Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft
File:                     1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft (raw, json)
Hash identifier:          qhzUAd7ggRI45IQ6LRhQ2avdl35uu3k7sFFpW2P6zGE=
Subject key identifier:   BF:F9:29:AA:0D:54:93:A6:F1:F0:46:6C:E2:91:DE:78:19:FA:1A:A4
Authority key identifier: FB:B5:B1:D6:1E:09:A4:E4:B0:DD:1B:05:CE:D8:E6:51:3B:C6:61:87
Certificate issuer:       /CN=fbb5b1d61e09a4e4b0dd1b05ced8e6513bc66187
Certificate serial:       0196C34C68A4A9A1E99F03680F28F9916ECA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft
Manifest number:          1535
Signing time:             Mon 12 May 2025 07:01:26 +0000
Manifest this update:     Mon 12 May 2025 07:01:26 +0000
Manifest next update:     Tue 13 May 2025 07:01:26 +0000
Files and hashes:         1: 1-7Wx1h4JpOSw3RsFztjmUTvGYYc.crl (hash: kaO4pWYgC+gWNNaLYcIpy2QdIEFuMMaxuuhgHdqfjyA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c3:4c:68:a4:a9:a1:e9:9f:03:68:0f:28:f9:91:6e:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbb5b1d61e09a4e4b0dd1b05ced8e6513bc66187
        Validity
            Not Before: May 12 07:01:26 2025 GMT
            Not After : May 13 07:01:26 2025 GMT
        Subject: CN=bff929aa0d5493a6f1f0466ce291de7819fa1aa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:51:70:56:83:66:32:6d:25:47:fe:e2:79:14:
                    0c:33:2c:9e:81:db:c0:f0:14:04:56:76:ba:d3:9e:
                    d3:f3:f8:b3:a2:83:a8:07:f8:1c:f9:df:17:d5:89:
                    f8:76:24:96:28:d4:63:1d:1d:eb:3e:93:a0:aa:ac:
                    5a:b2:0c:25:e6:eb:bb:34:89:4c:f3:ac:08:6a:5e:
                    d1:31:b4:ba:b3:19:f1:d8:35:82:5a:0d:61:2f:9d:
                    e3:f4:96:10:cd:9e:fd:a1:bd:84:68:b3:0c:26:66:
                    c7:dc:2e:f5:28:36:ec:34:f8:62:14:0e:14:77:80:
                    1d:70:ee:11:aa:cf:fb:59:47:ae:6c:fd:6b:ab:0b:
                    cb:8c:e4:e7:38:54:3e:d9:c0:78:1f:78:26:5c:99:
                    c8:7b:84:4f:1f:37:8b:41:ca:3b:52:fa:28:d3:86:
                    04:53:e6:4c:94:46:b5:96:0a:e0:b9:18:85:0f:60:
                    de:38:9e:32:d5:c8:1d:40:92:dc:78:36:ae:22:d0:
                    22:6a:9a:7c:22:22:bc:81:c3:3e:df:ce:fc:0b:ed:
                    ce:bf:a8:d4:eb:c2:07:e5:2f:14:05:eb:5b:98:24:
                    a9:1f:3c:da:f4:4f:08:78:1a:36:64:d9:8a:96:e4:
                    44:e1:dc:73:8a:37:dd:6f:8a:a3:cd:85:57:b1:c0:
                    90:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:F9:29:AA:0D:54:93:A6:F1:F0:46:6C:E2:91:DE:78:19:FA:1A:A4
            X509v3 Authority Key Identifier:
                keyid:FB:B5:B1:D6:1E:09:A4:E4:B0:DD:1B:05:CE:D8:E6:51:3B:C6:61:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:7f:f3:0f:06:85:14:05:dd:94:f3:58:0e:e2:c3:22:6a:9e:
         e6:56:24:9f:5b:81:ab:46:f8:e8:d5:05:b8:9a:ea:ad:e6:b4:
         43:53:c4:cc:f9:ab:d4:7d:e0:e1:c6:7e:10:b4:c7:d6:26:6c:
         86:78:da:b2:34:43:26:42:48:9d:58:32:f0:1a:54:b0:9e:cf:
         03:85:c2:53:5a:f7:d4:82:bf:fe:18:a8:81:13:75:f2:b8:8f:
         db:72:88:0a:34:8b:58:41:74:fe:7b:33:54:c0:15:46:45:96:
         cb:d7:b1:5a:8c:ed:79:9b:22:db:2e:ef:92:7b:71:95:4f:9e:
         83:ff:3e:f1:a8:06:5f:a3:9d:b2:e4:8a:eb:d8:f3:f6:d1:39:
         28:54:6a:3e:a8:94:f9:38:19:e5:a8:64:1a:dd:2e:e0:87:64:
         04:91:d0:c5:9f:3d:bb:de:02:47:ec:6a:aa:ea:3b:b3:ba:e9:
         d2:9f:21:68:0c:38:ca:b7:5e:67:3d:de:52:21:76:3f:75:33:
         89:12:39:9d:e5:2f:c2:db:f9:55:e3:81:98:c0:8b:06:8f:82:
         98:56:67:64:5b:67:4a:b4:76:6f:06:93:8a:4a:41:8a:bd:3f:
         3a:a2:79:31:ad:a3:94:22:ec:82:cb:cc:90:61:d9:6e:49:11:
         19:56:ac:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:59:36 2025 by rpki-client