Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.mft
File:                     4Qh-Lw3ylv4R527kwQF7zxIFsvA.mft (raw, json)
Hash identifier:          KX4MtXQd7XIArYugndgqAjj/PipX38J8QyH/h02mjgI=
Subject key identifier:   F9:6D:C7:27:0B:4D:2E:F8:D7:75:24:4A:65:05:CF:01:4F:0D:73:8F
Authority key identifier: E1:08:7E:2F:0D:F2:96:FE:11:E7:6E:E4:C1:01:7B:CF:12:05:B2:F0
Certificate issuer:       /CN=e1087e2f0df296fe11e76ee4c1017bcf1205b2f0
Certificate serial:       0196B0D751EC042B208E125FCEFB3C2E37B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Qh-Lw3ylv4R527kwQF7zxIFsvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.mft
Manifest number:          1151
Signing time:             Thu 08 May 2025 17:00:23 +0000
Manifest this update:     Thu 08 May 2025 17:00:23 +0000
Manifest next update:     Fri 09 May 2025 17:00:23 +0000
Files and hashes:         1: 4Qh-Lw3ylv4R527kwQF7zxIFsvA.crl (hash: 4oj+hoOD6+VOEAIZ7X288a8ghoZoVvG5Dg9ROOYbo0E=)
                          2: sG880b_RPrGdA8qdnVRGDqdPZs8.roa (hash: FkxQnvLlTo8fZxDMmVUsA4H8Po5+5uIaGq9jK/9F1N0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Qh-Lw3ylv4R527kwQF7zxIFsvA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 15:42:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b0:d7:51:ec:04:2b:20:8e:12:5f:ce:fb:3c:2e:37:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1087e2f0df296fe11e76ee4c1017bcf1205b2f0
        Validity
            Not Before: May  8 17:00:23 2025 GMT
            Not After : May  9 17:00:23 2025 GMT
        Subject: CN=f96dc7270b4d2ef8d775244a6505cf014f0d738f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:15:ce:74:cb:4c:9d:62:11:73:19:a0:7f:53:
                    34:78:b1:59:0f:c4:29:9c:86:d9:83:da:4c:12:5b:
                    2a:3d:08:7c:dc:32:9b:a4:f2:75:65:4b:85:16:24:
                    a8:46:69:70:a8:3f:40:88:40:42:45:06:11:6f:8f:
                    e7:32:ad:3a:73:07:94:08:d5:77:7d:71:6b:67:5c:
                    54:2e:4b:7d:cf:92:f8:02:b1:ef:11:b3:5b:a2:63:
                    fc:e2:4c:ce:68:4b:22:94:02:b8:32:cd:26:b4:5a:
                    6b:f8:ce:a9:f1:57:ee:99:f7:d1:4f:3a:d3:cc:bc:
                    2d:56:9e:0d:18:aa:8d:6d:cf:8a:9e:34:18:e8:32:
                    43:c5:ce:f1:ea:e6:05:be:52:15:a8:2e:c4:8c:f6:
                    eb:55:37:32:80:5a:25:d4:ff:60:fb:ae:f9:22:5b:
                    3a:2a:f2:88:16:70:26:1e:e9:83:ad:d1:43:b1:e2:
                    f8:e0:55:bc:db:55:cb:74:9c:98:2f:b3:a6:57:c1:
                    56:df:4f:c0:77:99:0d:fc:9d:b2:d2:03:78:35:7e:
                    a0:f2:97:69:16:65:e1:8a:1d:98:73:16:8e:7f:cb:
                    d6:b7:89:25:e8:6a:50:8a:2d:40:a6:28:74:da:0e:
                    6c:c6:62:75:b1:c8:ad:9b:ec:f6:b1:cb:78:0a:34:
                    f4:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:6D:C7:27:0B:4D:2E:F8:D7:75:24:4A:65:05:CF:01:4F:0D:73:8F
            X509v3 Authority Key Identifier:
                keyid:E1:08:7E:2F:0D:F2:96:FE:11:E7:6E:E4:C1:01:7B:CF:12:05:B2:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Qh-Lw3ylv4R527kwQF7zxIFsvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:57:e9:02:1a:96:99:bc:7c:73:b0:45:6f:bb:67:17:9f:46:
         80:c7:36:5a:7d:33:dc:c5:9e:59:17:6e:69:c1:c0:9b:b4:63:
         3d:0b:c3:1c:fe:48:a6:82:65:ad:3d:12:c6:8c:eb:f7:b7:44:
         e3:86:5d:51:8c:c5:f4:47:82:d9:c3:0c:1d:3f:7e:6e:54:ba:
         eb:80:07:fa:d9:61:a8:eb:c5:c4:bd:56:0f:51:af:ca:7a:4d:
         fb:4d:2b:b0:10:13:de:d7:04:46:f6:ec:b6:ba:c5:60:cc:06:
         a5:a1:bb:cd:f3:56:89:4c:e1:99:cd:1d:50:2d:e9:39:54:67:
         2c:20:8a:42:77:43:6c:8d:f7:37:eb:c3:68:b5:a3:a3:b9:d8:
         01:cb:0e:a7:a4:4f:03:b3:81:b5:23:93:2f:89:ea:6e:9e:27:
         6e:59:14:14:79:d3:21:55:27:b4:6c:0e:5e:12:16:10:3a:7f:
         6e:a6:40:f2:2b:f3:22:82:9a:71:f4:91:af:a1:74:1a:58:14:
         59:4e:c1:9a:ee:32:dc:af:a7:11:de:a1:f6:54:4c:10:71:69:
         7f:5f:86:93:4d:40:59:51:e0:9f:fb:16:f9:57:ad:e5:95:90:
         4a:a6:f7:1d:47:5e:a5:f6:55:c4:33:fa:67:d4:68:3e:22:11:
         13:44:4b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 00:01:36 2025 by rpki-client