Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/26cc6a-6f17-40a9-b987-6fc717175e58/1/tTcRWWHGq_W4er5KIAU-SsobbsI.mft
File:                     tTcRWWHGq_W4er5KIAU-SsobbsI.mft (raw, json)
Hash identifier:          sp1BZy0sY6Owrj49wSTe4fOF5qifH+fzX50S4LL9DO4=
Subject key identifier:   D4:75:55:D1:44:7F:AE:6F:8D:4E:21:50:F1:B4:9B:0C:6A:F6:D7:B6
Authority key identifier: B5:37:11:59:61:C6:AB:F5:B8:7A:BE:4A:20:05:3E:4A:CA:1B:6E:C2
Certificate issuer:       /CN=b537115961c6abf5b87abe4a20053e4aca1b6ec2
Certificate serial:       01969F3EF6429905D037CA4103FC07270A4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tTcRWWHGq_W4er5KIAU-SsobbsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/26cc6a-6f17-40a9-b987-6fc717175e58/1/tTcRWWHGq_W4er5KIAU-SsobbsI.mft
Manifest number:          1524
Signing time:             Mon 05 May 2025 07:00:25 +0000
Manifest this update:     Mon 05 May 2025 07:00:25 +0000
Manifest next update:     Tue 06 May 2025 07:00:25 +0000
Files and hashes:         1: tTcRWWHGq_W4er5KIAU-SsobbsI.crl (hash: 0RlMnZ+7qaJ8zmtitGTHQKIDR0yilpixcs5sDpkjERs=)
                          2: yv-lKnLJ7FH3ebM94G5o9mRIoI0.roa (hash: NaXQYxgPfjl+IpTUFv/7Iibu/QutlXyZxHu9Cx6Aoy0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/26cc6a-6f17-40a9-b987-6fc717175e58/1/tTcRWWHGq_W4er5KIAU-SsobbsI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/26cc6a-6f17-40a9-b987-6fc717175e58/1/tTcRWWHGq_W4er5KIAU-SsobbsI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tTcRWWHGq_W4er5KIAU-SsobbsI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 07:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9f:3e:f6:42:99:05:d0:37:ca:41:03:fc:07:27:0a:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b537115961c6abf5b87abe4a20053e4aca1b6ec2
        Validity
            Not Before: May  5 07:00:25 2025 GMT
            Not After : May  6 07:00:25 2025 GMT
        Subject: CN=d47555d1447fae6f8d4e2150f1b49b0c6af6d7b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a2:c9:ee:38:79:52:b1:17:54:2a:dc:50:09:
                    3d:ae:18:8f:06:84:45:99:d7:19:31:da:df:1b:3f:
                    ee:86:6c:72:f6:60:4d:42:57:f9:48:ee:15:54:57:
                    45:c2:31:8b:3a:9f:bd:91:f1:5b:14:8b:99:59:23:
                    36:dd:56:ce:22:73:c2:ae:e1:ea:11:cd:80:3a:a6:
                    17:b2:61:a3:23:c1:99:bb:2c:7a:64:48:c0:d5:50:
                    f8:ae:68:0a:6f:d3:27:6c:6e:49:78:16:81:7f:ff:
                    a9:56:4c:1b:6f:4e:06:18:00:88:41:6c:2a:44:88:
                    7c:ba:39:60:19:ae:46:7b:1c:60:0e:a6:39:65:a2:
                    42:5a:d0:da:3f:db:88:e6:41:28:06:78:a9:0b:3d:
                    84:25:24:79:66:cc:c3:f2:c1:72:aa:2e:f3:e6:1f:
                    28:26:77:ed:e2:25:f7:bc:51:81:53:05:9f:45:b8:
                    71:6c:5a:19:5f:6d:13:db:20:f5:0a:7d:ff:e3:ee:
                    12:37:6e:58:c3:10:7a:f3:53:3c:b8:af:27:55:1e:
                    b4:3f:52:34:e1:fc:3f:8b:b1:33:c7:40:40:f0:30:
                    50:46:da:8b:04:66:d2:90:68:9c:af:e0:46:5e:ab:
                    4d:0a:a2:da:e7:11:0d:a5:c9:68:c1:9a:20:d8:00:
                    a5:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:75:55:D1:44:7F:AE:6F:8D:4E:21:50:F1:B4:9B:0C:6A:F6:D7:B6
            X509v3 Authority Key Identifier:
                keyid:B5:37:11:59:61:C6:AB:F5:B8:7A:BE:4A:20:05:3E:4A:CA:1B:6E:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTcRWWHGq_W4er5KIAU-SsobbsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/26cc6a-6f17-40a9-b987-6fc717175e58/1/tTcRWWHGq_W4er5KIAU-SsobbsI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/26cc6a-6f17-40a9-b987-6fc717175e58/1/tTcRWWHGq_W4er5KIAU-SsobbsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:c2:fa:e6:44:42:8d:cb:61:25:38:4c:66:a2:64:b8:62:21:
         b1:48:35:78:ae:4c:05:26:be:93:2a:6e:04:94:5f:33:20:49:
         4f:20:77:90:a5:57:51:83:75:89:26:e5:a2:87:99:be:75:1b:
         0c:73:0f:a7:6b:c0:44:a6:07:d3:50:22:34:6d:71:bf:c1:6d:
         f5:0f:5d:20:24:11:c3:0a:3c:17:b6:ed:fb:cf:48:d3:72:fa:
         10:9c:b3:e4:62:5b:0e:6f:f8:ab:d4:ff:c5:25:b9:d9:2e:1f:
         49:e5:0b:10:90:98:6b:1b:b9:30:8f:78:f2:e1:06:25:a8:d3:
         5e:56:d0:1c:ae:50:0d:01:9f:58:ea:b6:86:a5:43:d5:8b:08:
         fc:a7:83:a7:7c:7d:75:04:1f:2c:a2:a5:a8:ac:66:31:8b:3a:
         47:f1:23:de:96:7c:88:58:52:d7:b0:37:d3:af:a0:c1:10:04:
         4e:d3:03:d6:35:01:4b:4e:a2:cb:c9:09:8e:b7:bb:6e:6c:42:
         51:31:17:b2:02:e1:7e:d8:9f:83:05:d0:b2:67:a6:8f:de:06:
         ff:71:8d:b7:00:f1:8a:08:be:4b:38:73:f8:53:a8:2e:a5:ad:
         87:f7:0d:0c:71:c5:4e:e8:83:9b:42:e3:8a:21:1d:26:04:9f:
         93:42:db:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 15:17:04 2025 by rpki-client