Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.mft
File:                     uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.mft (raw, json)
Hash identifier:          Zam1iZielaFcknu5geTGJOQAPv4JNsSxfDiwl7jvTww=
Subject key identifier:   07:FE:1C:2C:7B:26:80:40:B4:37:DE:81:EC:70:F6:2F:87:50:DA:FB
Authority key identifier: B8:4B:63:05:86:58:A5:9E:CB:BF:44:39:5B:F1:6F:78:0D:C9:29:CC
Certificate issuer:       /CN=b84b63058658a59ecbbf44395bf16f780dc929cc
Certificate serial:       0196CB7321E51A070A8B8638BF9A805A8E64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.mft
Manifest number:          1539
Signing time:             Tue 13 May 2025 21:00:42 +0000
Manifest this update:     Tue 13 May 2025 21:00:42 +0000
Manifest next update:     Wed 14 May 2025 21:00:42 +0000
Files and hashes:         1: uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.crl (hash: JY03pvxm0fqOeRIOOIaEY7EJwgCL2Tcz4cc/q4xnwaw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 21:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cb:73:21:e5:1a:07:0a:8b:86:38:bf:9a:80:5a:8e:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b84b63058658a59ecbbf44395bf16f780dc929cc
        Validity
            Not Before: May 13 21:00:42 2025 GMT
            Not After : May 14 21:00:42 2025 GMT
        Subject: CN=07fe1c2c7b268040b437de81ec70f62f8750dafb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:81:17:a3:74:ee:dd:76:c5:e5:ce:2e:78:46:
                    22:24:d2:35:41:8a:e1:8d:7b:5a:b2:25:97:b9:6e:
                    43:b4:8e:f4:6e:4f:a1:9b:21:69:fd:81:7e:8d:7f:
                    02:c5:aa:75:00:d5:f0:32:ba:00:d5:0a:f3:38:73:
                    1a:35:6d:72:07:6e:e5:a2:97:8b:96:0e:8d:46:ad:
                    a0:85:e2:99:ab:c0:9d:a2:9a:96:10:32:ef:4a:19:
                    42:b9:fd:70:42:63:07:5a:a4:aa:a2:f9:d2:36:fd:
                    1e:27:94:2f:b6:8a:66:5c:e6:a1:f7:3b:02:81:58:
                    80:75:43:6c:fb:1f:d3:04:c6:4e:4a:19:d9:52:60:
                    4a:13:39:1f:4c:65:00:19:87:8f:cd:97:f9:a0:06:
                    95:44:06:67:b0:4f:e3:5f:c4:ab:b6:91:00:ec:3a:
                    43:01:2b:05:48:73:83:36:a7:16:41:7e:12:ec:1e:
                    96:48:d3:11:bc:7d:e0:91:e0:10:d3:80:de:b2:20:
                    44:7c:97:50:ac:41:d9:9b:77:92:2b:6c:2f:5f:b0:
                    0d:6c:ad:d7:8b:1f:16:1e:23:6d:f9:ab:6f:d3:d5:
                    cb:7d:12:df:56:fa:fb:b4:6d:06:ea:14:80:ae:94:
                    2e:1f:da:68:6a:0f:ab:3b:51:47:52:5e:9d:1b:e7:
                    5b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:FE:1C:2C:7B:26:80:40:B4:37:DE:81:EC:70:F6:2F:87:50:DA:FB
            X509v3 Authority Key Identifier:
                keyid:B8:4B:63:05:86:58:A5:9E:CB:BF:44:39:5B:F1:6F:78:0D:C9:29:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:14:fe:d3:54:53:99:09:f5:c0:3a:8a:d8:e2:63:e4:cb:c9:
         f3:95:de:44:59:01:0f:06:09:d1:70:e0:a6:cb:32:24:3a:9f:
         c1:10:e6:15:45:ec:3f:c7:52:6a:a2:10:ee:39:70:4d:6e:0e:
         2b:9a:26:80:c7:29:71:b7:ae:cd:38:56:ce:57:4c:23:75:cf:
         0d:ac:13:96:91:c8:8e:8d:58:91:35:ea:d0:de:24:d3:96:44:
         d4:0b:b4:83:8b:f1:c2:f7:34:49:df:20:b5:ed:5c:ca:44:83:
         74:10:5f:32:92:f2:06:95:71:2d:05:79:72:86:4a:2b:d3:c2:
         e6:31:b8:37:e4:72:f6:e6:03:72:25:64:05:73:54:c5:82:fe:
         4d:ad:a8:6d:9a:7f:f4:46:9b:7b:8e:f8:25:5a:15:9d:19:5e:
         15:a5:ae:c0:b0:63:4d:55:e9:83:9e:fb:1e:ce:61:f5:e2:39:
         ff:de:57:bd:da:eb:e3:4e:17:04:3d:35:80:fe:39:ae:fb:e2:
         2b:0c:6f:8b:7a:3f:27:5a:cc:6d:8e:26:d8:b3:6b:bc:bc:42:
         68:2a:96:f7:c1:14:ce:d4:9a:53:99:a9:4b:bb:96:ed:96:9e:
         44:9b:25:b5:3f:64:1f:92:4f:37:ad:5d:91:ba:dc:96:f5:d6:
         d4:bf:23:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 07:10:43 2025 by rpki-client