Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.mft
File:                     rpPMjMqB-gDcU-e4B46RtcEbou8.mft (raw, json)
Hash identifier:          jV04UfZXozu4VIwNsBFuGoEVmTVuY6UUWYduQyCAPyc=
Subject key identifier:   C1:DA:6E:3E:B4:23:40:B0:D4:2D:DF:63:C3:2D:8C:36:33:B6:7C:7C
Authority key identifier: AE:93:CC:8C:CA:81:FA:00:DC:53:E7:B8:07:8E:91:B5:C1:1B:A2:EF
Certificate issuer:       /CN=ae93cc8cca81fa00dc53e7b8078e91b5c11ba2ef
Certificate serial:       0196BC0088670BDF0444232A37305A4B095E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rpPMjMqB-gDcU-e4B46RtcEbou8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.mft
Manifest number:          103C
Signing time:             Sat 10 May 2025 21:01:13 +0000
Manifest this update:     Sat 10 May 2025 21:01:13 +0000
Manifest next update:     Sun 11 May 2025 21:01:13 +0000
Files and hashes:         1: crHez21ajs4tpxPy7D0FO2U5bxU.roa (hash: gCTLggUH/wf+1HoWxwo5Fpy8idWpj7d4gVSkhA0S2qM=)
                          2: rpPMjMqB-gDcU-e4B46RtcEbou8.crl (hash: Ka2ghGjZpfhTRNtK9o7+6vfSDjDM9LPfccpQBfbnK00=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rpPMjMqB-gDcU-e4B46RtcEbou8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 21:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bc:00:88:67:0b:df:04:44:23:2a:37:30:5a:4b:09:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae93cc8cca81fa00dc53e7b8078e91b5c11ba2ef
        Validity
            Not Before: May 10 21:01:13 2025 GMT
            Not After : May 11 21:01:13 2025 GMT
        Subject: CN=c1da6e3eb42340b0d42ddf63c32d8c3633b67c7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d5:57:2b:78:03:65:d3:57:bc:b0:c2:51:a6:
                    90:00:a6:60:58:17:7e:94:4a:4d:a8:95:84:5a:fc:
                    b9:2a:cc:07:94:61:23:8b:f6:e9:0a:18:27:ed:27:
                    c0:75:bb:20:34:db:8a:da:6c:6e:88:f1:09:ec:25:
                    a1:fd:7a:2b:7d:70:f4:1b:d4:bb:0a:8e:9e:e9:3d:
                    b9:88:a5:38:12:03:d9:64:d0:f1:73:6a:94:ca:a8:
                    c8:5c:bb:36:44:32:61:b8:c3:8b:73:66:b4:e2:5b:
                    c3:10:d7:6b:4f:aa:9d:62:4d:76:f3:c7:c1:60:ee:
                    2c:7a:07:95:d8:0a:c7:f0:bc:f0:c6:76:0e:e0:ea:
                    10:b9:d5:b3:c1:c2:4c:c6:41:16:1f:62:29:5e:fa:
                    84:6c:da:b5:65:8b:30:ec:c4:d6:f7:38:fe:18:c3:
                    bd:76:d8:cf:5f:e3:c5:79:f8:30:20:3f:ca:9f:4a:
                    e6:26:12:ee:2a:aa:38:bf:46:53:2b:a0:ec:c4:13:
                    63:d2:1a:12:77:53:1f:58:d5:d8:3a:69:9b:59:43:
                    63:a3:07:20:6c:a5:13:2a:3e:ef:16:1a:14:04:bc:
                    66:dc:97:40:8b:50:f3:c0:48:30:cd:e8:06:bb:71:
                    b5:82:e2:3d:9b:2e:70:91:53:40:a0:72:61:40:5d:
                    05:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:DA:6E:3E:B4:23:40:B0:D4:2D:DF:63:C3:2D:8C:36:33:B6:7C:7C
            X509v3 Authority Key Identifier:
                keyid:AE:93:CC:8C:CA:81:FA:00:DC:53:E7:B8:07:8E:91:B5:C1:1B:A2:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rpPMjMqB-gDcU-e4B46RtcEbou8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:fb:97:e8:22:d6:a9:93:43:62:27:22:69:ed:d5:8e:cc:88:
         df:eb:c2:e2:1b:42:a6:08:47:89:de:2c:19:c8:7d:78:11:d3:
         d0:f8:45:56:c9:f0:84:32:c2:d0:fd:c9:f5:58:0e:3b:b9:2c:
         e5:dc:9d:ab:fd:5a:0d:26:dc:6e:b2:69:06:8c:0e:8c:88:6b:
         ff:0f:14:e4:80:68:67:2f:33:a1:b3:a0:2e:9f:e2:fe:ff:bf:
         23:f0:02:99:09:a0:d7:e6:e7:49:20:41:90:14:a6:1b:d8:0d:
         f8:4e:f1:c4:01:33:e3:1d:57:bb:2f:5b:a2:43:3c:f2:d7:76:
         3b:de:74:ca:58:e0:72:e9:6e:6c:2a:bb:47:fb:de:0d:82:bc:
         5f:d8:13:84:1c:60:ba:3c:af:65:e7:d5:b7:a0:d6:d6:22:ff:
         65:ca:1f:06:81:10:18:8e:ef:26:77:48:22:06:6a:23:15:ad:
         55:b4:11:7d:7c:fb:46:b3:79:06:bd:c4:b8:0a:b8:0b:f8:b5:
         aa:44:b6:a3:c7:3e:5f:95:b0:fe:ec:4d:a1:db:95:56:be:4e:
         27:c4:ec:8b:c9:47:73:30:2a:0a:87:66:be:60:a6:27:fd:c4:
         0b:ef:da:70:65:72:0b:13:1a:3a:23:84:e2:4f:e6:23:50:84:
         6a:91:a7:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 07:35:24 2025 by rpki-client