Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/16e2aa-ddbd-4ee1-ae60-08bc640aed67/1/tWqJV8zDCqTsLUeOU_OHJsmVWjE.mft
File:                     tWqJV8zDCqTsLUeOU_OHJsmVWjE.mft (raw, json)
Hash identifier:          vwyH61ucucTLaWULX9TOknf8ZMb/DBsew6lsoYajTmg=
Subject key identifier:   83:58:71:CF:2A:33:2C:DB:01:87:C9:23:84:E3:EC:4F:4B:DE:EE:DA
Authority key identifier: B5:6A:89:57:CC:C3:0A:A4:EC:2D:47:8E:53:F3:87:26:C9:95:5A:31
Certificate issuer:       /CN=b56a8957ccc30aa4ec2d478e53f38726c9955a31
Certificate serial:       01969E9AB537AEE08FAC296038301F4F1299
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tWqJV8zDCqTsLUeOU_OHJsmVWjE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/16e2aa-ddbd-4ee1-ae60-08bc640aed67/1/tWqJV8zDCqTsLUeOU_OHJsmVWjE.mft
Manifest number:          151E
Signing time:             Mon 05 May 2025 04:01:01 +0000
Manifest this update:     Mon 05 May 2025 04:01:01 +0000
Manifest next update:     Tue 06 May 2025 04:01:01 +0000
Files and hashes:         1: tWqJV8zDCqTsLUeOU_OHJsmVWjE.crl (hash: RcaNibfbYSdT9fdh6yqvDJq9Cx9trGE9JCy4L740w1k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/16e2aa-ddbd-4ee1-ae60-08bc640aed67/1/tWqJV8zDCqTsLUeOU_OHJsmVWjE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/16e2aa-ddbd-4ee1-ae60-08bc640aed67/1/tWqJV8zDCqTsLUeOU_OHJsmVWjE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tWqJV8zDCqTsLUeOU_OHJsmVWjE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9e:9a:b5:37:ae:e0:8f:ac:29:60:38:30:1f:4f:12:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56a8957ccc30aa4ec2d478e53f38726c9955a31
        Validity
            Not Before: May  5 04:01:01 2025 GMT
            Not After : May  6 04:01:01 2025 GMT
        Subject: CN=835871cf2a332cdb0187c92384e3ec4f4bdeeeda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2e:8c:86:7f:13:b6:d2:6c:1e:8f:ad:c4:d0:
                    1e:4b:fd:80:83:2a:da:b9:5d:b7:78:eb:b3:22:81:
                    30:51:14:48:46:c3:c0:92:e5:e0:4a:db:45:f6:88:
                    8e:44:67:de:d4:7a:da:4b:28:aa:21:63:a5:2a:f3:
                    72:6f:c6:de:6f:0a:b6:61:b9:71:c7:c3:a4:6f:a6:
                    3d:1b:d3:06:af:8d:72:cd:cf:d7:02:ee:be:11:76:
                    4f:eb:6e:54:d9:85:8e:df:3b:7c:59:5b:12:1e:18:
                    8e:e7:aa:ee:20:45:ea:6f:3d:c8:05:29:e8:b0:6b:
                    ba:21:de:ae:7f:c0:03:6c:56:f0:45:4a:be:73:51:
                    88:14:91:12:0f:8d:a9:ba:a6:66:5e:f6:b5:b7:27:
                    d9:0c:c9:8d:ed:c0:61:79:60:c4:72:f8:01:40:d1:
                    97:c8:95:f9:e0:59:e9:46:b3:9c:9c:3c:e3:0a:08:
                    07:da:fb:ae:21:a1:aa:c8:c7:72:fe:0e:34:2f:86:
                    14:b5:82:a5:c5:d9:59:22:af:e8:3b:b1:98:8b:37:
                    9a:c1:8c:49:f0:d2:e4:d8:ca:fc:36:83:55:41:b8:
                    79:6d:74:a1:a2:4c:e3:6d:47:68:85:19:d5:85:ce:
                    6d:e9:50:18:2f:f3:7e:3e:df:63:75:91:ae:30:99:
                    42:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:58:71:CF:2A:33:2C:DB:01:87:C9:23:84:E3:EC:4F:4B:DE:EE:DA
            X509v3 Authority Key Identifier:
                keyid:B5:6A:89:57:CC:C3:0A:A4:EC:2D:47:8E:53:F3:87:26:C9:95:5A:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWqJV8zDCqTsLUeOU_OHJsmVWjE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/16e2aa-ddbd-4ee1-ae60-08bc640aed67/1/tWqJV8zDCqTsLUeOU_OHJsmVWjE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/16e2aa-ddbd-4ee1-ae60-08bc640aed67/1/tWqJV8zDCqTsLUeOU_OHJsmVWjE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:42:00:80:d8:d3:32:37:68:6e:f8:49:8d:85:4d:a6:5c:24:
         d0:85:de:76:10:33:95:81:14:75:42:19:6f:59:c4:c3:6b:fd:
         c9:da:a7:d5:f5:f6:d7:04:3c:db:2b:8a:5f:3f:45:eb:f9:b5:
         ef:ff:57:cf:79:3a:1f:15:62:5d:9b:2e:14:49:97:e5:2d:46:
         4d:34:09:08:52:12:53:c7:0a:d6:dc:ea:3b:d9:ed:7b:b4:1c:
         75:f3:b7:d6:44:57:43:44:91:bb:f6:90:84:ef:f3:4d:13:1f:
         2a:27:3b:ac:65:db:1b:32:05:f5:a2:9e:4e:60:9b:ab:bc:12:
         e8:49:ba:10:61:c6:cf:31:e0:6d:2f:6a:f9:9e:3c:cd:85:bc:
         ca:4d:9d:9e:d0:34:8d:29:23:38:ac:0e:ab:9c:88:a8:6d:de:
         bd:5b:a0:be:78:a3:68:0d:ec:08:17:de:2d:64:bc:95:0f:5d:
         e8:6e:3a:60:df:26:26:66:ba:a4:a9:b4:2d:d2:58:b8:82:66:
         4d:45:29:52:61:d1:d1:fe:a4:33:dd:5a:1e:4c:7a:de:32:6c:
         28:0a:c8:c6:61:09:eb:e8:11:ac:42:96:f1:9f:db:9c:a9:09:
         a3:e8:d4:ec:db:a4:67:93:4d:3d:a7:b1:39:86:e3:50:44:2f:
         4c:ef:95:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 08:43:43 2025 by rpki-client