Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/4ea9c3-2800-4667-a44c-afaf7fdd8dfd/1/T2L75L_BSBjG6c5mewVq1x_vKsM.mft
File:                     T2L75L_BSBjG6c5mewVq1x_vKsM.mft (raw, json)
Hash identifier:          AtnP3vrEVibn5IU8sajJEdOOCtJHm+gm6BN8sze0fGM=
Subject key identifier:   7E:84:EB:86:C0:9F:0F:4A:77:3F:2C:70:6B:90:79:52:09:9A:F6:CA
Authority key identifier: 4F:62:FB:E4:BF:C1:48:18:C6:E9:CE:66:7B:05:6A:D7:1F:EF:2A:C3
Certificate issuer:       /CN=4f62fbe4bfc14818c6e9ce667b056ad71fef2ac3
Certificate serial:       01969DF61790D604420FABF085F86066D264
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T2L75L_BSBjG6c5mewVq1x_vKsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/4ea9c3-2800-4667-a44c-afaf7fdd8dfd/1/T2L75L_BSBjG6c5mewVq1x_vKsM.mft
Manifest number:          21
Signing time:             Mon 05 May 2025 01:01:12 +0000
Manifest this update:     Mon 05 May 2025 01:01:12 +0000
Manifest next update:     Tue 06 May 2025 01:01:12 +0000
Files and hashes:         1: T2L75L_BSBjG6c5mewVq1x_vKsM.crl (hash: t8NHe5je8wDQt0EW20pK+b8hEf//3Hj1I3ZBA1WwpE4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/4ea9c3-2800-4667-a44c-afaf7fdd8dfd/1/T2L75L_BSBjG6c5mewVq1x_vKsM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/4ea9c3-2800-4667-a44c-afaf7fdd8dfd/1/T2L75L_BSBjG6c5mewVq1x_vKsM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T2L75L_BSBjG6c5mewVq1x_vKsM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9d:f6:17:90:d6:04:42:0f:ab:f0:85:f8:60:66:d2:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f62fbe4bfc14818c6e9ce667b056ad71fef2ac3
        Validity
            Not Before: May  5 01:01:12 2025 GMT
            Not After : May  6 01:01:12 2025 GMT
        Subject: CN=7e84eb86c09f0f4a773f2c706b907952099af6ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:74:47:cc:6c:90:4f:2b:44:af:d8:83:79:fb:
                    b9:78:71:59:06:4a:51:6f:2c:a6:cc:c2:40:97:d5:
                    65:f3:07:ac:e2:fa:40:7d:6b:37:d8:a7:04:4c:70:
                    1b:0d:d1:71:a4:dc:ed:69:2b:4f:b2:26:2e:4e:71:
                    da:38:c1:57:4e:06:06:a8:1f:fd:34:3b:c6:4a:58:
                    d0:fa:55:ef:d4:d9:6a:9b:bf:e3:9d:dc:7e:00:6a:
                    cc:34:e9:d4:8e:7f:6f:0f:d0:3d:a9:08:eb:68:af:
                    d2:9a:9e:8e:82:0b:d8:b3:e5:b5:6a:4e:a0:66:1e:
                    d4:c9:58:eb:1a:5d:fb:6b:0d:04:c6:1c:c1:84:e9:
                    73:1b:f9:46:2c:15:04:43:ef:20:43:75:7b:d7:ed:
                    e7:02:6d:0d:7f:85:69:8a:1e:37:6d:4f:a3:83:a6:
                    61:1c:63:c0:76:18:78:8f:88:ec:b8:83:33:b1:05:
                    3c:85:c8:e5:14:d1:b5:9d:83:7d:bf:91:17:60:87:
                    e1:f3:cd:70:3b:2d:7a:45:ba:b5:bc:54:6c:b0:92:
                    f4:2a:35:0c:63:ad:20:dc:e2:0a:c1:c1:a8:d8:73:
                    61:0f:51:c2:68:c6:50:d0:40:0a:7d:be:dd:63:ec:
                    58:05:ef:39:cf:f5:5e:74:be:91:20:11:64:5e:58:
                    13:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:84:EB:86:C0:9F:0F:4A:77:3F:2C:70:6B:90:79:52:09:9A:F6:CA
            X509v3 Authority Key Identifier:
                keyid:4F:62:FB:E4:BF:C1:48:18:C6:E9:CE:66:7B:05:6A:D7:1F:EF:2A:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2L75L_BSBjG6c5mewVq1x_vKsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/4ea9c3-2800-4667-a44c-afaf7fdd8dfd/1/T2L75L_BSBjG6c5mewVq1x_vKsM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/4ea9c3-2800-4667-a44c-afaf7fdd8dfd/1/T2L75L_BSBjG6c5mewVq1x_vKsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:b9:39:0c:dd:ee:79:a3:e1:31:2e:47:dc:96:32:5d:6a:06:
         3a:2d:98:2a:35:64:5d:18:6a:22:c3:95:bc:bf:89:ee:54:e5:
         3f:ed:4f:24:83:a9:34:12:cb:c3:27:12:8d:d8:8a:e7:96:f2:
         11:c6:09:df:34:b9:9c:53:e7:64:16:16:05:e7:e3:73:cf:74:
         23:6a:f1:35:a5:a4:a7:74:00:9e:90:64:e9:3e:03:cc:f5:40:
         27:6f:aa:d1:92:fb:03:da:af:aa:da:e7:8c:81:f6:30:6d:ab:
         18:e1:3f:04:0b:1b:24:62:21:d0:67:b7:ed:32:c2:19:c6:a8:
         f9:81:81:8d:ab:24:3c:72:c3:4b:1d:15:74:fd:41:84:b7:37:
         74:21:dc:04:76:f4:e0:9b:dc:7c:1c:f9:ed:af:92:00:b4:2c:
         78:55:76:f2:02:dd:26:bb:93:92:aa:f8:50:47:00:0d:36:fb:
         3a:08:f0:50:14:cc:66:41:4b:f4:3f:4e:54:9e:e7:50:d8:df:
         2d:f4:cd:dc:c3:25:ff:a4:a4:94:ff:e4:96:d2:ad:3b:e7:68:
         41:4a:3f:07:f3:89:f8:7e:01:39:c9:d4:fc:6d:c6:3b:f6:21:
         3d:da:7f:97:34:93:7b:5c:1f:63:80:f8:b8:f9:96:94:e5:44:
         5d:98:be:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:50:27 2025 by rpki-client