Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft
File:                     PE0_sETrHAoRvgYCrO74jl9dLd8.mft (raw, json)
Hash identifier:          inhFEDFSXXmMXlGSlY8+phQEwYU2yQhm4oPeqZUBA3g=
Subject key identifier:   51:9C:25:D7:0C:94:09:69:CA:67:A1:4A:6F:E8:54:13:CB:82:83:DC
Authority key identifier: 3C:4D:3F:B0:44:EB:1C:0A:11:BE:06:02:AC:EE:F8:8E:5F:5D:2D:DF
Certificate issuer:       /CN=3c4d3fb044eb1c0a11be0602aceef88e5f5d2ddf
Certificate serial:       0196BA1208C486857875DDA792888302F4EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PE0_sETrHAoRvgYCrO74jl9dLd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft
Manifest number:          0FF1
Signing time:             Sat 10 May 2025 12:01:06 +0000
Manifest this update:     Sat 10 May 2025 12:01:06 +0000
Manifest next update:     Sun 11 May 2025 12:01:06 +0000
Files and hashes:         1: 1qkc6Y9jXUF8IhL-xIP9OmQuRxQ.roa (hash: FyT7i1iA2UYuQa2unCvmYr0/izQdX0gwOaXqE1QmUDA=)
                          2: 4pndJR5YmydmS9JXz_iQx8ck7j0.roa (hash: Z1im/UM2UzYVlqGcYguPnrUORp/DmOYEtnYcSLNDNIU=)
                          3: 790_0aC0pIVxZhv7VxK50ulYRQA.roa (hash: Omml7Q0FvpnQPClJTkXnFHAOdNcYGcFxuVbnF3UpV4k=)
                          4: 7TRbsGhzrO0599svAEtwSgPzAhc.roa (hash: W3VT9OquRIsAh2qTrbG0g8QkGqxQgHgPGhS6fP34/Qo=)
                          5: PE0_sETrHAoRvgYCrO74jl9dLd8.crl (hash: bp/DxdYosRcBdO22sw2GUN6tYu3oXpACFNDA8qJyaaA=)
                          6: rq9aneEoVWHNrooCWNRA9paJqvA.roa (hash: yfPP93JQllNK5aLLASi/RUmEtM270jETA3o9ZRbSPvY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PE0_sETrHAoRvgYCrO74jl9dLd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 12:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ba:12:08:c4:86:85:78:75:dd:a7:92:88:83:02:f4:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4d3fb044eb1c0a11be0602aceef88e5f5d2ddf
        Validity
            Not Before: May 10 12:01:06 2025 GMT
            Not After : May 11 12:01:06 2025 GMT
        Subject: CN=519c25d70c940969ca67a14a6fe85413cb8283dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:aa:b9:77:84:bc:4f:dc:84:80:e3:e8:2d:e7:
                    de:a5:4e:5d:a1:5a:b7:93:6a:0f:9d:56:30:e7:e3:
                    7c:bf:7a:91:da:13:ac:5e:cd:54:f9:8b:d7:3c:bf:
                    0c:ef:85:5d:42:6b:51:49:ef:65:3b:5c:a0:4f:4b:
                    29:98:44:24:5a:49:a1:0c:fa:d2:5a:e4:93:e9:d3:
                    7e:31:90:1c:66:26:1a:cc:b3:6e:24:73:57:94:47:
                    75:91:6a:72:51:72:92:86:29:0c:43:81:b3:96:46:
                    1b:67:81:59:72:ec:27:c1:f0:42:37:12:de:e2:94:
                    28:ee:8a:39:3c:e2:6b:72:ff:95:b6:23:2a:90:3f:
                    b3:3d:1b:5d:3f:fe:05:3b:5e:84:d9:d0:5f:50:58:
                    45:43:14:e5:26:0b:0f:f0:1c:25:da:47:de:9b:e0:
                    f8:85:b6:c8:b1:0e:80:a2:fe:98:ed:2e:19:b5:2d:
                    98:ea:4b:1b:30:76:f8:2e:f8:f8:e1:62:3e:3e:9b:
                    23:b1:75:82:70:3f:5c:c9:a9:0a:6d:14:6d:e5:c5:
                    cb:3d:86:2d:e7:76:07:d9:26:37:6c:98:78:b5:81:
                    65:c1:af:a2:fd:61:91:0a:15:98:35:b2:c7:27:bf:
                    6b:6c:46:99:50:56:40:83:b4:7e:3a:f0:be:1c:03:
                    4d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:9C:25:D7:0C:94:09:69:CA:67:A1:4A:6F:E8:54:13:CB:82:83:DC
            X509v3 Authority Key Identifier:
                keyid:3C:4D:3F:B0:44:EB:1C:0A:11:BE:06:02:AC:EE:F8:8E:5F:5D:2D:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE0_sETrHAoRvgYCrO74jl9dLd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:3b:43:4c:32:12:0c:38:ef:23:d2:c7:0e:be:96:ab:69:3b:
         86:82:15:b1:f3:f2:5a:9b:46:ad:7d:eb:8b:49:45:a2:d1:c9:
         ba:ee:80:62:80:c2:dd:6f:c8:54:b9:0c:ca:ca:c1:e3:e4:0a:
         de:24:b5:77:4b:c5:7a:1b:f3:13:ac:d5:78:5e:82:f3:f8:d4:
         a7:9f:17:d9:4f:2b:30:78:b5:4f:0c:f5:b6:ce:33:93:f4:e2:
         69:df:3d:2e:79:32:cb:f0:64:98:60:ea:2a:26:c2:4c:1b:80:
         9f:14:c0:3b:ee:0e:f3:c2:d7:ca:a0:32:65:73:31:c9:46:2b:
         0d:4e:aa:42:17:84:0f:9b:f7:93:cc:0e:d8:b6:87:1e:dd:04:
         1e:12:88:f2:44:7a:12:5d:e9:c3:d7:37:b9:90:51:0a:a5:bf:
         2c:5b:eb:97:11:56:b2:91:c6:45:b8:36:c9:58:61:13:4e:95:
         f9:69:b8:88:59:69:74:c7:45:a0:3b:6a:32:73:1e:9a:b1:eb:
         3f:3c:59:ac:0d:79:a8:c3:27:49:31:4f:39:ed:c6:01:4e:f0:
         3a:4b:f6:b4:d5:5b:f8:cc:46:68:55:8b:65:d6:9e:e4:a0:a0:
         46:9e:59:92:df:3a:d0:aa:29:55:d4:aa:79:da:f4:62:4a:9a:
         f2:fc:3a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:50:42 2025 by rpki-client