5b:d7:b0:33:00:5e:d0:d6:a6:21:fb:91:53:2d:
         aa:84:f0:b1:53:f3:6d:56:8b:f9:de:87:6a:bb:8a:05:26:da:
         14:6b:6f:da:3a:c5:df:75:ff:be:27:aa:02:3e:49:60:7d:6e:
         cb:fb:22:ab:10:a5:68:fc:03:02:7a:a3:da:d2:c5:e0:fe:07:
         e6:06:99:49:33:87:7d:23:2b:19:49:bf:b1:3d:ac:fc:37:54:
         46:8a:46:c9:7f:6b:8b:5f:c2:23:97:bf:7a:b4:bd:ac:a7:5a:
         15:35:3f:e2:f0:e8:e4:8f:17:69:a6:82:0e:49:dc:90:23:24:
         14:39:b6:06:9a:f4:8f:c7:84:0e:27:48:22:74:31:60:1c:a4:
         99:6f:5a:96:f5:cc:af:4c:49:a6:9e:67:67:ce:a5:cb:cd:86:
         a2:91:3e:0d:06:bd:d0:77:35:b3:bd:77:c9:04:11:0a:b5:34:
         f1:59:85:7e:dd:19:8e:7a:2c:58:11:aa:75:05:7a:99:64:6a:
         fb:db:3a:aa:86:97:8d:8f:f7:f1:39:6e:42:bf:8a:ef:f3:57:
         03:18:0f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 17:28:29 2025 by rpki-client