Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft
File:                     ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft (raw, json)
Hash identifier:          I/Ihch1fkn3ZUnEb6rGcfVNcZDE7kKwzxvI++hdeHKE=
Subject key identifier:   41:10:65:2E:98:99:1B:4E:4E:84:98:B5:39:26:85:EE:CD:34:9C:33
Authority key identifier: 64:65:79:56:1E:CA:58:79:A7:47:02:5E:57:98:48:7B:19:CD:2A:97
Certificate issuer:       /CN=646579561eca5879a747025e5798487b19cd2a97
Certificate serial:       0196C2DDD82242891B185CA6CE5FC42FC87D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft
Manifest number:          1538
Signing time:             Mon 12 May 2025 05:00:40 +0000
Manifest this update:     Mon 12 May 2025 05:00:40 +0000
Manifest next update:     Tue 13 May 2025 05:00:40 +0000
Files and hashes:         1: ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl (hash: Cz/A1bZOwbtBV8eOqvnmABlf035huYRVqzIQyk40+Wo=)
                          2: _NGd2dVtQzthWCISF-Y9kIv0e2s.roa (hash: AShb2mdu/vRA1Xh3lQqV4RVoMvbduHSzrk68dqeVwU0=)
                          3: bQ3rdpybFWSSg24nniUWCWtv9Z0.roa (hash: Udp019RNIUS5kM1bsNno1+vbsm4XNBOuegHKERqhO0U=)
                          4: qBoHuNv7znixCyhzyH3L6b4JjMs.roa (hash: 8FVJ5zW+hXKUbs3QXSxUyH4ee1KWcw96gUoDz4eFoqs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 05:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c2:dd:d8:22:42:89:1b:18:5c:a6:ce:5f:c4:2f:c8:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=646579561eca5879a747025e5798487b19cd2a97
        Validity
            Not Before: May 12 05:00:40 2025 GMT
            Not After : May 13 05:00:40 2025 GMT
        Subject: CN=4110652e98991b4e4e8498b5392685eecd349c33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:03:bd:74:82:15:e6:c1:ea:75:7c:f3:a0:10:
                    93:be:64:09:59:17:6a:7b:62:f5:66:31:00:34:c7:
                    60:c2:f3:bf:91:d3:c6:e8:39:4d:a3:7d:cb:91:f0:
                    41:6b:1d:29:8c:16:1a:5c:8e:73:74:84:00:0a:cb:
                    8b:d0:f9:e8:38:a9:76:97:a5:07:c9:99:27:af:f0:
                    b5:a2:59:4d:c7:1e:8f:99:a2:3b:1e:76:f1:12:b0:
                    84:74:16:77:f5:6a:86:cd:11:34:3d:9d:24:ac:08:
                    c9:23:8c:ce:f1:34:aa:23:63:e8:d8:7e:cc:58:51:
                    7b:a7:70:32:cc:56:2e:6b:be:4f:59:0a:fd:95:ab:
                    8d:9f:10:87:86:23:da:e9:e6:91:aa:1e:53:9a:03:
                    41:8d:f4:11:df:8f:d1:29:fe:e9:6a:8b:9b:3e:d8:
                    01:c1:02:57:d5:e4:38:bc:64:2f:df:2b:07:5d:e1:
                    bf:e7:55:1e:52:07:9d:59:fb:17:d3:cb:27:2e:3e:
                    4a:1e:bf:b2:bd:3c:ed:f4:19:1c:29:a5:e0:e2:34:
                    53:8c:48:11:bf:ce:d1:7d:2d:ed:12:f4:81:d1:27:
                    5d:ae:6b:77:7f:11:3c:1d:83:7b:5b:54:72:d8:5d:
                    94:c7:20:c9:75:0a:b6:02:8c:44:75:bc:c1:3c:a0:
                    9e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:10:65:2E:98:99:1B:4E:4E:84:98:B5:39:26:85:EE:CD:34:9C:33
            X509v3 Authority Key Identifier:
                keyid:64:65:79:56:1E:CA:58:79:A7:47:02:5E:57:98:48:7B:19:CD:2A:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:8b:23:6c:93:ef:35:57:1e:39:82:cb:9d:f5:38:62:a3:c7:
         af:91:63:18:30:38:b0:81:5c:46:d2:e9:5b:87:8a:15:e1:7b:
         d2:fb:83:9b:3d:1b:30:91:1a:1f:13:b2:a5:d5:8a:3d:68:5b:
         21:9a:6b:0a:b5:97:93:b1:7f:08:d0:47:0e:ab:96:d1:ba:67:
         5e:03:cf:63:44:b6:b0:d5:06:85:9c:b5:0f:b4:e0:db:a2:7a:
         7e:f8:5f:5c:d5:9b:f4:f3:90:25:6f:7a:ec:78:f5:cd:81:9e:
         fc:17:80:60:98:fb:36:7a:d4:da:0a:b0:0f:39:f6:57:93:24:
         cc:8d:c7:c3:ed:ad:ad:ff:ec:0f:bc:01:08:da:75:9b:bb:86:
         d6:b6:89:4a:53:f1:90:4a:56:ac:a5:98:6b:e9:91:12:5a:2f:
         80:03:1c:97:3f:83:72:77:d1:4d:dc:61:8c:4d:32:7e:a0:ee:
         1b:58:1d:14:88:ad:a1:36:7d:47:c8:aa:56:a9:64:1e:c8:f8:
         9a:3f:c1:aa:68:9c:88:d2:ae:64:f5:a4:47:24:33:41:af:f5:
         1e:e6:3e:42:4f:36:ea:60:47:f3:92:72:02:5e:77:be:aa:16:
         24:e9:d6:7f:9d:bc:5c:98:92:5b:28:75:15:a7:2c:d6:eb:d1:
         78:fe:08:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:02:40 2025 by rpki-client