Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.mft
File:                     _Hz6sk8VzSYhdq8NHM2IEn2_YzU.mft (raw, json)
Hash identifier:          Y/7B2czopmaBSg0+Dx3HN6LU0TlzmXtcp06on9n/K4k=
Subject key identifier:   23:5C:65:3F:62:95:B3:EB:05:4D:95:C2:6F:84:B2:10:64:8A:71:1A
Authority key identifier: FC:7C:FA:B2:4F:15:CD:26:21:76:AF:0D:1C:CD:88:12:7D:BF:63:35
Certificate issuer:       /CN=fc7cfab24f15cd262176af0d1ccd88127dbf6335
Certificate serial:       0196BBFFD4E9350B14A47992928E9AADC295
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.mft
Manifest number:          1531
Signing time:             Sat 10 May 2025 21:00:27 +0000
Manifest this update:     Sat 10 May 2025 21:00:27 +0000
Manifest next update:     Sun 11 May 2025 21:00:27 +0000
Files and hashes:         1: _Hz6sk8VzSYhdq8NHM2IEn2_YzU.crl (hash: 69aAH6b26HcxE5eCVwVshHdnVEKKWUXr0XNHkKUp2g0=)
                          2: gj7G_bFbDmDYpYp6GKUqBVaPkf0.roa (hash: 636LllEYf1p/aMnvVspv63btZ6guwyZEmYUh7DiMd9c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bb:ff:d4:e9:35:0b:14:a4:79:92:92:8e:9a:ad:c2:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc7cfab24f15cd262176af0d1ccd88127dbf6335
        Validity
            Not Before: May 10 21:00:27 2025 GMT
            Not After : May 11 21:00:27 2025 GMT
        Subject: CN=235c653f6295b3eb054d95c26f84b210648a711a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:0c:44:84:fb:cf:dd:be:65:28:39:af:f4:49:
                    83:aa:fa:a3:8b:8e:7f:f5:6f:64:05:09:20:70:7d:
                    c4:8e:67:15:ec:8f:8b:b7:08:ff:45:fa:05:0e:9a:
                    a5:48:ee:05:77:04:b8:10:41:f1:1e:fa:97:f0:48:
                    fa:86:03:3e:8f:f2:80:0b:1c:92:7e:51:68:2e:da:
                    98:0f:59:2a:61:dd:fb:4a:e5:60:65:11:ba:11:1b:
                    80:55:18:40:53:9a:c8:78:85:64:62:2c:6f:cd:17:
                    4d:cd:73:82:87:8e:8c:df:9c:0c:2e:ba:7d:34:c4:
                    78:21:49:38:02:04:ad:1a:04:c1:95:38:8b:5d:8a:
                    a3:6b:08:03:b6:b4:68:d0:d3:eb:6c:0a:64:f6:36:
                    23:ed:dd:22:ea:c4:23:8e:80:50:f5:26:e6:22:df:
                    2a:d0:52:d9:22:dc:ec:19:fe:cd:00:41:10:fa:5f:
                    3a:c8:c3:7a:e7:09:bb:20:f5:05:33:f2:c9:25:bc:
                    18:f2:3d:03:e8:79:04:0e:33:11:f8:60:2a:42:79:
                    e1:aa:4e:d1:29:bc:5d:b1:9e:59:db:ba:4e:09:b3:
                    4b:3b:48:f1:bc:dc:20:18:50:0b:7e:66:f2:dc:f2:
                    3d:bc:e4:0e:fd:77:41:f2:d1:25:5a:ae:7c:0e:3c:
                    33:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:5C:65:3F:62:95:B3:EB:05:4D:95:C2:6F:84:B2:10:64:8A:71:1A
            X509v3 Authority Key Identifier:
                keyid:FC:7C:FA:B2:4F:15:CD:26:21:76:AF:0D:1C:CD:88:12:7D:BF:63:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:8b:ba:d3:c2:f7:d1:ca:62:f3:77:cd:5c:88:ef:34:37:b4:
         f5:fe:80:12:f3:77:91:cc:75:95:e9:06:94:28:f2:38:ff:c9:
         63:0d:ae:b4:e8:0a:b4:ed:05:6a:7d:29:63:78:8b:ac:38:9a:
         1b:67:6f:1d:0e:3c:e2:2d:aa:43:a3:2b:82:a7:f0:88:7c:a8:
         8c:72:29:72:2a:06:82:44:da:0a:70:8b:cf:31:68:04:30:12:
         3d:f4:63:db:92:63:80:3b:4b:f9:4f:19:9c:e2:a0:98:2f:50:
         ac:1c:1e:bb:44:16:cc:c1:0b:61:de:8b:d0:6d:3c:e7:4c:ec:
         95:8b:fe:e8:95:72:09:dc:e7:8a:38:e6:83:e5:5c:2b:5c:fe:
         75:8d:85:32:14:9b:4f:65:ab:18:de:66:1b:b7:a8:f6:67:fe:
         c5:b1:5e:7c:b1:29:eb:1c:86:e4:94:81:d1:b7:92:17:2a:f6:
         3b:34:2e:66:f9:f3:43:5f:db:cb:ab:00:c4:7f:39:52:45:2b:
         a7:14:87:28:f6:78:14:b1:45:c1:31:ff:86:c7:84:70:d9:d8:
         ba:1b:d5:0d:17:b1:0b:00:8e:eb:99:da:7a:7f:be:cb:dd:a6:
         d2:61:0f:7a:23:d4:cc:fa:21:cf:c4:60:a3:6e:d8:20:20:b1:
         96:d5:d8:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 23:27:51 2025 by rpki-client