Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e6580b-bff7-41e8-b314-14045b64ae29/1/5uGvN6YKmYaO-7qggXtJgPGaVPs.mft
File:                     5uGvN6YKmYaO-7qggXtJgPGaVPs.mft (raw, json)
Hash identifier:          HiwmU2F3/EdxL3m+0DL7ywkbjW2BQD3f1w5mWOusD2k=
Subject key identifier:   EF:53:13:FE:96:4E:94:C7:CB:F6:88:E1:AC:26:34:CF:31:C7:47:D3
Authority key identifier: E6:E1:AF:37:A6:0A:99:86:8E:FB:BA:A0:81:7B:49:80:F1:9A:54:FB
Certificate issuer:       /CN=e6e1af37a60a99868efbbaa0817b4980f19a54fb
Certificate serial:       0196A7D47804F98621415E431FF50A87787A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5uGvN6YKmYaO-7qggXtJgPGaVPs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/e6580b-bff7-41e8-b314-14045b64ae29/1/5uGvN6YKmYaO-7qggXtJgPGaVPs.mft
Manifest number:          0911
Signing time:             Tue 06 May 2025 23:00:41 +0000
Manifest this update:     Tue 06 May 2025 23:00:41 +0000
Manifest next update:     Wed 07 May 2025 23:00:41 +0000
Files and hashes:         1: 04IK808ti0G_mrePZiLfyMd8LPg.roa (hash: KEsbMkessHVdMEPjooQbuvxux4M4IDtjKN92Pi/27Vo=)
                          2: 5uGvN6YKmYaO-7qggXtJgPGaVPs.crl (hash: ICfno4F3DJvYNwfKzIBcIfJhxmFmYqvceRVyVnzoL8k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/e6580b-bff7-41e8-b314-14045b64ae29/1/5uGvN6YKmYaO-7qggXtJgPGaVPs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/e6580b-bff7-41e8-b314-14045b64ae29/1/5uGvN6YKmYaO-7qggXtJgPGaVPs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5uGvN6YKmYaO-7qggXtJgPGaVPs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a7:d4:78:04:f9:86:21:41:5e:43:1f:f5:0a:87:78:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6e1af37a60a99868efbbaa0817b4980f19a54fb
        Validity
            Not Before: May  6 23:00:41 2025 GMT
            Not After : May  7 23:00:41 2025 GMT
        Subject: CN=ef5313fe964e94c7cbf688e1ac2634cf31c747d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a3:1b:80:79:c5:b3:f5:94:0f:77:7d:04:18:
                    0b:7b:40:66:89:c2:a2:a6:41:07:8f:4a:cc:fa:d9:
                    26:8b:d2:30:1b:3f:62:0a:ab:d7:77:f7:73:af:b1:
                    06:ad:eb:43:ef:cf:db:68:43:06:4c:68:29:06:d7:
                    91:2a:d6:a5:97:a9:8d:ed:1c:ef:26:a9:96:39:9b:
                    38:7a:fe:56:f9:3d:3d:2e:42:49:f4:a5:ec:2b:51:
                    fa:0d:c3:18:63:62:72:16:64:20:d7:ff:0c:10:a6:
                    0c:f1:76:b3:a3:36:e5:b2:04:d9:4c:cf:0a:fc:d8:
                    35:8c:d8:00:22:f2:a0:9d:50:d0:24:2f:55:2f:ad:
                    52:d3:d4:bc:bd:22:60:44:1c:c0:76:e6:5a:61:e6:
                    8b:4b:d9:07:6d:ad:fc:91:34:d6:dd:09:06:d1:4e:
                    2b:3d:b2:22:3d:dc:2c:15:6b:24:21:00:07:8b:0a:
                    a9:f8:8d:b2:de:cd:0b:fe:70:8b:22:6a:fa:17:f8:
                    d9:fa:3d:83:2e:58:87:f6:9a:82:71:28:f0:17:59:
                    8d:ec:c6:26:fb:f0:87:bc:71:bf:75:80:98:cd:f3:
                    87:ad:13:09:97:09:60:0c:86:ba:20:70:4d:c5:97:
                    ef:18:71:84:2c:35:b1:e2:55:9f:8e:e5:8b:2f:b0:
                    96:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:53:13:FE:96:4E:94:C7:CB:F6:88:E1:AC:26:34:CF:31:C7:47:D3
            X509v3 Authority Key Identifier:
                keyid:E6:E1:AF:37:A6:0A:99:86:8E:FB:BA:A0:81:7B:49:80:F1:9A:54:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5uGvN6YKmYaO-7qggXtJgPGaVPs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e6580b-bff7-41e8-b314-14045b64ae29/1/5uGvN6YKmYaO-7qggXtJgPGaVPs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e6580b-bff7-41e8-b314-14045b64ae29/1/5uGvN6YKmYaO-7qggXtJgPGaVPs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:b7:b2:23:d8:b5:7c:69:2d:66:37:ac:6c:cb:a4:08:79:bc:
         db:2b:0d:52:f9:71:e6:12:1c:22:7e:c2:e1:36:c1:d2:75:cf:
         b9:b0:79:09:56:67:20:38:af:8a:a9:4b:98:09:ca:35:f2:3a:
         ed:1e:b7:c9:1e:42:52:db:0a:fc:72:91:c7:47:a8:ee:8d:89:
         a1:24:eb:89:5c:ba:c0:b8:65:f4:77:32:f6:5a:b2:e0:37:46:
         79:0c:60:e7:f8:f1:d6:90:6e:7c:b8:f0:ec:74:b5:54:c3:66:
         73:f0:0e:de:9f:0d:99:2a:2c:13:fb:c4:ad:db:3e:25:89:af:
         c3:11:89:b8:ae:95:5d:ca:58:fe:50:5e:74:86:02:fa:db:90:
         86:87:0f:e8:cd:fb:51:64:5b:0e:e3:be:01:16:67:1b:25:54:
         f9:68:b5:9d:4e:77:db:66:d8:22:2a:1b:5c:2b:ac:59:77:91:
         1c:8b:b1:5c:3f:c5:23:8f:f7:64:b3:cd:93:23:45:5a:39:2a:
         68:15:5e:fe:47:cb:82:08:57:c6:86:28:7a:d7:73:69:bd:b8:
         54:a3:d6:c4:a4:e1:8e:d9:1d:3e:29:dc:98:dc:3f:bf:f1:e7:
         b6:02:78:8d:d5:30:05:fc:0b:a3:ad:56:4d:a9:6c:19:7c:41:
         73:ad:64:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 08:56:31 2025 by rpki-client