Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.mft
File:                     dYOxUbdLsu2w9c5rbpux4MPQrRs.mft (raw, json)
Hash identifier:          pIldPatIDJuiV5yOghGGEOAeKxKHk1076KFT842aJaE=
Subject key identifier:   26:69:27:EA:EA:97:AE:EC:5C:09:9B:10:E4:9B:11:F4:75:9D:F2:99
Authority key identifier: 75:83:B1:51:B7:4B:B2:ED:B0:F5:CE:6B:6E:9B:B1:E0:C3:D0:AD:1B
Certificate issuer:       /CN=7583b151b74bb2edb0f5ce6b6e9bb1e0c3d0ad1b
Certificate serial:       0196C3B9F106F08794914DECB0C03C42C0E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dYOxUbdLsu2w9c5rbpux4MPQrRs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.mft
Manifest number:          1534
Signing time:             Mon 12 May 2025 09:01:04 +0000
Manifest this update:     Mon 12 May 2025 09:01:04 +0000
Manifest next update:     Tue 13 May 2025 09:01:04 +0000
Files and hashes:         1: dYOxUbdLsu2w9c5rbpux4MPQrRs.crl (hash: 1tAhTc+tY3PViC3Ha+EnkoVskndezgGZkntesBHCv8s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dYOxUbdLsu2w9c5rbpux4MPQrRs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c3:b9:f1:06:f0:87:94:91:4d:ec:b0:c0:3c:42:c0:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7583b151b74bb2edb0f5ce6b6e9bb1e0c3d0ad1b
        Validity
            Not Before: May 12 09:01:04 2025 GMT
            Not After : May 13 09:01:04 2025 GMT
        Subject: CN=266927eaea97aeec5c099b10e49b11f4759df299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ea:43:a4:f7:8e:02:c6:f9:31:d7:6d:87:5b:
                    f4:c3:3b:6c:af:4f:cb:23:64:86:a0:4d:8f:93:28:
                    24:e7:ba:33:f7:77:d2:37:9d:d8:0f:85:ed:3d:9d:
                    00:c4:b8:a3:03:ee:99:13:7b:00:43:a7:80:7a:c6:
                    30:46:85:ca:ca:4b:4f:4c:db:3c:62:75:33:a0:2e:
                    c0:d6:04:a2:50:b9:14:86:9c:e8:dd:99:3e:ae:11:
                    9e:b3:9b:87:a5:e3:11:02:20:92:6f:16:77:4a:a8:
                    d0:01:9d:a9:a7:ea:33:43:73:78:e4:24:73:03:8c:
                    15:2c:ce:fc:73:80:b1:86:55:42:14:9a:39:8a:84:
                    97:17:74:5c:5f:39:5e:0d:6f:bb:b5:1f:20:56:63:
                    65:ab:3c:c2:39:8f:10:bd:31:b8:80:7d:64:2f:96:
                    64:33:39:17:e2:56:51:7b:d1:df:25:f1:ea:dd:b2:
                    8f:7d:d8:7c:3f:f2:f0:11:d5:f0:5f:ec:2e:46:47:
                    d9:4d:ad:83:82:b7:3b:ab:d1:10:ed:c3:8e:3a:95:
                    b9:a3:30:e4:62:c5:65:80:6f:61:0d:ee:a4:ad:1c:
                    b4:cc:3e:17:fc:0f:b7:a6:f7:fa:67:8a:df:e8:cc:
                    fe:34:c4:7c:fc:d8:d3:af:66:d9:18:e9:62:e3:4a:
                    b6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:69:27:EA:EA:97:AE:EC:5C:09:9B:10:E4:9B:11:F4:75:9D:F2:99
            X509v3 Authority Key Identifier:
                keyid:75:83:B1:51:B7:4B:B2:ED:B0:F5:CE:6B:6E:9B:B1:E0:C3:D0:AD:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYOxUbdLsu2w9c5rbpux4MPQrRs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:59:68:4b:cf:ad:81:ba:84:91:ea:89:53:9e:4e:95:00:7f:
         ac:2f:2e:c5:1c:2f:fd:49:68:05:0f:00:89:64:9e:98:5b:5e:
         c6:7d:bf:d8:42:54:59:d5:bb:e0:63:e6:ea:6e:d9:ff:a5:00:
         11:e0:28:bc:9d:24:4b:68:7b:d3:36:8c:18:d6:9f:16:d9:df:
         b2:a2:25:66:f0:ce:f0:7f:51:89:f6:4e:74:59:b7:f8:ab:77:
         85:5b:a7:b5:01:f8:c0:1e:05:19:d8:fc:34:40:54:df:fa:96:
         88:f2:56:ec:46:52:8d:31:0e:b2:ec:f6:fb:24:5e:31:85:93:
         b5:fb:9e:82:fa:b2:fc:68:3b:92:c2:6b:ad:c0:1c:4a:fc:de:
         8b:b0:53:c8:ec:e7:6b:d0:b4:9a:c1:74:77:03:4b:e0:0d:8a:
         44:29:40:96:2a:31:79:1a:05:e7:f6:96:78:ab:24:17:e8:5e:
         68:fd:89:23:1c:9d:fe:47:85:b3:46:03:e3:ef:c0:ff:e9:53:
         7b:93:d4:ea:e0:d4:3d:f0:f5:21:4a:af:0a:41:04:af:63:7e:
         0c:d4:5d:48:b3:44:c7:79:3f:d7:1b:1f:f7:1e:61:53:d1:82:
         24:de:91:47:2e:4b:9d:fd:3f:4f:b1:89:ad:b5:b8:ea:44:fb:
         77:28:3a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:59:38 2025 by rpki-client