Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.mft
File:                     toqZTkLmDaT0pUdbFfXidRbHzxQ.mft (raw, json)
Hash identifier:          GWzqxA5Nyzm7OoxdUjMd36JAH4bKQLyqAm2GG5E2GPQ=
Subject key identifier:   85:03:93:0A:70:C5:E6:B0:18:29:12:6E:DD:93:D1:79:57:06:25:A7
Authority key identifier: B6:8A:99:4E:42:E6:0D:A4:F4:A5:47:5B:15:F5:E2:75:16:C7:CF:14
Certificate issuer:       /CN=b68a994e42e60da4f4a5475b15f5e27516c7cf14
Certificate serial:       0196CEAAA4CD73332C1F09E2C86FAACA3F81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/toqZTkLmDaT0pUdbFfXidRbHzxQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.mft
Manifest number:          153C
Signing time:             Wed 14 May 2025 12:00:11 +0000
Manifest this update:     Wed 14 May 2025 12:00:11 +0000
Manifest next update:     Thu 15 May 2025 12:00:11 +0000
Files and hashes:         1: Gqb6OgiiPyPHWY86Q4S-zwTF1xY.roa (hash: Os7YNQWNXg8f2DoDK3e2S/uuUULEf5X8h6dOyySYafw=)
                          2: toqZTkLmDaT0pUdbFfXidRbHzxQ.crl (hash: 3cS9n8hm5Dcp9eDUFnx5nSeGWlPPE7a+pV8FTKpMtY0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/toqZTkLmDaT0pUdbFfXidRbHzxQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 12:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ce:aa:a4:cd:73:33:2c:1f:09:e2:c8:6f:aa:ca:3f:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b68a994e42e60da4f4a5475b15f5e27516c7cf14
        Validity
            Not Before: May 14 12:00:11 2025 GMT
            Not After : May 15 12:00:11 2025 GMT
        Subject: CN=8503930a70c5e6b01829126edd93d179570625a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:30:cc:17:f2:91:a5:c8:d9:ae:68:f9:ff:49:
                    c2:66:9b:ea:ee:cf:d7:9a:b9:9d:08:38:82:33:e7:
                    ec:14:71:b5:3f:17:c1:92:bd:f4:1f:34:ac:30:5d:
                    ab:02:ef:8b:ae:05:f4:15:d1:17:86:bc:32:4c:17:
                    35:01:b6:62:6a:ee:42:85:7d:be:8d:0a:86:7d:ab:
                    b9:30:ab:83:2f:73:f3:b6:df:ef:06:44:34:63:43:
                    4b:2f:a9:e7:b0:16:5a:2a:11:e5:79:e4:32:60:4f:
                    a5:78:9e:c6:36:09:d4:8a:eb:4d:13:ea:7f:75:15:
                    c5:49:23:77:cd:28:26:d1:40:d5:cf:08:cc:67:02:
                    03:30:43:b8:d4:40:db:45:f4:08:5f:de:a6:de:b4:
                    c8:f7:7a:42:79:43:66:c5:ae:c1:79:cf:80:3f:f9:
                    7f:c5:a8:30:a4:9b:6a:43:90:74:48:d2:c7:14:12:
                    38:3f:3a:a1:11:76:db:e4:35:c0:f7:79:9f:1b:98:
                    96:ef:80:6b:51:01:d8:e4:86:08:e7:e8:ca:dc:99:
                    cc:c6:a4:d8:a3:c7:5b:0d:2b:77:25:0f:ee:13:08:
                    5a:2f:f7:d3:28:38:af:84:a5:21:1c:76:9d:21:74:
                    e3:c2:ea:10:ac:02:ca:c7:41:4a:18:1a:49:f7:9e:
                    e6:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:03:93:0A:70:C5:E6:B0:18:29:12:6E:DD:93:D1:79:57:06:25:A7
            X509v3 Authority Key Identifier:
                keyid:B6:8A:99:4E:42:E6:0D:A4:F4:A5:47:5B:15:F5:E2:75:16:C7:CF:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toqZTkLmDaT0pUdbFfXidRbHzxQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:cf:6f:5e:81:4d:a0:d5:b1:2f:a0:78:5f:a1:48:65:5c:19:
         97:61:2b:98:97:88:b2:4d:8e:b1:ef:3d:79:13:a1:5e:9c:c3:
         d0:cd:45:12:58:b3:b4:bb:60:b2:a5:cd:f3:66:96:61:60:97:
         0a:02:33:43:75:61:c7:59:f7:f2:6e:83:ea:ea:29:d1:13:41:
         97:2e:6e:be:83:92:73:7e:87:6e:6a:ca:3f:4c:d2:82:60:0f:
         52:b9:9e:b7:ea:b6:0c:a2:9c:db:a2:74:01:77:b9:85:19:de:
         2d:1c:8d:c2:3d:22:6d:c8:df:df:39:65:75:10:d9:fd:36:bb:
         47:e5:8d:47:e0:f3:47:fc:dd:74:45:4f:cf:3f:cc:b5:20:66:
         e4:1e:1f:d4:01:42:85:31:50:11:70:73:3a:d0:cf:96:56:8a:
         42:ab:5a:98:2b:48:ad:59:7d:a5:73:ba:98:76:3e:b7:69:bf:
         b1:55:bf:71:dd:cb:b6:37:ae:90:87:e5:81:f4:6b:c6:4f:b9:
         c5:80:03:8f:a4:bb:ec:5d:a0:a6:ec:e1:61:56:c0:7a:f8:47:
         5f:35:74:1e:fa:a0:62:91:df:a2:0d:30:5b:22:84:0b:1b:86:
         ba:f6:06:20:e7:00:a4:c9:2a:3b:41:5a:de:26:44:c2:e8:e1:
         5c:ab:3f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 15:51:41 2025 by rpki-client