Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.mft
File:                     5WzVePQvjeBnI2dnxs_CusvBbgU.mft (raw, json)
Hash identifier:          U4NaM3uigijwCg0Br1miVqs1H06uP2xL6x1VPLZMBHQ=
Subject key identifier:   E1:A8:1C:10:6E:8E:8A:AD:CA:3A:6E:BC:68:34:4D:B8:9C:CA:2A:83
Authority key identifier: E5:6C:D5:78:F4:2F:8D:E0:67:23:67:67:C6:CF:C2:BA:CB:C1:6E:05
Certificate issuer:       /CN=e56cd578f42f8de067236767c6cfc2bacbc16e05
Certificate serial:       0196A91E4B0A55117F7B66C9E8397BA09664
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5WzVePQvjeBnI2dnxs_CusvBbgU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.mft
Manifest number:          14A7
Signing time:             Wed 07 May 2025 05:00:56 +0000
Manifest this update:     Wed 07 May 2025 05:00:56 +0000
Manifest next update:     Thu 08 May 2025 05:00:56 +0000
Files and hashes:         1: 5WzVePQvjeBnI2dnxs_CusvBbgU.crl (hash: TJyw4MnUDJCg130fUe+bNZFn+SKWafOBZe9nw1zKFwQ=)
                          2: QNHfp-QpZNwcvnNXnGl6CZVZ8Tc.roa (hash: 6rWKjyivZLws8Y1JTJaRv4be4dA3ijdzaWgzmRI12KU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5WzVePQvjeBnI2dnxs_CusvBbgU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a9:1e:4b:0a:55:11:7f:7b:66:c9:e8:39:7b:a0:96:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e56cd578f42f8de067236767c6cfc2bacbc16e05
        Validity
            Not Before: May  7 05:00:56 2025 GMT
            Not After : May  8 05:00:56 2025 GMT
        Subject: CN=e1a81c106e8e8aadca3a6ebc68344db89cca2a83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a0:e5:71:0a:50:3f:79:cd:44:29:b8:f0:06:
                    43:9d:37:d9:60:32:c8:b9:f8:25:94:16:6c:3f:1c:
                    09:44:b1:03:74:87:53:bb:ae:ec:e5:d0:35:f1:cc:
                    90:00:a1:fc:4e:ab:fd:9a:32:7e:3c:4c:a3:1a:a4:
                    0b:19:e8:7c:bc:c8:aa:8b:2b:c0:a9:7f:29:10:c2:
                    e8:79:b4:12:b8:5d:90:f3:3c:43:09:8a:00:95:66:
                    48:fc:aa:2d:39:20:09:ce:dc:46:29:7b:a4:ed:b4:
                    ac:2b:8e:85:32:fb:57:33:87:14:60:69:f6:e5:74:
                    04:9d:d9:fc:e0:52:86:fc:ca:f6:93:43:a4:22:5d:
                    ef:5b:d1:f5:a2:59:1a:1f:97:1a:a1:b6:4f:d4:aa:
                    5d:45:c7:f9:43:25:a6:de:47:ba:92:2b:51:f3:e9:
                    48:78:9e:94:1f:8f:5b:a7:5a:74:2f:69:5f:4d:87:
                    d2:ce:8c:8c:63:38:15:fe:79:c3:cb:37:ef:e7:2d:
                    04:17:6c:b6:a1:bc:ee:98:30:ce:72:b1:dc:d4:72:
                    69:5a:6a:57:4d:19:d4:14:41:04:18:5f:c6:16:c6:
                    c8:f5:37:84:e9:c4:c3:7d:35:ca:27:f4:c3:97:f0:
                    fc:fd:94:b8:13:17:c1:02:c0:66:60:27:49:c0:94:
                    30:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:A8:1C:10:6E:8E:8A:AD:CA:3A:6E:BC:68:34:4D:B8:9C:CA:2A:83
            X509v3 Authority Key Identifier:
                keyid:E5:6C:D5:78:F4:2F:8D:E0:67:23:67:67:C6:CF:C2:BA:CB:C1:6E:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5WzVePQvjeBnI2dnxs_CusvBbgU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:d8:0b:9c:0a:8f:55:47:dc:33:f2:76:5e:1a:87:7f:3f:7b:
         a3:8f:a3:6b:2f:ec:21:1e:74:8b:4c:cb:42:ba:6d:a3:47:a5:
         16:da:8d:28:81:fc:aa:e3:b0:44:63:ac:8b:bf:56:ad:cf:9e:
         8f:ff:17:1c:98:47:45:2c:3b:9a:9e:ad:cb:cd:7e:c7:15:fb:
         d1:10:4a:33:52:68:4e:11:9e:d1:ee:0a:37:17:3d:3e:1a:55:
         e3:9a:a3:aa:1d:59:55:43:45:8d:4b:bb:b6:73:42:1e:92:a7:
         ea:90:a1:b2:84:ae:fb:f1:fa:22:ec:1e:75:a7:7b:73:ab:0c:
         94:09:06:ef:2e:c5:c7:96:3b:7e:ce:7c:20:4a:c5:4f:74:64:
         1f:4e:ca:f5:83:9d:c2:9d:e0:45:5b:f8:68:5b:0a:7e:83:a2:
         de:bd:08:ce:0c:93:4d:16:82:73:14:a1:6a:f2:65:1f:33:fb:
         f7:74:41:1f:cf:f1:3b:54:39:12:b3:d4:17:a1:a9:96:9f:8f:
         50:24:28:5b:93:ba:28:4d:9a:36:8b:af:0c:ff:61:d7:36:7e:
         8c:31:f3:b1:b1:98:93:46:be:44:31:3a:3b:b2:97:ac:a2:d4:
         07:0d:c5:96:da:b7:23:a7:68:32:f2:3e:e0:f7:cb:29:9b:67:
         7c:e0:a4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 13:09:39 2025 by rpki-client