Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/4c43b9-ae82-4919-987d-93c6facf13c9/1/d6TN722YqQcT__52cRNId5pjKgo.mft
File:                     d6TN722YqQcT__52cRNId5pjKgo.mft (raw, json)
Hash identifier:          idypKTIOBA/r+fv8rvpEC2xGELoLmYyqmHlWXqIEEPk=
Subject key identifier:   7B:B3:94:D5:68:C0:2A:88:6D:F7:66:4E:AF:DA:66:5D:44:FB:E0:1C
Authority key identifier: 77:A4:CD:EF:6D:98:A9:07:13:FF:FE:76:71:13:48:77:9A:63:2A:0A
Certificate issuer:       /CN=77a4cdef6d98a90713fffe76711348779a632a0a
Certificate serial:       0196BBC92D5F5F82CE054573A28A3CF2AB2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d6TN722YqQcT__52cRNId5pjKgo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/4c43b9-ae82-4919-987d-93c6facf13c9/1/d6TN722YqQcT__52cRNId5pjKgo.mft
Manifest number:          152F
Signing time:             Sat 10 May 2025 20:00:45 +0000
Manifest this update:     Sat 10 May 2025 20:00:45 +0000
Manifest next update:     Sun 11 May 2025 20:00:45 +0000
Files and hashes:         1: d6TN722YqQcT__52cRNId5pjKgo.crl (hash: 230pHugs7Ej4+OIRIpldbiWnjSfmDDqFi4+TElbPByk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/4c43b9-ae82-4919-987d-93c6facf13c9/1/d6TN722YqQcT__52cRNId5pjKgo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/4c43b9-ae82-4919-987d-93c6facf13c9/1/d6TN722YqQcT__52cRNId5pjKgo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d6TN722YqQcT__52cRNId5pjKgo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 20:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bb:c9:2d:5f:5f:82:ce:05:45:73:a2:8a:3c:f2:ab:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77a4cdef6d98a90713fffe76711348779a632a0a
        Validity
            Not Before: May 10 20:00:45 2025 GMT
            Not After : May 11 20:00:45 2025 GMT
        Subject: CN=7bb394d568c02a886df7664eafda665d44fbe01c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6d:01:a2:21:6d:0d:28:74:bf:ef:1d:36:13:
                    e3:c6:fd:f6:79:6d:d1:b8:7b:a9:c3:be:62:0b:a1:
                    bd:4a:72:50:58:f3:04:01:da:01:0c:21:f8:96:94:
                    00:e4:85:e1:87:03:4e:13:6e:c7:30:f0:94:48:5a:
                    d9:d4:b7:a9:75:72:e0:57:99:23:30:f3:ae:9d:a0:
                    41:95:92:92:41:11:3e:11:10:4f:b8:c3:18:91:1c:
                    95:b4:c9:c5:51:49:bd:e8:25:3e:6d:18:f4:e9:e6:
                    7b:27:41:87:fb:14:59:da:c0:9c:6f:06:10:c1:6d:
                    4a:26:9c:4d:a9:fd:72:b0:db:c1:1b:68:68:b2:70:
                    b4:14:b9:be:9e:0d:71:7f:4b:5d:c9:c0:50:8d:a1:
                    87:36:93:3b:26:ad:d4:19:6d:30:df:20:56:81:2f:
                    fb:24:40:39:00:c6:54:ed:12:0b:c5:47:6a:c3:82:
                    11:9e:d6:da:56:e0:ab:f5:20:d4:a3:5e:8f:68:e9:
                    c6:00:1f:37:54:a8:38:55:ed:b6:c8:fb:ba:5b:27:
                    38:ef:8a:d8:2d:d4:18:3f:93:4b:ef:0e:71:29:4e:
                    dc:da:c7:7f:45:51:da:49:76:61:15:56:ab:e5:22:
                    2b:45:f5:81:a3:62:fd:3f:f3:f3:eb:81:cc:f5:c6:
                    ec:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:B3:94:D5:68:C0:2A:88:6D:F7:66:4E:AF:DA:66:5D:44:FB:E0:1C
            X509v3 Authority Key Identifier:
                keyid:77:A4:CD:EF:6D:98:A9:07:13:FF:FE:76:71:13:48:77:9A:63:2A:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6TN722YqQcT__52cRNId5pjKgo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4c43b9-ae82-4919-987d-93c6facf13c9/1/d6TN722YqQcT__52cRNId5pjKgo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4c43b9-ae82-4919-987d-93c6facf13c9/1/d6TN722YqQcT__52cRNId5pjKgo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:59:3e:a2:3b:e5:bb:a3:11:79:68:83:49:e1:06:64:c0:d1:
         e8:9e:b7:f2:2f:9a:2b:43:de:41:a4:a1:9c:eb:da:49:0b:0b:
         03:22:81:42:89:f3:35:2b:a5:30:a2:d8:96:8e:1f:08:c5:44:
         46:e5:37:c4:64:80:45:d2:ae:b6:dd:96:fb:63:ce:fe:87:ac:
         d8:b3:6a:df:98:8c:54:51:d5:ee:d1:f2:a0:f5:76:a3:47:8b:
         e6:48:a6:5f:43:07:84:d4:ba:fe:f2:79:3c:75:a8:85:47:35:
         a4:69:ae:96:96:57:4b:5b:6d:74:30:63:89:6b:99:81:b2:72:
         13:8b:91:19:11:f2:64:9e:86:a3:79:c9:2d:df:f3:1e:47:37:
         59:f6:fc:77:cd:e3:ae:44:c8:2e:60:a8:bd:f9:38:86:2b:bc:
         9b:65:f8:1c:07:86:ba:9c:e8:de:61:78:c8:b6:34:b1:48:90:
         c9:4e:27:2b:15:78:0a:1e:e2:27:2f:88:76:72:ba:6f:45:be:
         14:11:2f:d4:d7:84:c4:a4:92:cf:84:53:1f:8b:72:ec:6a:e7:
         af:ff:4f:82:b9:6b:8e:27:e0:8e:12:d8:d4:6f:9b:ea:ab:7e:
         c8:3f:61:73:46:48:d9:1e:c5:0b:05:b7:0a:99:2c:df:ac:84:
         92:ce:d8:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:36:35 2025 by rpki-client