Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/c57b75-10a7-4723-94ea-e857477a7008/1/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.mft
File:                     RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.mft (raw, json)
Hash identifier:          w2VTIVKyIlmY/4m+icLY/1sQXZBkeKx37XFXAjfE3y0=
Subject key identifier:   FD:51:A7:A3:18:D8:63:A5:48:7C:64:B3:DF:3D:42:2B:0D:57:F1:EE
Authority key identifier: 46:73:50:D5:97:5A:27:2A:88:BF:B8:81:0A:F4:59:81:CD:55:93:5A
Certificate issuer:       /CN=467350d5975a272a88bfb8810af45981cd55935a
Certificate serial:       0196CD98A49E87B834E7F8015429E3E7B1B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/c57b75-10a7-4723-94ea-e857477a7008/1/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.mft
Manifest number:          0E37
Signing time:             Wed 14 May 2025 07:00:54 +0000
Manifest this update:     Wed 14 May 2025 07:00:54 +0000
Manifest next update:     Thu 15 May 2025 07:00:54 +0000
Files and hashes:         1: RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.crl (hash: KQuWTKXshIUNNNNtjEGR5I9wPiMrJdx9R6YYontnpjQ=)
                          2: cM594o8l7Xh7Dw0EOXhcxgvWLYI.roa (hash: 1Ym4804A2QtxpGJhVDPpEbLS0giUeOdd5FG8xMIV330=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/c57b75-10a7-4723-94ea-e857477a7008/1/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/c57b75-10a7-4723-94ea-e857477a7008/1/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 07:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cd:98:a4:9e:87:b8:34:e7:f8:01:54:29:e3:e7:b1:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=467350d5975a272a88bfb8810af45981cd55935a
        Validity
            Not Before: May 14 07:00:54 2025 GMT
            Not After : May 15 07:00:54 2025 GMT
        Subject: CN=fd51a7a318d863a5487c64b3df3d422b0d57f1ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ab:02:34:83:62:fd:f4:35:58:41:d0:c6:ae:
                    06:03:d3:a0:b9:35:d1:3f:2a:20:57:80:c3:05:11:
                    04:c1:b0:44:70:73:73:0f:cb:c1:ee:7d:a3:28:6b:
                    db:7c:5a:57:ab:ef:eb:a7:7e:97:2d:27:f1:87:63:
                    50:7e:98:83:7a:37:71:e9:ee:40:9e:6c:b9:27:c9:
                    0f:2d:cc:58:30:dd:32:5a:3e:14:a0:f8:0c:09:49:
                    c3:85:1a:39:3d:35:4a:1a:d7:1f:f7:37:0c:49:d0:
                    53:75:b2:02:cb:a4:aa:26:c3:7c:80:c9:32:bd:14:
                    1c:04:b8:2b:32:3f:5d:53:49:02:81:26:25:fa:11:
                    c9:3c:47:9f:af:f4:7b:1f:1c:0f:94:f7:97:15:04:
                    bb:e8:61:80:f7:68:23:82:2b:d7:91:31:60:19:3a:
                    e7:43:7d:7d:44:b6:cc:f4:71:3d:e2:72:b6:22:0c:
                    a3:74:f3:dd:67:03:09:ff:ac:b2:d6:87:37:31:18:
                    94:ee:76:e4:a0:70:2d:f7:00:6b:42:c3:b6:a8:36:
                    75:85:d7:cb:43:e3:0b:80:7b:9e:2b:61:ad:c8:3a:
                    eb:94:95:93:ed:ed:6e:a6:26:ef:03:71:a5:21:69:
                    ca:91:05:2e:0e:65:c3:b0:16:a0:6a:06:68:c8:ee:
                    ff:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:51:A7:A3:18:D8:63:A5:48:7C:64:B3:DF:3D:42:2B:0D:57:F1:EE
            X509v3 Authority Key Identifier:
                keyid:46:73:50:D5:97:5A:27:2A:88:BF:B8:81:0A:F4:59:81:CD:55:93:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/c57b75-10a7-4723-94ea-e857477a7008/1/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/c57b75-10a7-4723-94ea-e857477a7008/1/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:f5:e2:66:a5:d3:fe:85:67:cc:ac:75:24:9d:c3:a9:cb:e5:
         36:93:0c:63:52:ba:bf:b1:08:d3:ed:7c:bb:e3:09:db:c3:c4:
         5e:7f:04:e9:d1:18:ed:8d:be:45:80:13:bc:be:68:ef:9a:07:
         92:8c:1e:89:98:f3:e6:9f:5b:a8:b9:00:ed:42:aa:84:51:d6:
         ff:f7:8a:78:9a:ea:16:6a:10:8c:1e:fc:90:63:06:84:39:15:
         a3:f4:da:e6:62:7f:40:c2:34:c5:78:b2:1d:0c:2b:e4:72:de:
         09:86:8f:8a:88:05:89:2c:9c:fa:49:38:64:78:73:68:5d:85:
         bb:6a:3f:f0:46:4a:5f:0f:be:6a:35:4c:fd:e7:51:3d:28:dc:
         26:ec:50:58:98:61:f6:33:37:cc:e6:b6:20:1a:35:31:2c:0e:
         0a:5a:65:f8:3b:fd:c7:88:1c:7f:bd:e1:84:69:f9:88:ca:14:
         7b:db:64:dd:33:b6:d4:c0:8e:ab:76:11:a6:45:7e:a2:ad:f9:
         dd:cf:4a:b8:bb:0f:25:23:ec:42:00:fe:35:c8:c0:2d:57:fc:
         e9:a3:a6:df:89:6f:07:b2:b6:61:4d:0b:4c:8f:42:38:67:d5:
         f1:15:d5:f9:e7:eb:e4:88:61:76:fc:81:4a:bc:87:5d:d2:51:
         c0:e5:97:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 16:05:00 2025 by rpki-client