Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.mft
File:                     10L6T7KPryihjordTBDJYzfDxMU.mft (raw, json)
Hash identifier:          VupzWkQ9Szf8IDPUMgVyp2oMKh89PBFSBkZGgMqbTP4=
Subject key identifier:   01:8E:29:CB:CE:4D:39:8F:26:5E:68:0F:A0:B3:04:96:DA:B5:30:09
Authority key identifier: D7:42:FA:4F:B2:8F:AF:28:A1:8E:8A:DD:4C:10:C9:63:37:C3:C4:C5
Certificate issuer:       /CN=d742fa4fb28faf28a18e8add4c10c96337c3c4c5
Certificate serial:       0196BD809E805FA90E5C4254CDB816EEB080
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/10L6T7KPryihjordTBDJYzfDxMU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.mft
Manifest number:          1532
Signing time:             Sun 11 May 2025 04:00:45 +0000
Manifest this update:     Sun 11 May 2025 04:00:45 +0000
Manifest next update:     Mon 12 May 2025 04:00:45 +0000
Files and hashes:         1: 10L6T7KPryihjordTBDJYzfDxMU.crl (hash: K70T5JHQxxhFew22OsG8mBGJslX5QNNLss5UJuLom3A=)
                          2: DIiJmhkGPOYoFSzKU5OJGHxPZv0.roa (hash: wVFQMX+v03An5N7stfoX0LOfftlraoV2nDd1HWqmadg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/10L6T7KPryihjordTBDJYzfDxMU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 04:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bd:80:9e:80:5f:a9:0e:5c:42:54:cd:b8:16:ee:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d742fa4fb28faf28a18e8add4c10c96337c3c4c5
        Validity
            Not Before: May 11 04:00:45 2025 GMT
            Not After : May 12 04:00:45 2025 GMT
        Subject: CN=018e29cbce4d398f265e680fa0b30496dab53009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f0:7e:49:b4:bf:da:ef:ed:b5:00:2e:a3:43:
                    d8:03:6f:9b:b7:14:b4:59:d9:ac:60:a6:10:95:64:
                    92:9d:f1:4f:66:5c:75:df:63:7f:a4:c0:dc:36:f1:
                    f8:95:49:a7:15:90:b5:05:fc:ac:35:7a:d1:89:2d:
                    f0:8b:4a:47:45:69:e0:3d:ec:8a:23:c0:64:c0:cb:
                    83:60:94:79:32:e7:48:9f:9d:c5:d8:db:1b:e6:b7:
                    e3:1f:5a:97:f5:41:10:79:bd:c2:d8:28:96:b8:3f:
                    2b:0a:0e:c4:46:25:b1:fb:72:1e:73:7a:eb:d6:80:
                    f2:62:28:c0:d8:8d:3f:e1:4a:67:7b:24:17:5c:ff:
                    ec:6c:cc:34:bd:68:4d:16:e2:1b:2f:45:fe:f0:52:
                    dc:ce:80:fc:ab:e2:aa:a9:a5:b3:b2:d1:00:29:7c:
                    02:70:c2:4a:c5:33:cd:30:c3:0e:3f:97:77:27:3c:
                    38:66:de:36:c0:ef:96:82:8d:a2:5d:d4:b0:02:c5:
                    09:cd:3d:d0:c4:cc:33:97:34:19:5d:cf:4e:cc:a5:
                    83:f8:a9:f6:8e:78:85:2e:b6:d4:65:5a:da:16:ba:
                    ce:2b:e3:ac:21:03:71:f1:5e:ee:12:55:08:5e:3d:
                    ab:a5:aa:c8:2d:76:f8:27:bd:d6:c2:7f:2e:79:90:
                    98:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:8E:29:CB:CE:4D:39:8F:26:5E:68:0F:A0:B3:04:96:DA:B5:30:09
            X509v3 Authority Key Identifier:
                keyid:D7:42:FA:4F:B2:8F:AF:28:A1:8E:8A:DD:4C:10:C9:63:37:C3:C4:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10L6T7KPryihjordTBDJYzfDxMU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:a2:71:d2:e6:0b:9c:20:50:0c:02:bb:88:74:c0:aa:66:ff:
         a7:d0:ef:22:49:65:0e:39:e9:86:d1:03:6b:26:96:88:ba:d8:
         e6:ac:ed:bb:b8:71:46:a0:6e:20:c9:28:ef:2f:2b:8b:f3:4d:
         e9:4e:1a:f5:4d:a5:6b:a9:78:87:de:7c:2d:0d:8b:c6:b2:40:
         8f:3e:aa:7c:4b:98:5b:ff:00:5b:fd:a2:0b:8b:fe:00:ff:6f:
         6a:3b:77:ce:9c:c8:7a:a7:26:88:5d:87:8c:36:9c:86:67:4b:
         d6:b9:d2:e2:02:a5:8b:ac:ff:02:d0:a2:c7:83:79:40:7f:3d:
         14:a9:02:67:33:8d:d8:c9:38:38:06:c7:34:af:e2:6d:3f:19:
         9e:78:c2:1f:97:b8:92:eb:d7:ee:69:27:a1:ed:c1:b2:2e:73:
         bc:06:e7:c9:3c:63:21:d7:84:dc:80:0c:e7:c3:ef:61:6d:d3:
         57:92:c3:a1:b6:a2:e5:7b:84:5a:0c:85:77:c2:5e:1a:63:64:
         30:d8:6b:14:2a:d8:1d:e6:b6:e2:5c:dc:ce:19:6c:30:11:aa:
         6c:53:f7:bf:22:cd:42:88:cb:0f:fd:48:05:7e:cb:8a:84:38:
         c7:31:30:b0:5f:f0:62:1b:fd:a9:ba:3a:b1:bc:ff:2c:40:35:
         c2:dd:60:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:39:57 2025 by rpki-client