Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.mft
File:                     V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.mft (raw, json)
Hash identifier:          deFvslIQhMsCWbrlWPsiK9Mmoisjzdk1yP3dUUMq+/Q=
Subject key identifier:   96:1C:EE:95:E5:5C:92:FD:FF:D6:36:C4:C6:65:29:1E:F1:8C:82:8C
Authority key identifier: 57:7C:0C:D5:A4:CF:D8:3D:49:1D:62:7D:8B:0F:CC:B6:70:E8:15:34
Certificate issuer:       /CN=577c0cd5a4cfd83d491d627d8b0fccb670e81534
Certificate serial:       0196A3F768B82F40D48B8BB42E2DD5233396
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.mft
Manifest number:          1528
Signing time:             Tue 06 May 2025 05:00:22 +0000
Manifest this update:     Tue 06 May 2025 05:00:22 +0000
Manifest next update:     Wed 07 May 2025 05:00:22 +0000
Files and hashes:         1: Mdhc0HErAhKi4LnGQpbnvACoaqA.roa (hash: +lWO/9SWCJf5PkUWv0wqllxzcN5TlPPfmkgBPh2/u3g=)
                          2: V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.crl (hash: 0kc0+fWk6y6cb6BeFTKB/GonMOadlbcUGdh4kM56wns=)
                          3: VUyZ_zKhYSMF7CpPOWFsSapK1tk.roa (hash: fLzRsJYT3JBvdVXuFhvXEM3hZiRHVYIv+xDZIaxAjAU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a3:f7:68:b8:2f:40:d4:8b:8b:b4:2e:2d:d5:23:33:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=577c0cd5a4cfd83d491d627d8b0fccb670e81534
        Validity
            Not Before: May  6 05:00:22 2025 GMT
            Not After : May  7 05:00:22 2025 GMT
        Subject: CN=961cee95e55c92fdffd636c4c665291ef18c828c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5c:22:79:5d:ea:86:04:ff:ca:65:69:99:2b:
                    94:d7:33:e0:ba:b7:17:f6:a5:5b:0a:25:5e:ad:28:
                    fc:86:fd:40:7a:03:67:80:fe:44:40:4e:24:04:b4:
                    23:15:80:50:52:0f:d2:44:ae:55:72:82:2f:34:61:
                    a4:fa:4f:31:b9:12:01:13:24:c1:95:9e:30:74:9f:
                    f5:91:dc:62:cf:3c:4c:97:e0:49:ee:b8:56:f1:18:
                    dc:1a:46:e3:20:f5:f7:21:41:07:5e:4d:fb:e0:89:
                    13:5d:45:22:55:03:cc:c2:d7:05:7f:dd:2a:39:e6:
                    30:9e:ef:2c:10:3d:45:1b:f9:a2:e2:59:ca:08:3a:
                    e1:05:36:09:ba:dc:34:b9:42:e6:6c:e2:a0:d3:c1:
                    d3:50:53:75:33:e0:3b:fb:06:90:9b:b6:b6:3b:5a:
                    e0:3a:bd:1b:5c:07:ae:13:a9:9a:1f:3b:85:dd:ee:
                    96:f1:32:ec:fd:9c:ba:b5:a7:22:30:c8:10:4d:e4:
                    13:18:63:41:76:87:c4:f6:28:19:9e:91:5b:a3:20:
                    4e:2a:1f:b9:85:de:f8:76:71:81:70:5d:21:02:23:
                    86:36:5b:13:e1:72:79:6e:45:7c:5b:7b:4b:2e:03:
                    51:2d:04:82:52:50:41:cb:1b:a3:08:f1:45:4c:11:
                    be:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:1C:EE:95:E5:5C:92:FD:FF:D6:36:C4:C6:65:29:1E:F1:8C:82:8C
            X509v3 Authority Key Identifier:
                keyid:57:7C:0C:D5:A4:CF:D8:3D:49:1D:62:7D:8B:0F:CC:B6:70:E8:15:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:22:67:55:91:26:41:44:4a:75:0c:b9:6b:b9:ea:1e:ff:9b:
         77:17:90:3e:c9:de:54:04:ce:bd:e0:58:39:22:ed:a5:a1:dd:
         66:07:0b:f0:74:0d:bd:83:97:6d:f8:28:3f:4c:59:08:cb:7b:
         48:1a:55:f2:74:bd:33:42:1b:a4:52:78:43:db:fd:18:75:d5:
         23:c1:b5:c5:11:c8:45:2b:f4:c8:40:59:64:f2:01:57:7a:5c:
         13:ec:5b:bc:6e:77:4d:f6:b5:41:ee:29:b8:e6:36:77:57:0d:
         47:65:80:e0:1e:96:87:d8:7d:e4:de:09:48:d1:83:1f:f5:95:
         33:86:6b:b6:36:fc:11:7a:b9:20:38:02:c7:ff:b5:fd:69:ef:
         65:66:b3:98:b8:47:36:44:6f:3e:75:34:b2:80:f4:a4:f0:ee:
         8b:ef:78:16:96:fe:80:5e:b8:e1:02:8c:c6:b4:3b:1d:13:b8:
         18:c8:0a:a1:ab:6f:a3:7b:a8:27:b1:1a:70:68:0c:83:3e:6f:
         06:43:9c:ae:57:64:44:9b:15:32:a9:4d:07:61:96:1e:f9:4f:
         83:53:5d:e9:e8:ee:e9:2c:c1:46:30:57:ba:fb:ba:b6:4b:3c:
         1f:3d:a5:b4:7e:97:30:36:ea:c4:c9:87:c2:75:4c:5a:40:4f:
         07:70:b4:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 07:50:17 2025 by rpki-client