Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/14b074-7d57-4616-a85e-880ab7948728/1/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.mft
File:                     Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.mft (raw, json)
Hash identifier:          rieXZ5QlTPGOuSZAmT4mDp4F5/7VEnB/sQb4E+n19b4=
Subject key identifier:   88:68:5C:D9:04:B4:CD:24:AD:5F:61:BF:2B:61:E2:C7:8A:0B:D7:1F
Authority key identifier: 26:7D:0C:C5:BD:86:D5:68:36:66:57:AE:F0:31:0D:49:3A:71:76:E4
Certificate issuer:       /CN=267d0cc5bd86d568366657aef0310d493a7176e4
Certificate serial:       0196C382A1AF4150980E00F128F211F9E7BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/14b074-7d57-4616-a85e-880ab7948728/1/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.mft
Manifest number:          1533
Signing time:             Mon 12 May 2025 08:00:40 +0000
Manifest this update:     Mon 12 May 2025 08:00:40 +0000
Manifest next update:     Tue 13 May 2025 08:00:40 +0000
Files and hashes:         1: Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.crl (hash: JtgFgmuqvaN3eD54XdgxrAGDwk3QbeKzECsR9s5tjdk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/14b074-7d57-4616-a85e-880ab7948728/1/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/14b074-7d57-4616-a85e-880ab7948728/1/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c3:82:a1:af:41:50:98:0e:00:f1:28:f2:11:f9:e7:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=267d0cc5bd86d568366657aef0310d493a7176e4
        Validity
            Not Before: May 12 08:00:40 2025 GMT
            Not After : May 13 08:00:40 2025 GMT
        Subject: CN=88685cd904b4cd24ad5f61bf2b61e2c78a0bd71f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7b:cc:84:8f:a2:4e:2d:62:89:ec:9b:45:a6:
                    4f:28:1d:02:9e:a1:c3:b0:17:aa:91:68:aa:49:30:
                    0e:6a:d8:60:31:48:3f:4e:1b:f0:72:83:46:ec:c4:
                    fa:d7:96:89:51:e8:63:7b:5d:4d:5d:50:3f:37:c6:
                    66:6a:66:ac:d6:c7:52:0e:e0:33:9f:ab:ba:a3:70:
                    b6:86:4a:08:34:64:f0:00:1b:2d:2f:c9:03:21:f8:
                    56:56:71:de:f5:c4:4f:0d:2b:c0:28:9e:62:ba:e0:
                    9f:c1:42:f5:32:28:98:ea:cf:82:8c:d2:d5:16:2d:
                    ee:58:bf:38:73:7b:28:f3:a0:96:26:b8:d4:fd:0e:
                    24:b7:5e:9e:31:0f:d2:c1:a0:22:7c:d2:0f:45:8d:
                    08:aa:82:1b:c4:54:55:b3:63:c8:2a:53:72:9e:c6:
                    af:de:10:74:f6:74:c1:bf:fd:94:ff:eb:71:1e:c0:
                    b0:62:f5:e9:6e:b1:f7:fb:1a:c2:67:37:c7:a4:ef:
                    1e:cc:11:f6:a2:32:d7:c7:74:be:4b:db:e3:42:ea:
                    e4:51:11:5c:2a:d8:1f:a2:60:44:f2:be:64:00:6b:
                    bb:33:7a:67:a9:dd:aa:0a:54:6a:c7:5d:d1:00:c0:
                    d1:ab:12:a3:f3:58:ca:86:21:ab:ca:67:5d:fc:38:
                    33:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:68:5C:D9:04:B4:CD:24:AD:5F:61:BF:2B:61:E2:C7:8A:0B:D7:1F
            X509v3 Authority Key Identifier:
                keyid:26:7D:0C:C5:BD:86:D5:68:36:66:57:AE:F0:31:0D:49:3A:71:76:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/14b074-7d57-4616-a85e-880ab7948728/1/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/14b074-7d57-4616-a85e-880ab7948728/1/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:95:e7:a7:6d:a0:a7:93:b7:11:c7:0d:c2:c8:c0:08:b3:b4:
         79:0e:c6:e1:d9:3a:91:93:d0:d7:1a:84:46:c8:bf:9a:b6:37:
         cc:93:65:6b:ff:b3:c0:64:a4:b8:2f:5c:1c:d2:72:9a:f8:da:
         39:d1:e0:8d:d5:1c:a3:f0:59:f9:66:04:44:82:27:46:5e:70:
         43:31:3e:3c:92:64:09:64:5a:47:7a:1b:88:9b:01:f2:4f:91:
         a9:32:ae:55:71:94:b7:c2:45:c5:7a:04:aa:96:df:3e:45:4b:
         dd:db:6f:39:b4:91:a4:ea:4c:b8:f7:63:a1:9a:28:4d:c6:f4:
         bb:6a:fc:57:f7:46:c0:f6:76:32:cb:ea:a5:9d:fd:b7:84:94:
         e0:8f:22:74:54:5d:f3:ae:91:47:47:a2:0b:ee:cd:fa:b3:a5:
         cb:03:9a:72:1f:c8:e8:b5:bd:97:96:e4:31:86:0a:bf:68:73:
         65:f5:e7:42:97:8d:93:5c:ad:3b:df:92:24:0c:63:e1:c7:52:
         15:1c:0d:55:69:f8:b0:c5:e8:12:e3:c5:58:8b:7e:30:52:9e:
         d5:f5:be:1e:63:54:d0:fa:2e:3a:cb:c4:f4:59:27:30:c2:e3:
         d0:94:d1:d4:5f:69:b7:a1:2d:85:1b:c9:b0:39:a1:53:dc:d7:
         8f:ca:f3:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:46:35 2025 by rpki-client