Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6ca8ec-6916-4384-9cf5-c4f53e17ddb0/1/7ixtYoTxFl0J6-20TeYXX-Azt3Q.mft
File:                     7ixtYoTxFl0J6-20TeYXX-Azt3Q.mft (raw, json)
Hash identifier:          HWNCJfKovPz1G6kE5gDPypZm9vaPYTdnXX5sKfqPF0Y=
Subject key identifier:   1B:EB:FD:A6:44:94:3C:14:D5:A4:BA:1D:DE:E7:16:45:E5:F6:15:34
Authority key identifier: EE:2C:6D:62:84:F1:16:5D:09:EB:ED:B4:4D:E6:17:5F:E0:33:B7:74
Certificate issuer:       /CN=ee2c6d6284f1165d09ebedb44de6175fe033b774
Certificate serial:       0196B7B51DFB8DC6967BD67D5FC09473FCE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7ixtYoTxFl0J6-20TeYXX-Azt3Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6ca8ec-6916-4384-9cf5-c4f53e17ddb0/1/7ixtYoTxFl0J6-20TeYXX-Azt3Q.mft
Manifest number:          088F
Signing time:             Sat 10 May 2025 01:00:22 +0000
Manifest this update:     Sat 10 May 2025 01:00:22 +0000
Manifest next update:     Sun 11 May 2025 01:00:22 +0000
Files and hashes:         1: 7ixtYoTxFl0J6-20TeYXX-Azt3Q.crl (hash: x6psSTuE6nwmQih6/s8t56BG7hrIkvsKAGZH7Nl1EW4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/6ca8ec-6916-4384-9cf5-c4f53e17ddb0/1/7ixtYoTxFl0J6-20TeYXX-Azt3Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/6ca8ec-6916-4384-9cf5-c4f53e17ddb0/1/7ixtYoTxFl0J6-20TeYXX-Azt3Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7ixtYoTxFl0J6-20TeYXX-Azt3Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 01:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b7:b5:1d:fb:8d:c6:96:7b:d6:7d:5f:c0:94:73:fc:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee2c6d6284f1165d09ebedb44de6175fe033b774
        Validity
            Not Before: May 10 01:00:22 2025 GMT
            Not After : May 11 01:00:22 2025 GMT
        Subject: CN=1bebfda644943c14d5a4ba1ddee71645e5f61534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:13:be:4b:eb:55:d4:b3:55:8c:85:f7:01:dc:
                    28:3c:58:34:e2:8c:ee:00:2a:7d:ea:c2:12:ac:9f:
                    79:4d:2b:42:17:16:0a:55:75:05:e8:dd:76:40:b4:
                    b1:91:6a:ec:c2:4f:06:20:dd:d1:b2:5f:eb:da:61:
                    2d:2f:cc:d5:ea:fc:5f:94:a7:c3:5c:fb:22:40:16:
                    5a:eb:14:f7:5e:a9:03:c2:5a:7d:4c:5c:26:e0:2c:
                    8d:2d:2b:47:0b:6d:3e:74:70:ef:b0:43:cb:91:31:
                    a0:8d:b6:27:01:ea:c0:0d:33:73:2c:8f:bd:c2:27:
                    59:0c:b8:5f:3d:69:e2:2d:89:1e:b6:2a:22:1f:d6:
                    95:ca:3c:b2:63:1e:2d:91:09:30:66:d7:d2:80:29:
                    96:ba:7a:f7:bb:c5:02:51:66:40:2c:e3:5b:53:87:
                    0f:b6:27:89:ea:dc:46:55:d8:d6:57:fd:68:22:44:
                    11:22:bb:00:cb:4c:19:c5:da:31:6f:93:b1:49:4f:
                    d4:69:de:c9:cd:ce:c4:f1:d0:91:29:1d:1c:2c:5e:
                    96:0c:6f:9e:10:a4:63:a8:a2:33:19:58:6c:34:51:
                    af:e3:cb:99:d0:cc:a7:c6:11:63:64:9a:78:fd:e8:
                    ff:66:b6:22:ee:dd:60:f5:4e:a6:97:cc:e2:b4:26:
                    d7:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:EB:FD:A6:44:94:3C:14:D5:A4:BA:1D:DE:E7:16:45:E5:F6:15:34
            X509v3 Authority Key Identifier:
                keyid:EE:2C:6D:62:84:F1:16:5D:09:EB:ED:B4:4D:E6:17:5F:E0:33:B7:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ixtYoTxFl0J6-20TeYXX-Azt3Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6ca8ec-6916-4384-9cf5-c4f53e17ddb0/1/7ixtYoTxFl0J6-20TeYXX-Azt3Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6ca8ec-6916-4384-9cf5-c4f53e17ddb0/1/7ixtYoTxFl0J6-20TeYXX-Azt3Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:6b:47:f9:96:79:71:44:c1:55:21:57:79:8b:e6:88:d3:03:
         38:f2:5f:f0:cb:8c:1b:79:6b:4c:0b:cc:65:1c:ea:b2:a6:4d:
         55:cc:70:f9:5d:e6:e8:6d:fe:53:7b:9d:82:09:33:e6:ab:34:
         db:85:10:0e:9a:ca:5f:9c:44:20:72:c1:fe:11:d6:6b:81:64:
         51:d3:09:76:b9:27:e9:72:a1:b3:81:35:42:ba:2d:d0:21:5c:
         a5:a4:dc:e0:f5:7d:93:2e:e1:1e:38:74:65:a8:23:de:8a:cc:
         bb:02:33:55:a6:44:e2:c2:88:a9:42:c3:57:e8:36:23:b0:e5:
         3b:83:6a:52:8d:74:8b:2c:07:2f:8a:05:58:32:7a:dd:8a:b9:
         e1:1d:14:d6:ad:58:94:63:f6:a8:4c:46:98:7e:7e:1a:52:8d:
         78:91:fd:f9:b7:26:bf:d8:12:09:3d:ce:be:38:f6:74:3d:2b:
         e5:e3:0d:92:73:5b:25:e8:ff:f4:cf:af:3b:da:cb:99:99:b1:
         76:0e:cb:38:70:8a:fb:f3:ab:cd:27:ce:e1:77:cc:c9:8f:8f:
         6c:37:1f:bf:0c:89:f5:5f:2b:0d:7c:7c:22:bf:82:7e:5e:dc:
         89:3e:a0:72:f4:62:2d:dd:df:37:bf:49:3e:5c:71:82:5c:62:
         97:b4:c5:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:19:04 2025 by rpki-client