Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.mft
File:                     dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.mft (raw, json)
Hash identifier:          JzClKOorahvWj+Xl2uayGz4ijyNy/6qf6lkHy4WWk9c=
Subject key identifier:   C8:D7:6C:1E:3E:78:89:6D:33:93:13:C5:25:0B:7B:0E:20:1A:CE:1A
Authority key identifier: 74:5D:BA:56:CF:1F:FC:2C:FC:1D:05:F4:FA:83:31:17:EF:D7:C7:8A
Certificate issuer:       /CN=745dba56cf1ffc2cfc1d05f4fa833117efd7c78a
Certificate serial:       0196BAB6427F1C8995D4B893789C805FAA0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.mft
Manifest number:          04C7
Signing time:             Sat 10 May 2025 15:00:28 +0000
Manifest this update:     Sat 10 May 2025 15:00:28 +0000
Manifest next update:     Sun 11 May 2025 15:00:28 +0000
Files and hashes:         1: dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.crl (hash: GsFXPUb/sstPcpoZ/Ro0ri5lRd8OHvgPaPprMOOTljc=)
                          2: f7NzzdifL8oVbmQEX_FaWaX9d8Y.roa (hash: f6fUQrnWj0Ply8n/xjNr8BkToE1SYVL6yBIWZoWRSsQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ba:b6:42:7f:1c:89:95:d4:b8:93:78:9c:80:5f:aa:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=745dba56cf1ffc2cfc1d05f4fa833117efd7c78a
        Validity
            Not Before: May 10 15:00:28 2025 GMT
            Not After : May 11 15:00:28 2025 GMT
        Subject: CN=c8d76c1e3e78896d339313c5250b7b0e201ace1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:aa:50:f3:8f:7a:02:8a:b5:41:9d:df:46:dd:
                    df:85:f6:c6:29:b2:08:c3:86:95:8e:96:56:b9:4d:
                    60:9c:84:a9:a0:cc:6c:91:fd:f2:7c:2f:76:ee:1c:
                    39:5e:d1:31:f2:70:a9:88:2c:a7:a0:a3:40:51:56:
                    a3:8a:d0:1e:43:66:18:4f:03:93:10:75:87:be:f4:
                    b5:eb:83:e1:5a:0b:86:1a:62:4d:e7:a3:7c:45:a2:
                    4f:1d:4f:5e:6b:3c:52:c6:ac:f0:12:f6:c2:8b:b4:
                    5c:fa:29:1e:67:b3:f6:8b:f6:c5:6a:e0:48:8e:8a:
                    1c:d0:0b:9f:f9:1e:d8:3e:75:7b:59:74:96:b4:f9:
                    67:e1:70:89:08:aa:8d:ff:75:03:d8:f3:e5:13:8d:
                    8a:a6:19:59:28:c3:71:f0:7b:a1:f5:79:34:4c:01:
                    1c:b1:cd:ae:16:b2:8f:31:d2:cc:aa:b9:58:82:b1:
                    29:36:75:85:75:1f:82:d1:3f:4e:f1:4c:fa:28:59:
                    9d:eb:57:3b:17:54:30:04:b1:3e:c4:23:e9:a8:45:
                    09:cf:c4:2c:00:43:8e:71:2d:9a:4a:d6:31:a8:d0:
                    93:73:ff:77:48:0e:81:8e:b2:bd:05:ce:e2:f2:1d:
                    0e:04:db:b0:b5:01:88:e5:4c:ac:6c:20:db:9a:47:
                    7c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:D7:6C:1E:3E:78:89:6D:33:93:13:C5:25:0B:7B:0E:20:1A:CE:1A
            X509v3 Authority Key Identifier:
                keyid:74:5D:BA:56:CF:1F:FC:2C:FC:1D:05:F4:FA:83:31:17:EF:D7:C7:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:77:a4:bc:2e:e0:15:48:c0:e2:45:04:dd:26:2d:b4:f9:8b:
         1b:9f:17:6c:0c:52:29:8c:2e:d9:3f:70:b9:02:c5:9f:2c:14:
         c9:28:ea:a0:8f:eb:d6:08:90:25:59:87:a1:c4:26:34:54:2a:
         11:df:a6:e3:3c:d1:32:8b:61:7a:b6:03:95:16:dd:17:61:e1:
         b3:39:78:b1:05:79:46:d5:81:d6:b0:c7:f0:00:d4:7c:fb:af:
         1e:fb:35:3d:b5:b2:bd:38:04:b0:63:bf:bc:59:24:48:47:ff:
         17:ff:fb:b6:a4:2a:e6:cc:88:62:52:20:b5:91:a4:cb:b1:5f:
         5d:b7:a9:db:45:61:9e:0e:0a:fa:8d:ef:2f:10:39:04:71:cc:
         37:db:44:52:79:b7:64:c7:36:5b:ba:44:91:37:1a:0f:16:e1:
         0f:e7:73:b2:4e:39:5a:bf:73:16:63:cf:04:6d:c3:89:8c:65:
         63:d5:be:1b:71:e6:2c:ef:46:24:2f:d4:06:99:19:f9:21:b7:
         15:ca:c7:4e:1d:68:c6:2d:c4:7f:ab:42:b2:16:eb:e7:1d:38:
         69:4a:30:7a:c0:f3:47:47:da:60:ac:e2:eb:4f:66:5e:77:40:
         d5:d9:c6:c2:a2:d9:e9:d2:d8:b0:c8:16:e2:10:a2:5e:ba:0a:
         8f:57:6d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:19:45 2025 by rpki-client