Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft
File:                     fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft (raw, json)
Hash identifier:          uyL8kcv2/39CEmamVfeirfWOCYXQBW/YzGCj2AdmH7g=
Subject key identifier:   4C:56:2A:B1:F6:32:EE:A3:6C:27:4E:20:CA:2D:46:81:43:2B:7B:BE
Authority key identifier: 7E:4E:48:77:B4:64:E4:89:E8:E1:E6:1B:E5:7B:8B:BE:8E:50:E7:99
Certificate issuer:       /CN=7e4e4877b464e489e8e1e61be57b8bbe8e50e799
Certificate serial:       0196A12DCD79084826AF75FB7DF9F5A1FBE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft
Manifest number:          0730
Signing time:             Mon 05 May 2025 16:00:55 +0000
Manifest this update:     Mon 05 May 2025 16:00:55 +0000
Manifest next update:     Tue 06 May 2025 16:00:55 +0000
Files and hashes:         1: fk5Id7Rk5Ino4eYb5XuLvo5Q55k.crl (hash: hVvcBE4aCnvK0Kkr5PNia9Dp4fGmpkCg3GcebbX2v8c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a1:2d:cd:79:08:48:26:af:75:fb:7d:f9:f5:a1:fb:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e4e4877b464e489e8e1e61be57b8bbe8e50e799
        Validity
            Not Before: May  5 16:00:55 2025 GMT
            Not After : May  6 16:00:55 2025 GMT
        Subject: CN=4c562ab1f632eea36c274e20ca2d4681432b7bbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:49:64:b5:b3:0a:4e:88:2b:3a:2d:73:9e:05:
                    ed:5e:b5:8e:f9:cc:4e:a6:16:1c:d1:8a:ca:06:54:
                    86:c3:c0:b6:6b:71:38:24:f1:a3:88:26:a5:27:ef:
                    ad:e6:db:26:2b:13:89:c6:ed:3c:2b:e1:fb:c7:5d:
                    b1:f6:33:f0:ed:e6:79:11:d7:a2:8c:03:7e:28:16:
                    d9:e5:22:98:95:c8:8f:3d:75:9a:55:ca:93:d2:0e:
                    d6:d2:00:dc:bb:a8:15:29:6d:00:be:c6:92:53:81:
                    af:cd:12:04:cf:84:20:d5:05:ff:f3:47:a7:96:31:
                    fb:98:0a:dd:c9:f7:c7:bc:39:7e:6c:8f:12:f7:92:
                    f6:2c:d6:e9:be:85:fa:d6:b4:8b:1b:fe:ea:fe:2e:
                    c8:49:ef:d9:be:fb:dd:14:13:53:65:a2:e9:62:f8:
                    3f:0d:8d:09:dd:1b:39:68:76:50:a2:6a:e4:6e:76:
                    b9:e7:42:9f:4f:96:7e:6d:5d:03:5d:6f:74:44:83:
                    98:13:5a:f4:fe:0b:62:74:b0:8b:ac:b3:cf:7d:fc:
                    79:c1:49:d6:78:ee:37:42:7e:d0:81:fb:19:ef:0e:
                    b6:7d:4f:01:68:a6:e9:11:04:00:69:e7:66:e3:53:
                    2b:a7:e9:16:ad:2c:3d:1e:3d:bd:0b:e0:59:ea:ab:
                    4f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:56:2A:B1:F6:32:EE:A3:6C:27:4E:20:CA:2D:46:81:43:2B:7B:BE
            X509v3 Authority Key Identifier:
                keyid:7E:4E:48:77:B4:64:E4:89:E8:E1:E6:1B:E5:7B:8B:BE:8E:50:E7:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:cb:10:55:ef:7c:83:97:ca:c6:97:83:b0:a8:39:a9:5e:f8:
         ec:bf:eb:ce:d1:e6:89:d9:1e:0d:f3:0f:db:a7:04:75:3e:1e:
         d8:69:b5:2e:ba:f9:29:a4:df:45:9f:5c:2a:2f:d7:f1:7b:21:
         70:e6:67:4e:1d:74:58:05:df:f0:ec:f8:f1:e9:d8:b4:81:03:
         13:91:c9:63:58:b5:70:65:07:55:8f:ee:b2:be:e9:43:cf:64:
         83:b7:3a:5f:21:b4:45:a7:70:06:74:3b:ec:00:f4:2a:5b:ed:
         6e:d0:7b:2d:22:c3:1d:21:e4:f0:36:64:87:12:b6:cd:43:51:
         c5:0c:d1:c9:c3:07:d1:8b:d3:72:4e:b1:4d:70:1f:e3:b1:e2:
         c8:af:7f:c3:04:ae:ff:9a:22:34:18:da:a5:b9:48:fe:d1:62:
         d9:37:47:bd:a7:62:d8:33:84:63:06:72:71:f5:25:90:18:3c:
         d5:d5:f5:76:27:93:94:c4:81:e3:a3:2e:d8:ab:8d:a7:51:93:
         a4:94:78:b0:ed:cc:3c:a0:ed:1c:75:96:11:34:0a:3a:e2:bb:
         27:10:e8:10:41:8e:a5:45:2b:79:d3:5b:55:4c:82:36:d8:5b:
         56:1e:79:01:8b:ad:4d:ac:7a:67:d1:af:7b:cf:0e:90:ef:bd:
         a3:e4:46:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 18:51:54 2025 by rpki-client