Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/0e488f-180d-4c8a-a452-4c74bb59c594/1/74RV1AwuPbyyREb8yXoJ7Uut7cM.mft
File:                     74RV1AwuPbyyREb8yXoJ7Uut7cM.mft (raw, json)
Hash identifier:          fRWkirRjNGs1lWHbxfG0mgtFLRSifj4L2iUSmdrHWJQ=
Subject key identifier:   B6:BF:16:FF:19:64:F3:52:0C:D2:09:ED:3D:6F:61:A0:E3:78:E1:9C
Authority key identifier: EF:84:55:D4:0C:2E:3D:BC:B2:44:46:FC:C9:7A:09:ED:4B:AD:ED:C3
Certificate issuer:       /CN=ef8455d40c2e3dbcb24446fcc97a09ed4badedc3
Certificate serial:       0196BD129372E5239649C2605E44C2E55765
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/74RV1AwuPbyyREb8yXoJ7Uut7cM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/0e488f-180d-4c8a-a452-4c74bb59c594/1/74RV1AwuPbyyREb8yXoJ7Uut7cM.mft
Manifest number:          0239
Signing time:             Sun 11 May 2025 02:00:33 +0000
Manifest this update:     Sun 11 May 2025 02:00:33 +0000
Manifest next update:     Mon 12 May 2025 02:00:33 +0000
Files and hashes:         1: 74RV1AwuPbyyREb8yXoJ7Uut7cM.crl (hash: O5zeXXdPdf2w0UyzYrlBhfOSSrzycwtn5ePY+RmyhMw=)
                          2: skrjh8vU8jaJCC6pww50--Gwi_E.roa (hash: IBLvSAtT1vJYWWr7WSZngELwsQVmN4u8iMon5vqo4Fs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/0e488f-180d-4c8a-a452-4c74bb59c594/1/74RV1AwuPbyyREb8yXoJ7Uut7cM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/0e488f-180d-4c8a-a452-4c74bb59c594/1/74RV1AwuPbyyREb8yXoJ7Uut7cM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/74RV1AwuPbyyREb8yXoJ7Uut7cM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bd:12:93:72:e5:23:96:49:c2:60:5e:44:c2:e5:57:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef8455d40c2e3dbcb24446fcc97a09ed4badedc3
        Validity
            Not Before: May 11 02:00:33 2025 GMT
            Not After : May 12 02:00:33 2025 GMT
        Subject: CN=b6bf16ff1964f3520cd209ed3d6f61a0e378e19c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c3:24:7c:5c:74:d5:26:73:02:8a:ee:ea:1b:
                    c0:fb:06:bb:a7:54:1b:51:e9:a2:49:4f:cb:61:84:
                    3a:cb:1a:7b:74:2f:57:f6:81:f0:04:ff:8f:9b:25:
                    51:1f:15:26:b6:2a:d2:ad:26:60:eb:bf:76:12:c6:
                    1d:be:fb:45:5e:9e:05:2f:2c:5d:84:7f:09:59:b1:
                    51:b8:ad:39:7a:f2:32:e7:15:bd:22:be:93:df:83:
                    ab:c2:fa:49:b4:0b:52:b8:d5:48:fc:c6:12:60:31:
                    4d:f8:e9:73:77:f6:e4:ff:23:be:38:d8:16:d5:9b:
                    10:fc:1e:e0:41:5c:df:36:6a:2c:45:23:8e:b7:5b:
                    93:ca:42:08:20:77:da:e7:d8:ae:fb:10:03:c4:6d:
                    03:15:bc:79:c3:44:9a:45:84:0a:94:83:c5:02:14:
                    f3:2c:7d:64:ac:41:2b:0f:cb:53:ce:79:b0:51:9a:
                    32:15:a9:31:b8:19:ed:31:a4:89:b0:63:65:ff:e9:
                    60:1e:9d:8d:a6:a3:e5:c9:c7:4d:b8:50:27:ff:e3:
                    ee:dc:64:53:93:52:a1:fc:04:82:f4:bb:18:1c:26:
                    fa:48:f6:e1:d2:8e:ec:78:6c:3f:6d:71:02:04:5a:
                    91:e5:46:ff:d1:0a:b7:55:8a:93:95:43:82:25:6e:
                    bb:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:BF:16:FF:19:64:F3:52:0C:D2:09:ED:3D:6F:61:A0:E3:78:E1:9C
            X509v3 Authority Key Identifier:
                keyid:EF:84:55:D4:0C:2E:3D:BC:B2:44:46:FC:C9:7A:09:ED:4B:AD:ED:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/74RV1AwuPbyyREb8yXoJ7Uut7cM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0e488f-180d-4c8a-a452-4c74bb59c594/1/74RV1AwuPbyyREb8yXoJ7Uut7cM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0e488f-180d-4c8a-a452-4c74bb59c594/1/74RV1AwuPbyyREb8yXoJ7Uut7cM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:f5:99:d1:e1:f5:36:10:51:b9:3a:60:7f:21:08:5b:8d:69:
         fa:a4:7f:62:8f:ed:52:03:be:06:ee:58:d6:68:1b:80:4a:93:
         89:c4:4e:f3:cd:2b:55:9c:0d:ff:17:55:02:60:68:f5:40:ac:
         d3:36:9c:79:55:46:6d:58:3a:f2:21:d1:b4:1d:ff:8e:08:66:
         7e:91:84:03:96:5b:27:56:8c:d4:27:ea:ce:21:c8:00:dc:38:
         a8:c4:89:1c:db:dc:85:8c:1b:21:57:bc:ee:e7:bd:38:33:ad:
         1a:b8:3b:65:00:0b:9c:ab:2b:ce:2e:0a:ff:de:07:de:7b:4e:
         7c:f6:50:ba:bb:30:2e:22:3e:4a:cc:d5:0a:f3:2e:6b:ac:d3:
         98:1b:b1:fc:a5:42:6e:24:77:32:61:f7:9a:28:67:54:93:40:
         43:8a:e0:38:95:41:24:38:d3:aa:df:c0:f5:4d:73:75:3a:a0:
         98:bc:36:c7:24:d6:30:40:bf:98:65:43:ae:92:b2:9e:60:87:
         75:1d:cb:31:b4:09:ea:41:19:0a:19:5d:2f:f6:a1:15:60:aa:
         34:b6:48:d1:15:34:4d:8f:41:2a:4d:50:b5:c0:8f:dd:e6:52:
         a6:91:34:30:c7:8b:29:d0:15:4e:4d:02:38:28:5b:6a:34:0c:
         05:07:5f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:49:55 2025 by rpki-client