Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
File:                     32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft (raw, json)
Hash identifier:          mozY2o/3eyo/EAb0kDUxbc3U+qyAEi6a1kYdEB4UhXw=
Subject key identifier:   7A:92:9A:E1:8F:4F:EC:25:D2:A0:E1:20:98:C7:E9:90:AC:EC:96:2A
Authority key identifier: DF:6A:92:67:B1:8B:36:D8:28:89:0A:86:38:7F:31:0B:84:C0:4B:63
Certificate issuer:       /CN=df6a9267b18b36d828890a86387f310b84c04b63
Certificate serial:       0196C9169E333A58A6BC92341A3230F2FF86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
Manifest number:          0CD3
Signing time:             Tue 13 May 2025 10:00:24 +0000
Manifest this update:     Tue 13 May 2025 10:00:24 +0000
Manifest next update:     Wed 14 May 2025 10:00:24 +0000
Files and hashes:         1: 32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl (hash: 5J6OuombYGy4+74z2X6HIGyLf4RsI3f1rBAnFavu760=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 10:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c9:16:9e:33:3a:58:a6:bc:92:34:1a:32:30:f2:ff:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6a9267b18b36d828890a86387f310b84c04b63
        Validity
            Not Before: May 13 10:00:24 2025 GMT
            Not After : May 14 10:00:24 2025 GMT
        Subject: CN=7a929ae18f4fec25d2a0e12098c7e990acec962a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:87:83:1f:66:f1:37:f8:31:97:fc:8a:92:5a:
                    57:28:31:a9:f1:a9:5a:d5:df:24:c1:0f:f5:51:03:
                    a0:ec:21:7e:f9:b8:97:7c:4f:7e:09:66:66:13:04:
                    81:ac:f4:62:ac:44:81:34:63:50:9e:fd:d4:ca:89:
                    54:5e:61:cb:29:fd:17:6a:39:c9:86:69:ce:3d:69:
                    d6:5a:02:f3:c9:19:af:6c:6a:1c:c8:54:47:73:49:
                    30:de:ee:5d:4e:68:a9:c2:5d:2f:20:ac:8c:ad:19:
                    9c:48:73:85:ef:06:fc:fb:d5:31:75:7c:f8:7a:0c:
                    46:ac:72:8b:bb:83:0c:68:00:46:83:94:5c:af:68:
                    f5:16:6e:bc:08:11:cc:1f:5f:70:af:de:e5:e4:93:
                    bf:dd:14:f3:a1:32:07:2b:45:8a:70:26:a8:9f:91:
                    6f:c7:97:8a:7c:6d:34:21:da:34:36:2a:76:90:28:
                    ba:89:e8:73:8b:27:e4:50:39:e3:47:73:bc:e6:2a:
                    e7:1c:24:21:74:f0:a5:b2:db:22:7d:13:e9:03:6b:
                    d4:4d:d2:7b:b3:59:71:6e:7b:ec:60:2c:1b:ff:6f:
                    8f:51:e0:0e:17:47:af:dd:a8:d8:27:1a:f4:ee:a4:
                    f7:55:2a:53:24:93:63:46:5d:e1:81:89:64:75:ae:
                    df:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:92:9A:E1:8F:4F:EC:25:D2:A0:E1:20:98:C7:E9:90:AC:EC:96:2A
            X509v3 Authority Key Identifier:
                keyid:DF:6A:92:67:B1:8B:36:D8:28:89:0A:86:38:7F:31:0B:84:C0:4B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:07:91:d0:f7:0a:cc:b9:c5:78:c6:17:f8:56:51:01:85:8f:
         bb:a9:5b:bb:c6:dd:c0:29:c2:1f:35:86:c8:b2:9b:2d:af:20:
         d3:7c:db:4b:47:86:63:3d:fc:93:c7:b8:de:08:63:1b:60:7e:
         27:b9:f0:5d:04:f5:eb:48:67:80:de:e9:93:32:46:20:d0:db:
         c6:24:82:8b:b2:b6:67:ad:e5:2d:75:8a:07:0f:c2:24:34:6c:
         89:3e:29:af:43:f7:d0:d5:18:bb:e1:58:92:e8:d7:67:4a:68:
         9f:58:3e:1b:08:2f:0f:ab:ac:7d:12:c4:56:8a:fb:df:83:91:
         1e:92:c7:cd:18:23:0e:6c:66:02:60:bc:f6:d4:04:53:e8:28:
         30:3b:0f:e6:72:db:5f:b5:56:f3:9c:68:55:0e:dd:95:8e:86:
         e4:65:34:8c:aa:e6:b3:cd:39:65:11:b4:2d:1a:8b:a0:36:c2:
         cb:f3:13:23:36:86:e9:b0:6f:9a:08:5d:9c:87:81:85:ca:a1:
         64:aa:e9:99:25:dc:12:22:8a:82:2f:28:0f:0c:10:bc:3f:3f:
         7c:29:7d:9a:ad:78:61:1d:9f:6d:69:a6:60:00:b0:be:36:89:
         e4:a9:12:80:b9:8b:59:91:b6:e2:06:82:2d:ef:a3:4e:60:63:
         43:d1:69:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 20:18:29 2025 by rpki-client