Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.mft
File:                     IDHrupQ_rRxUh1QOAQXhnCMs95w.mft (raw, json)
Hash identifier:          +cn93sSDjpunuTWPM/oBVbUYxRuoX08FwiqxYeBT42Q=
Subject key identifier:   75:4F:63:DC:46:78:35:E8:72:24:D3:D2:96:B2:F3:C5:A2:90:54:81
Authority key identifier: 20:31:EB:BA:94:3F:AD:1C:54:87:54:0E:01:05:E1:9C:23:2C:F7:9C
Certificate issuer:       /CN=2031ebba943fad1c5487540e0105e19c232cf79c
Certificate serial:       0196A352FF076BDAA6AA2427B57CD4C996F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IDHrupQ_rRxUh1QOAQXhnCMs95w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.mft
Manifest number:          06E4
Signing time:             Tue 06 May 2025 02:00:47 +0000
Manifest this update:     Tue 06 May 2025 02:00:47 +0000
Manifest next update:     Wed 07 May 2025 02:00:47 +0000
Files and hashes:         1: IDHrupQ_rRxUh1QOAQXhnCMs95w.crl (hash: suFJF7EIme9Q7pVuPl/iccs5/hOtkXnarhC4Sd4+X6Y=)
                          2: tKV7ZxqGnJTtEa2_ye8Y1d8JNh0.roa (hash: 8oiml4GgGUwThCKHUcnZfuIG0l8a7ZiiCuW4RZzZ3cA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IDHrupQ_rRxUh1QOAQXhnCMs95w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 02:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a3:52:ff:07:6b:da:a6:aa:24:27:b5:7c:d4:c9:96:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2031ebba943fad1c5487540e0105e19c232cf79c
        Validity
            Not Before: May  6 02:00:47 2025 GMT
            Not After : May  7 02:00:47 2025 GMT
        Subject: CN=754f63dc467835e87224d3d296b2f3c5a2905481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:54:00:2d:83:f7:44:14:56:83:09:c9:01:18:
                    82:db:b1:68:ed:3e:7d:39:95:90:fe:9a:83:47:db:
                    32:0c:34:c2:96:1b:5c:f9:ae:3d:73:5a:f4:07:e4:
                    7c:67:b0:5f:01:e0:c5:f7:41:7c:f6:9a:f2:cd:f2:
                    40:e5:fa:ab:66:ca:93:49:a5:02:25:c4:e8:e3:98:
                    b6:41:a5:31:09:44:96:07:28:c0:9d:91:07:bd:94:
                    b6:31:58:cb:1a:23:67:c3:71:85:ce:f8:64:76:d9:
                    6f:0b:06:22:9e:c7:2f:4d:cd:2c:2f:a1:5b:4b:08:
                    04:35:9c:5f:b4:51:ad:c5:a9:7c:15:c9:dc:d2:95:
                    ce:89:3d:a0:4d:99:2d:b5:ca:3a:f9:12:b0:2c:5e:
                    ed:79:51:3f:fd:32:26:f2:36:0b:b2:89:58:c7:53:
                    96:4c:52:74:1f:b2:5e:89:8c:a7:54:51:da:0b:03:
                    bd:34:81:fa:a8:50:f5:d0:cd:f3:4b:ac:32:7e:57:
                    fe:e4:6f:94:0d:5d:77:79:5a:ad:12:cc:23:6c:b9:
                    f5:2a:d6:16:3f:ae:73:b9:61:2d:82:a1:52:04:30:
                    dd:83:da:eb:c1:89:60:4d:15:96:93:f1:bc:c5:03:
                    f5:c4:c0:e5:67:d2:86:8d:34:7b:71:97:55:56:db:
                    1c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:4F:63:DC:46:78:35:E8:72:24:D3:D2:96:B2:F3:C5:A2:90:54:81
            X509v3 Authority Key Identifier:
                keyid:20:31:EB:BA:94:3F:AD:1C:54:87:54:0E:01:05:E1:9C:23:2C:F7:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IDHrupQ_rRxUh1QOAQXhnCMs95w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:e6:53:68:08:ae:41:f9:1a:4c:62:ff:59:b8:da:ee:5a:e3:
         e7:68:ff:49:bf:3b:95:98:00:94:13:a0:4a:99:c7:2b:97:cd:
         c4:2a:15:b8:85:8d:2d:f8:b0:3c:f9:5b:36:c8:b7:a8:be:6c:
         07:d1:5d:eb:bf:52:af:88:aa:3c:fc:fc:fc:64:cb:cf:0a:42:
         67:8f:df:fc:3b:61:8c:e9:1d:54:8a:34:0b:57:b8:7c:6f:87:
         22:bd:d1:0b:80:eb:6a:30:43:86:4d:2b:5f:76:51:24:ef:99:
         18:97:e1:b0:bd:63:77:16:fe:f9:f3:14:ba:93:64:fb:cc:c8:
         2b:de:f6:69:e5:35:83:8d:37:b0:13:15:29:4c:fa:23:5d:8a:
         de:5d:3a:3e:2d:50:1c:91:f0:8e:76:f0:25:07:21:c3:00:01:
         53:16:47:70:f9:30:c1:4e:ce:7f:8f:cf:44:ab:0a:d9:02:2d:
         2f:37:94:65:65:78:36:6e:3b:f4:09:a8:8e:80:39:19:ea:80:
         d6:6d:cc:a9:da:e9:63:97:ac:fb:7a:83:a6:33:80:8c:e9:33:
         92:bd:bf:89:b6:f2:28:e6:52:b2:e5:fc:7e:21:99:36:89:55:
         7b:48:d5:fe:a6:6d:36:d2:e7:b4:df:76:1d:52:41:56:91:00:
         74:5c:96:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 11:08:34 2025 by rpki-client