Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d46a81-3735-42c6-9bbb-1d1799b59c99/1/tLB5uhPORqvsf1vD893Ni7hnWQU.mft
File:                     tLB5uhPORqvsf1vD893Ni7hnWQU.mft (raw, json)
Hash identifier:          XaVZgvszHajFSMSJZC6RYcvqSFWbl8wHUfj5h28hEko=
Subject key identifier:   3F:A6:30:6E:92:AD:DB:77:0D:60:4D:4B:69:0D:20:3C:53:BB:6A:46
Authority key identifier: B4:B0:79:BA:13:CE:46:AB:EC:7F:5B:C3:F3:DD:CD:8B:B8:67:59:05
Certificate issuer:       /CN=b4b079ba13ce46abec7f5bc3f3ddcd8bb8675905
Certificate serial:       0196AA3080889668A706F0A770CD5F05B31D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tLB5uhPORqvsf1vD893Ni7hnWQU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/d46a81-3735-42c6-9bbb-1d1799b59c99/1/tLB5uhPORqvsf1vD893Ni7hnWQU.mft
Manifest number:          1527
Signing time:             Wed 07 May 2025 10:00:27 +0000
Manifest this update:     Wed 07 May 2025 10:00:27 +0000
Manifest next update:     Thu 08 May 2025 10:00:27 +0000
Files and hashes:         1: tLB5uhPORqvsf1vD893Ni7hnWQU.crl (hash: EOmuKjhpgh6q/oY2ZZL+GEGyu6CH/PFq31/UC65jDZA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/d46a81-3735-42c6-9bbb-1d1799b59c99/1/tLB5uhPORqvsf1vD893Ni7hnWQU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/d46a81-3735-42c6-9bbb-1d1799b59c99/1/tLB5uhPORqvsf1vD893Ni7hnWQU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tLB5uhPORqvsf1vD893Ni7hnWQU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 10:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:aa:30:80:88:96:68:a7:06:f0:a7:70:cd:5f:05:b3:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4b079ba13ce46abec7f5bc3f3ddcd8bb8675905
        Validity
            Not Before: May  7 10:00:27 2025 GMT
            Not After : May  8 10:00:27 2025 GMT
        Subject: CN=3fa6306e92addb770d604d4b690d203c53bb6a46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:40:6a:ef:1d:f5:3c:20:73:f2:e4:7e:23:fd:
                    6c:bb:56:9e:47:8e:c2:83:ca:d1:ca:30:57:20:27:
                    7c:71:6c:b9:0a:ff:02:f6:69:12:6c:c3:e6:35:d4:
                    7b:89:52:a2:3e:ff:4f:07:68:c6:75:2b:44:68:cf:
                    bb:fd:7a:7c:86:cf:a9:61:4c:65:a5:a0:49:ce:ac:
                    8a:6b:3e:a5:51:09:be:aa:67:e6:c6:7f:6d:f4:59:
                    b7:c3:cb:77:87:48:0a:5b:b1:11:42:57:0f:7d:d0:
                    fb:c5:dd:3a:df:23:6e:bb:59:a3:89:88:d4:ac:26:
                    b5:a2:cb:52:40:52:ad:02:c4:96:fb:bd:20:95:b0:
                    43:c4:31:ee:f1:be:79:33:de:32:ab:d7:07:9e:f0:
                    d1:4c:2a:dc:6f:9b:11:79:09:8e:83:e0:f3:3e:f3:
                    8f:77:35:1b:77:9e:f0:28:9a:0b:77:61:0f:ce:37:
                    b5:91:11:11:fe:6d:e2:ee:aa:ca:e2:1b:e3:36:3f:
                    c3:b3:54:25:3b:76:b8:30:9b:1a:eb:72:84:48:95:
                    94:56:1f:e9:59:29:5a:3c:f7:d7:bd:56:f4:94:60:
                    5c:1f:52:f4:20:c0:ea:49:95:c9:c2:85:ad:c8:3b:
                    45:be:a7:5d:77:51:5d:dc:f6:f9:15:5a:b6:ee:cc:
                    93:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:A6:30:6E:92:AD:DB:77:0D:60:4D:4B:69:0D:20:3C:53:BB:6A:46
            X509v3 Authority Key Identifier:
                keyid:B4:B0:79:BA:13:CE:46:AB:EC:7F:5B:C3:F3:DD:CD:8B:B8:67:59:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLB5uhPORqvsf1vD893Ni7hnWQU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d46a81-3735-42c6-9bbb-1d1799b59c99/1/tLB5uhPORqvsf1vD893Ni7hnWQU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d46a81-3735-42c6-9bbb-1d1799b59c99/1/tLB5uhPORqvsf1vD893Ni7hnWQU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:a1:87:ff:5f:03:4e:9c:0b:1e:6c:41:aa:eb:03:49:05:79:
         ce:a4:47:fb:48:db:20:ca:99:f0:4d:56:90:53:42:a4:bf:d5:
         98:3a:7a:e6:91:2f:b5:2c:74:b0:e8:ad:7f:5f:c1:17:0d:ac:
         45:0e:93:5e:08:f8:29:e2:22:b0:11:e3:60:5c:3d:7a:cd:85:
         0c:3c:7c:f8:36:6b:70:bc:00:41:6b:22:29:83:7e:b5:59:90:
         9c:21:9c:db:41:65:09:e1:df:eb:4e:19:1b:13:95:04:b6:07:
         64:42:1a:aa:cb:fa:6d:1a:22:4e:0c:87:99:42:5e:a1:8c:64:
         96:1c:56:34:e0:70:a7:1e:5f:4c:ba:36:c0:9d:b3:07:4e:a1:
         aa:ba:73:ca:2b:51:fe:10:29:57:96:80:64:95:f4:d4:39:67:
         9a:86:62:28:8c:7a:76:09:f0:45:37:dc:5b:4b:81:c1:4b:d6:
         b9:76:0b:30:8b:6f:89:fb:80:52:66:d1:7d:4e:e3:91:bf:a3:
         e7:1d:b2:f4:2c:56:e7:5d:a4:24:14:28:d2:a4:e2:f7:ee:90:
         c5:b6:e1:0f:2d:02:59:0c:b4:30:97:f8:02:81:0a:38:6a:cf:
         d7:b3:e1:3b:e7:3c:be:d1:3c:59:7d:24:c0:85:a1:df:a1:78:
         0d:e1:66:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 20:36:39 2025 by rpki-client