Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.mft
File:                     dE3Tr9fM584AqerGfgvKmb63Kao.mft (raw, json)
Hash identifier:          EOZ+/GsEbfa9emx+U26ijMzRYrPxz5M9fPAhANHfcPs=
Subject key identifier:   30:5F:3D:89:C5:90:4A:A8:A2:FE:64:23:C2:0C:79:DB:42:98:54:6F
Authority key identifier: 74:4D:D3:AF:D7:CC:E7:CE:00:A9:EA:C6:7E:0B:CA:99:BE:B7:29:AA
Certificate issuer:       /CN=744dd3afd7cce7ce00a9eac67e0bca99beb729aa
Certificate serial:       0196C4CBD9686715DB852C3F1D47B60681E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dE3Tr9fM584AqerGfgvKmb63Kao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.mft
Manifest number:          1537
Signing time:             Mon 12 May 2025 14:00:15 +0000
Manifest this update:     Mon 12 May 2025 14:00:15 +0000
Manifest next update:     Tue 13 May 2025 14:00:15 +0000
Files and hashes:         1: dE3Tr9fM584AqerGfgvKmb63Kao.crl (hash: A9lKvFVmRb/NRAH7QSZjzTBUv3si1RQ+SIqTBgWZ5EA=)
                          2: fOC0mLVVaWFlMUvT0z_PddjsHw8.roa (hash: BmfmQSKAMKow/2vkZFChgOrrtOQvA5Kh+ohq4iFZyJg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dE3Tr9fM584AqerGfgvKmb63Kao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 14:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c4:cb:d9:68:67:15:db:85:2c:3f:1d:47:b6:06:81:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=744dd3afd7cce7ce00a9eac67e0bca99beb729aa
        Validity
            Not Before: May 12 14:00:15 2025 GMT
            Not After : May 13 14:00:15 2025 GMT
        Subject: CN=305f3d89c5904aa8a2fe6423c20c79db4298546f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:68:dc:80:d8:3b:44:11:20:cd:c5:a0:a4:d5:
                    cf:11:18:24:9b:c7:79:08:5b:e0:8c:a0:7b:ac:b4:
                    e6:94:6d:6f:38:a8:61:58:e4:c1:21:fd:e9:db:98:
                    1c:dc:10:8e:5f:33:be:62:9f:f2:84:9b:95:65:66:
                    e4:0c:aa:82:a8:6f:e7:9f:91:4e:14:2f:0e:6f:d9:
                    3b:f1:f6:45:1c:b0:72:e4:4d:5c:6a:16:ba:87:f3:
                    33:87:7d:6d:fe:33:b3:0d:a8:80:d7:27:6b:4c:bc:
                    85:f9:28:4d:37:c5:26:3d:16:ba:20:dd:f4:48:03:
                    f5:02:df:d4:34:e7:1f:67:a2:30:af:1e:cc:8d:5c:
                    92:50:ef:0e:5c:f4:7d:d4:de:ad:b1:ed:8f:b8:a3:
                    73:92:d7:66:a7:ae:3a:04:a2:50:23:97:3d:7a:64:
                    9f:79:95:d9:39:52:1f:3c:c5:d9:00:a5:db:f6:1b:
                    57:86:17:04:c9:52:d7:1b:c1:4c:8e:0e:1c:01:e3:
                    60:5e:44:a9:25:1c:c6:b4:cb:66:55:7b:06:4d:96:
                    62:c1:1b:9b:39:7f:02:a2:38:21:16:44:a8:c5:ea:
                    b4:8f:a5:d4:3a:e3:34:31:ea:b7:a6:c8:8f:42:04:
                    bc:90:37:d5:54:e7:b8:e9:29:be:b6:57:c3:4b:e7:
                    d0:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:5F:3D:89:C5:90:4A:A8:A2:FE:64:23:C2:0C:79:DB:42:98:54:6F
            X509v3 Authority Key Identifier:
                keyid:74:4D:D3:AF:D7:CC:E7:CE:00:A9:EA:C6:7E:0B:CA:99:BE:B7:29:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dE3Tr9fM584AqerGfgvKmb63Kao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:dc:2f:46:6d:bd:21:6e:68:43:cd:74:e0:54:38:bd:d1:29:
         78:29:10:f9:09:eb:3d:f7:f7:89:96:2a:95:fb:5c:5a:a1:6d:
         0d:c8:aa:67:82:0c:52:04:e7:7d:fd:e5:28:a6:a4:70:5e:d8:
         b6:c9:fc:8e:8d:b9:87:86:70:22:65:e1:48:2d:26:ef:1e:54:
         fa:74:b2:30:f3:04:11:33:93:13:8f:ad:f8:3e:47:14:33:b3:
         e7:68:1d:ed:5b:9c:76:9a:51:d4:94:02:c2:03:f0:ed:ae:97:
         c0:6c:54:4c:57:db:2a:76:e6:64:12:2f:de:ff:bb:7e:4d:ac:
         93:a1:63:79:04:94:3a:25:45:ba:ae:9f:30:b8:26:56:e8:6e:
         bd:80:d0:c4:ab:2d:29:1d:7b:98:f7:f0:83:a9:2d:6b:ce:eb:
         39:ce:73:26:7a:79:0e:d8:67:c2:63:18:a8:6f:8b:8f:67:d9:
         10:bb:90:c2:78:43:1d:16:00:b3:d1:c6:52:7c:1c:f4:92:2b:
         8e:88:45:ca:8e:f3:fa:15:9a:36:66:cd:2a:81:c3:d3:18:3b:
         c4:40:1e:9b:32:01:83:8f:59:08:f2:32:ec:2b:32:d1:27:7d:
         b6:42:1c:d9:9e:e8:ff:2e:4c:6d:35:a6:73:89:40:23:35:a8:
         86:0c:44:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:06:05 2025 by rpki-client