Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft
File:                     C7PnOqi38K872EAFctrnKw1G9Vw.mft (raw, json)
Hash identifier:          CcGJGO/+U17yFGCTUuqTb2APDjgOldHA8boLFkhG/vI=
Subject key identifier:   E0:54:0E:A7:69:4C:69:08:E1:27:34:54:F0:B0:B0:5E:B1:ED:9B:F7
Authority key identifier: 0B:B3:E7:3A:A8:B7:F0:AF:3B:D8:40:05:72:DA:E7:2B:0D:46:F5:5C
Certificate issuer:       /CN=0bb3e73aa8b7f0af3bd8400572dae72b0d46f55c
Certificate serial:       0196A1D27A79D623EF97822DD42A5155ACD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C7PnOqi38K872EAFctrnKw1G9Vw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft
Manifest number:          09FB
Signing time:             Mon 05 May 2025 19:00:47 +0000
Manifest this update:     Mon 05 May 2025 19:00:47 +0000
Manifest next update:     Tue 06 May 2025 19:00:47 +0000
Files and hashes:         1: C7PnOqi38K872EAFctrnKw1G9Vw.crl (hash: 8xEWETNjR0ycFzFHnlxw/NzF44Y36qqyV4lQOc1v/+k=)
                          2: GhTmp19MKGrha68k8FSg5O3MOXs.roa (hash: msOVTHZ3+no8UhxlXFgsYby23Ic3zy+iOJwGwYJ533I=)
                          3: Im4zxAMioTMqKC_fblhr89BdW9U.roa (hash: PwyZcrDl2J3l1qTk1V9UdAnL8AN0a6ZWTpBERNBo1l8=)
                          4: MumbOUHt0sHDCso0-2Ld1ziw4ko.roa (hash: Wd99B13Tv2rYBvmAX16EYI4hqMJzUtPVIMZe+9Oq6HU=)
                          5: aubQYKYuI6MIHGp2nchWjbFhUU4.roa (hash: 2F+ILSELYXvb+ZAKX5VNzDJvloBcFe6YEc5yS5L5tl0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C7PnOqi38K872EAFctrnKw1G9Vw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 18:19:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a1:d2:7a:79:d6:23:ef:97:82:2d:d4:2a:51:55:ac:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bb3e73aa8b7f0af3bd8400572dae72b0d46f55c
        Validity
            Not Before: May  5 19:00:47 2025 GMT
            Not After : May  6 19:00:47 2025 GMT
        Subject: CN=e0540ea7694c6908e1273454f0b0b05eb1ed9bf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:18:a0:fe:45:c0:4c:43:cc:e9:cb:cb:81:4d:
                    ea:5d:4c:37:ef:b7:40:1e:77:09:7a:dd:48:a9:43:
                    c4:f1:48:29:41:ca:6a:4f:0d:52:5f:50:fc:6d:26:
                    79:da:a7:e0:46:23:a5:79:ef:20:ac:b2:95:b8:9e:
                    f7:f4:2f:34:35:41:e9:98:8b:a9:2e:fd:ed:db:c5:
                    90:b9:59:93:01:9f:f7:f9:d5:76:e8:1c:c6:ec:e6:
                    a1:c6:29:6b:a9:71:8f:92:af:2b:43:90:43:0f:19:
                    b9:c3:6b:c9:45:9f:4f:ee:64:48:18:04:3b:9e:24:
                    53:78:45:6e:5b:b0:11:81:fd:05:37:08:60:cd:ed:
                    69:51:4a:70:66:87:51:28:cc:41:b0:d2:24:f5:ed:
                    ed:1d:4f:1e:e6:9e:3f:1a:3f:25:7c:10:f9:ea:37:
                    fd:70:f1:49:96:9c:34:fb:53:cb:ee:61:15:44:f0:
                    fa:dc:66:5e:cb:e6:35:8a:21:ea:0d:11:3e:d8:2e:
                    1e:6b:3d:97:b8:e9:36:af:ac:ed:42:a3:56:ae:01:
                    37:d7:3d:73:72:78:af:e6:c6:05:04:9a:6d:81:f9:
                    d4:5f:31:5d:b9:be:de:a7:12:b9:ba:77:42:f5:45:
                    af:d1:cd:73:be:d0:5f:a0:c6:d3:dd:b4:d5:24:6f:
                    5f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:54:0E:A7:69:4C:69:08:E1:27:34:54:F0:B0:B0:5E:B1:ED:9B:F7
            X509v3 Authority Key Identifier:
                keyid:0B:B3:E7:3A:A8:B7:F0:AF:3B:D8:40:05:72:DA:E7:2B:0D:46:F5:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7PnOqi38K872EAFctrnKw1G9Vw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:ab:2e:91:0d:c3:f8:ad:12:7a:48:91:37:bf:db:02:bd:1e:
         dd:f5:e8:8d:a4:bf:6b:fc:70:a8:c2:e5:81:de:49:f8:f4:e6:
         fc:99:da:cd:2c:2d:a0:83:cc:e8:ae:c6:1b:84:8a:b3:fc:3a:
         d0:2e:3b:7a:c5:45:b6:7d:f1:e8:e0:61:b5:f9:d0:63:37:8e:
         0c:5d:ef:83:df:b4:c4:7d:a4:e8:c7:47:58:73:21:5b:d8:55:
         c6:ef:8c:de:4b:6e:0b:87:af:38:3b:69:0b:ea:e3:9c:7e:0d:
         67:6d:31:58:65:e8:6c:f2:44:97:a7:2b:53:fa:8d:98:bc:2e:
         4b:44:32:32:55:50:a0:5b:54:53:b6:52:dc:10:c1:4f:db:cb:
         96:5a:14:69:48:19:b6:61:33:7b:f6:91:70:19:88:84:f6:6c:
         c7:dd:35:33:c9:92:5a:83:a4:71:71:a3:13:74:dd:1e:31:e2:
         23:9b:4c:f0:7c:34:b9:35:88:5d:1a:1d:e8:14:35:27:41:79:
         d3:b4:4b:7e:f6:ce:70:45:94:81:88:cb:87:d2:75:67:6d:c0:
         66:6c:dd:e2:c6:bd:07:ee:92:46:68:30:1d:3f:62:84:47:d4:
         78:f7:f9:68:f1:88:ae:4a:15:38:09:14:42:87:fe:3a:a3:00:
         a6:ea:14:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 01:47:03 2025 by rpki-client