Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.mft
File:                     5nP_ENelVPxRp_mcH2Hhzu-Zhbw.mft (raw, json)
Hash identifier:          OPIkq3qMmtR6aI0vTe7N0Mpr3xRxBaxr8JB+YLBLDlM=
Subject key identifier:   D6:05:D8:FC:1B:A7:97:33:0C:32:44:98:85:40:BA:19:C7:76:9C:80
Authority key identifier: E6:73:FF:10:D7:A5:54:FC:51:A7:F9:9C:1F:61:E1:CE:EF:99:85:BC
Certificate issuer:       /CN=e673ff10d7a554fc51a7f99c1f61e1ceef9985bc
Certificate serial:       0196BA48EAB2A48F28E28948D87DEFA1DFC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.mft
Manifest number:          0E21
Signing time:             Sat 10 May 2025 13:01:02 +0000
Manifest this update:     Sat 10 May 2025 13:01:02 +0000
Manifest next update:     Sun 11 May 2025 13:01:02 +0000
Files and hashes:         1: 5nP_ENelVPxRp_mcH2Hhzu-Zhbw.crl (hash: zVeOLV9gXlpqlhbo1HAVhZS0lVuNxCo6hED6Ijmyb9w=)
                          2: 99MFFBjF3Dc4zTlDGHUkWaGScYw.roa (hash: WeTl8ArSSJSSsmY/ooHSrE+g99Jv4JYzfunEC3Fj5PM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ba:48:ea:b2:a4:8f:28:e2:89:48:d8:7d:ef:a1:df:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e673ff10d7a554fc51a7f99c1f61e1ceef9985bc
        Validity
            Not Before: May 10 13:01:02 2025 GMT
            Not After : May 11 13:01:02 2025 GMT
        Subject: CN=d605d8fc1ba797330c3244988540ba19c7769c80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a5:57:b4:16:7f:34:2a:3c:6c:2c:ed:d7:06:
                    ec:5e:ab:75:56:01:88:55:e7:3d:da:e0:c1:da:2a:
                    ad:e3:7b:28:55:a3:76:57:31:67:9d:ef:98:4f:a2:
                    45:35:8c:69:75:b0:70:d8:5b:5b:1b:e7:70:fb:83:
                    38:09:14:22:b3:e0:ad:4e:b3:72:48:89:8e:a7:07:
                    aa:8e:fc:62:3d:ad:6c:7e:ff:2c:43:76:0b:6c:ce:
                    d9:74:c5:56:d8:f4:6e:84:1a:a4:49:28:bf:62:85:
                    51:46:ec:c0:a6:67:02:d2:61:86:85:b9:34:e4:39:
                    e6:ef:19:60:3b:8c:21:8d:61:a7:b7:94:ba:9f:6a:
                    00:be:69:05:b7:8d:99:da:a0:cb:19:73:14:12:68:
                    3c:f7:21:18:38:cf:1f:a4:89:75:6b:a8:6e:f2:5b:
                    38:92:13:14:b9:64:26:69:bf:31:8b:b0:92:8b:2b:
                    a6:59:9b:3c:70:d1:8f:31:5b:c6:3c:b8:1a:eb:17:
                    af:b2:5c:0c:73:af:7f:85:ad:42:d2:ef:30:7f:c4:
                    35:dc:9a:9b:49:99:bb:3e:28:92:e9:ce:f2:ed:a9:
                    cf:e0:33:0c:84:ce:03:0c:3e:75:4f:67:74:5f:17:
                    90:6e:ab:c0:d0:4f:66:12:8f:ff:3b:66:8d:0b:8d:
                    5a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:05:D8:FC:1B:A7:97:33:0C:32:44:98:85:40:BA:19:C7:76:9C:80
            X509v3 Authority Key Identifier:
                keyid:E6:73:FF:10:D7:A5:54:FC:51:A7:F9:9C:1F:61:E1:CE:EF:99:85:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:52:64:ef:df:a5:6d:48:80:84:3c:a6:36:d0:e2:76:8d:98:
         af:e1:df:22:4a:f4:13:9f:c1:59:f7:31:96:3b:1b:5e:d0:77:
         45:8c:68:f7:f8:d1:9a:57:4c:84:c3:0a:d2:22:08:d0:f7:c0:
         91:44:a3:1a:8e:aa:1a:43:fc:60:8e:22:b4:08:41:cb:b2:85:
         ca:6e:26:8c:90:cc:6e:48:25:72:8a:d6:e4:6b:f7:33:22:ac:
         57:e1:a7:23:a1:a2:9c:ee:a2:8a:20:d0:7e:be:ed:3d:06:56:
         ca:38:dc:34:52:65:bf:35:62:37:89:d9:c0:6f:74:2e:2a:dd:
         c8:44:e4:ff:4c:fb:37:97:b7:7f:f3:3d:24:66:e5:4e:cb:21:
         b9:41:48:13:55:77:63:dd:0a:28:69:09:43:0c:68:f8:18:a6:
         33:46:10:fa:8c:ff:5d:4d:ac:c1:6a:78:24:5e:e4:7c:c7:ea:
         d2:9d:71:f2:5c:a1:da:5c:ed:32:ce:e0:2e:28:18:74:e5:4b:
         c5:c0:ac:5d:e1:9b:ed:73:0d:fc:58:89:3e:35:d2:46:62:e6:
         fb:69:87:c3:6f:93:44:19:fd:f4:7b:33:57:bb:4f:e2:de:02:
         f3:e5:ea:75:5f:70:4b:74:ba:5d:7a:10:d0:34:a6:20:50:5f:
         ba:86:95:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 23:04:02 2025 by rpki-client