Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft
File:                     tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft (raw, json)
Hash identifier:          jjqmLCsfAvVqm6MEn/c4aWVlltqYqnklGZAaM0Oy6Ik=
Subject key identifier:   73:33:2F:EE:9D:FD:D8:EC:8C:ED:72:28:D8:CF:9B:58:45:FE:4E:76
Authority key identifier: B4:43:B3:48:6D:E7:82:6F:D6:B0:E2:AE:C0:26:59:7B:62:07:B3:73
Certificate issuer:       /CN=b443b3486de7826fd6b0e2aec026597b6207b373
Certificate serial:       01969DF561C709CD2880974FAC1ADC2D4428
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tEOzSG3ngm_WsOKuwCZZe2IHs3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft
Manifest number:          0587
Signing time:             Mon 05 May 2025 01:00:26 +0000
Manifest this update:     Mon 05 May 2025 01:00:26 +0000
Manifest next update:     Tue 06 May 2025 01:00:26 +0000
Files and hashes:         1: tEOzSG3ngm_WsOKuwCZZe2IHs3M.crl (hash: oAeh6qMyXA4WxcTzFV7/l/8Fm1Ud/W+TJAfN1hHqER8=)
                          2: wT4e9Ao8jFQGwyLrCGIT4nZjT4c.roa (hash: pBWXcPqjDxvwQjU9omFEQSPm1JUMryg0VPK+ErbtywE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tEOzSG3ngm_WsOKuwCZZe2IHs3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9d:f5:61:c7:09:cd:28:80:97:4f:ac:1a:dc:2d:44:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b443b3486de7826fd6b0e2aec026597b6207b373
        Validity
            Not Before: May  5 01:00:26 2025 GMT
            Not After : May  6 01:00:26 2025 GMT
        Subject: CN=73332fee9dfdd8ec8ced7228d8cf9b5845fe4e76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d1:a3:3f:4a:2b:5e:04:b7:d8:dc:b8:4f:48:
                    a4:4e:f1:84:d7:5d:33:72:67:c0:ef:06:dd:96:66:
                    1c:11:b9:b5:dd:ff:52:b0:59:20:a6:56:4c:1b:8f:
                    f0:cf:e4:f4:b0:45:da:8e:75:3d:63:2a:5c:03:ee:
                    bf:51:3c:a6:49:53:a1:8a:cb:93:9e:0b:6c:16:d3:
                    d1:75:16:9b:94:e7:4c:df:81:ba:32:ce:13:d7:d2:
                    6b:b7:15:1d:c9:1e:b3:63:e4:fa:ac:2d:fd:3a:59:
                    9f:df:ea:33:4d:df:d9:6c:46:62:aa:cc:b3:ff:0f:
                    79:9c:0f:db:0d:73:6f:3a:2b:71:f8:aa:e5:1f:0c:
                    af:84:ed:2b:1d:97:4a:f5:60:b3:4d:81:1c:e9:4d:
                    f9:ec:9e:e6:aa:1e:48:f6:45:69:d8:76:48:04:d3:
                    d3:b0:36:17:b7:94:80:2d:a4:47:7a:7c:6f:36:c6:
                    6a:a3:f5:85:53:b8:b7:dd:12:fb:a6:c0:51:14:21:
                    88:b5:c3:26:69:e6:a7:1d:ad:76:d0:72:16:1e:67:
                    4b:5e:f9:4c:b7:60:9d:21:96:ba:98:15:5a:85:b8:
                    8d:f4:76:c8:b4:ea:27:02:54:a6:5b:83:1a:bf:9b:
                    83:b0:65:b5:2c:e6:c1:4a:76:5b:84:5f:12:6e:42:
                    ce:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:33:2F:EE:9D:FD:D8:EC:8C:ED:72:28:D8:CF:9B:58:45:FE:4E:76
            X509v3 Authority Key Identifier:
                keyid:B4:43:B3:48:6D:E7:82:6F:D6:B0:E2:AE:C0:26:59:7B:62:07:B3:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEOzSG3ngm_WsOKuwCZZe2IHs3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:10:3e:dc:af:fe:e3:72:94:36:5a:9c:bc:f7:e9:76:34:99:
         7e:a0:1e:a8:6f:88:51:af:d0:18:55:c9:41:90:89:b3:b0:f7:
         e0:4f:da:ce:c4:37:a7:a2:63:c7:e0:c6:61:0a:e0:d0:5a:a5:
         73:57:48:1b:d5:5a:34:39:c6:bf:89:ea:1f:b8:6e:8b:da:99:
         59:41:0b:54:7b:fd:cb:81:10:d5:6c:c8:5c:1f:81:92:12:9a:
         83:81:da:33:9a:e5:26:64:35:37:1f:87:b6:94:48:e0:94:02:
         95:cd:b2:27:a5:1e:e8:82:14:ed:7d:9d:91:4f:98:db:8b:d6:
         5c:bd:39:70:7e:e4:fb:f9:fa:20:a3:06:3d:20:0b:41:09:76:
         46:89:85:21:6e:14:23:c2:5e:57:1c:c9:50:32:3f:69:53:dd:
         56:b1:9a:9d:06:b2:f5:dd:0d:dc:9c:1c:48:01:c8:a2:2f:7f:
         db:e1:30:ea:79:81:4d:ef:5f:b5:21:34:a1:09:c7:f4:0d:17:
         d4:4e:a9:c6:65:81:84:ce:04:60:17:51:09:3c:82:29:c0:31:
         f6:32:9f:0f:14:fe:2d:ac:b8:8f:0c:a5:ac:96:be:fe:d7:1b:
         ad:fc:bf:d4:f9:8e:d1:1b:20:51:79:d4:53:f9:28:81:b3:c8:
         40:89:cf:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 04:52:34 2025 by rpki-client