Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/5521d8-09c6-4814-baa6-c2f2ea31e09e/1/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.mft
File:                     txdYsIXRDvJ8w-Fo9JAHXT58Tv4.mft (raw, json)
Hash identifier:          3CIiKisyL//uPWqlyD6kUBUizYaHYedn+TWFQXtR8hE=
Subject key identifier:   9B:17:8C:FD:EB:E8:94:ED:1F:60:7E:CB:CA:73:1B:F5:13:5A:3A:9A
Authority key identifier: B7:17:58:B0:85:D1:0E:F2:7C:C3:E1:68:F4:90:07:5D:3E:7C:4E:FE
Certificate issuer:       /CN=b71758b085d10ef27cc3e168f490075d3e7c4efe
Certificate serial:       0196DBC1FB95DEEE00BEF5E31FB77E8682F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/5521d8-09c6-4814-baa6-c2f2ea31e09e/1/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.mft
Manifest number:          1540
Signing time:             Sat 17 May 2025 01:00:44 +0000
Manifest this update:     Sat 17 May 2025 01:00:44 +0000
Manifest next update:     Sun 18 May 2025 01:00:44 +0000
Files and hashes:         1: txdYsIXRDvJ8w-Fo9JAHXT58Tv4.crl (hash: sB2EDfJrYC70Vyz7b405abfBhnI6BdizTuTtz8pG+HM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/5521d8-09c6-4814-baa6-c2f2ea31e09e/1/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/5521d8-09c6-4814-baa6-c2f2ea31e09e/1/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 May 2025 01:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:db:c1:fb:95:de:ee:00:be:f5:e3:1f:b7:7e:86:82:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b71758b085d10ef27cc3e168f490075d3e7c4efe
        Validity
            Not Before: May 17 01:00:44 2025 GMT
            Not After : May 18 01:00:44 2025 GMT
        Subject: CN=9b178cfdebe894ed1f607ecbca731bf5135a3a9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:35:17:6d:31:87:d4:42:d5:99:4e:29:40:09:
                    4a:40:69:4a:b6:5e:eb:d0:34:3f:13:bc:3d:3d:4d:
                    17:e0:92:36:69:95:d7:d1:7c:56:a3:2b:48:5d:75:
                    57:2b:18:fe:c4:a8:60:f5:4d:4e:1b:75:14:11:f5:
                    90:ea:97:47:98:27:1e:49:2c:d5:d9:65:29:6e:1e:
                    e6:df:b9:56:01:38:c8:d0:14:da:c9:38:11:d3:57:
                    42:72:2d:01:81:ad:ca:b9:7c:9d:16:2b:1a:00:2c:
                    4a:de:7f:42:d1:da:38:f1:4a:83:17:ce:cf:af:35:
                    e3:20:6f:3d:57:ec:2f:12:8a:2e:75:bc:a3:97:0e:
                    b5:c8:1a:63:06:ae:ce:bb:ef:a1:28:ce:f9:4c:18:
                    53:96:b3:00:3f:c1:0d:09:f0:ac:91:5f:0b:39:52:
                    bf:68:1b:11:ec:5e:47:a4:a3:e0:79:45:ab:61:de:
                    60:86:ae:62:66:3a:f1:57:97:9c:7c:47:58:cc:0a:
                    77:93:54:dc:6c:5f:37:b7:7c:14:08:ee:12:b1:a3:
                    bb:aa:9c:55:1e:2c:78:41:e7:fd:8f:a2:de:7a:ec:
                    2a:83:44:91:31:2b:b9:07:b2:db:9b:ef:5b:c5:54:
                    54:68:60:05:da:d1:0d:cc:8c:6a:88:d3:d0:15:c2:
                    3d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:17:8C:FD:EB:E8:94:ED:1F:60:7E:CB:CA:73:1B:F5:13:5A:3A:9A
            X509v3 Authority Key Identifier:
                keyid:B7:17:58:B0:85:D1:0E:F2:7C:C3:E1:68:F4:90:07:5D:3E:7C:4E:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/5521d8-09c6-4814-baa6-c2f2ea31e09e/1/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/5521d8-09c6-4814-baa6-c2f2ea31e09e/1/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:18:0a:fc:8b:38:58:9b:49:c1:b8:0b:d2:54:58:59:29:4b:
         ef:c6:05:e1:2f:0c:97:97:7a:2a:15:ab:77:7c:8e:a7:ee:23:
         ba:51:2d:67:3a:91:9b:90:d5:15:0d:3f:de:1f:f7:55:c2:fa:
         72:59:a5:17:a1:c3:6b:29:3d:3b:7d:38:3a:1b:9a:25:c1:d3:
         66:1d:37:6f:21:38:f5:03:cd:85:ad:28:27:37:90:f3:90:fa:
         1d:ea:25:0c:4b:d9:a1:73:01:db:4d:b1:05:86:bf:77:9d:2b:
         1e:a3:6d:98:a2:99:8d:43:91:42:f6:a1:ca:54:5c:9f:28:73:
         2b:2d:bc:3e:6f:17:54:16:65:0c:65:b1:cd:19:49:79:e9:50:
         8e:df:a2:35:58:d0:28:68:ef:b1:07:58:b0:fb:97:a3:8a:0b:
         69:70:b2:df:f8:67:32:f2:1e:f9:b4:a4:29:e9:a4:ca:5c:5e:
         24:d8:b6:65:d0:84:a9:4d:4f:5b:1a:aa:9d:73:44:f3:e2:87:
         1c:00:ee:6d:0a:a2:70:0c:bc:d0:ff:72:77:80:a4:41:39:a0:
         ef:5d:b5:ed:bc:25:46:d3:d6:2a:90:9b:85:ac:f2:0e:a9:32:
         33:e5:e7:52:09:a4:3f:1b:bd:eb:ef:c9:b4:23:ef:67:66:87:
         ba:14:1d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 11:59:29 2025 by rpki-client