Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/L_vZ3o2JUmxaSadmwfSF8J9akWY.mft
File:                     L_vZ3o2JUmxaSadmwfSF8J9akWY.mft (raw, json)
Hash identifier:          G4/RAelwOfCkg3gHeKMe6DJbHEG4zQnLIqI/qXLi9VE=
Subject key identifier:   27:EF:1C:C6:9A:25:CC:90:B8:05:E7:CC:2D:B2:B8:02:E6:AF:47:D6
Authority key identifier: 2F:FB:D9:DE:8D:89:52:6C:5A:49:A7:66:C1:F4:85:F0:9F:5A:91:66
Certificate issuer:       /CN=2ffbd9de8d89526c5a49a766c1f485f09f5a9166
Certificate serial:       0196A5E5EA9FF5060A079BC8E66681D97884
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L_vZ3o2JUmxaSadmwfSF8J9akWY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/L_vZ3o2JUmxaSadmwfSF8J9akWY.mft
Manifest number:          07E1
Signing time:             Tue 06 May 2025 14:00:30 +0000
Manifest this update:     Tue 06 May 2025 14:00:30 +0000
Manifest next update:     Wed 07 May 2025 14:00:30 +0000
Files and hashes:         1: L_vZ3o2JUmxaSadmwfSF8J9akWY.crl (hash: DuFS554phANMGeMFnMDl8vLsAIxT7zbSjPNx5OcgoNI=)
                          2: mXwM3P_PQQyVSERAjNUZUTUhWjg.roa (hash: 4+JoMMio3r7vvH6PXd1vvlGKdXZmMUa4KFkXT7FGKzk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/L_vZ3o2JUmxaSadmwfSF8J9akWY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/L_vZ3o2JUmxaSadmwfSF8J9akWY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L_vZ3o2JUmxaSadmwfSF8J9akWY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 14:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a5:e5:ea:9f:f5:06:0a:07:9b:c8:e6:66:81:d9:78:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ffbd9de8d89526c5a49a766c1f485f09f5a9166
        Validity
            Not Before: May  6 14:00:30 2025 GMT
            Not After : May  7 14:00:30 2025 GMT
        Subject: CN=27ef1cc69a25cc90b805e7cc2db2b802e6af47d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:40:dd:e9:e1:ee:09:85:c9:ee:75:a6:e1:f0:
                    3e:68:8c:1e:3a:e1:4e:31:eb:a9:17:b7:4f:ad:6f:
                    13:d1:9a:fb:ab:a8:2e:20:38:f4:50:72:1f:da:e2:
                    8c:65:81:3e:80:bc:aa:c7:fe:8d:1c:64:6e:29:21:
                    64:bd:40:70:c2:78:c5:e8:96:d3:24:75:49:fd:81:
                    25:22:a5:fb:c1:b5:7e:72:39:a9:c6:3e:36:b4:60:
                    71:84:1d:57:7b:d1:25:ce:cf:6c:e9:f5:61:49:fb:
                    0e:8e:0e:78:b1:19:7b:1c:2d:5b:a1:7b:7f:a3:ad:
                    80:b0:e5:35:30:02:bf:04:80:d9:47:1d:d0:47:a9:
                    dc:bf:90:95:da:21:56:3e:9a:fc:52:09:8b:81:04:
                    bd:5b:f2:42:59:19:53:d1:d6:50:7d:46:a5:32:01:
                    cb:3f:13:9a:9a:db:85:41:d7:59:82:34:ba:7d:8c:
                    e5:5e:30:93:8a:bc:38:b9:9b:74:a3:42:66:21:fa:
                    9f:35:f0:88:53:b4:f4:6f:01:87:77:16:6d:c2:15:
                    fe:e6:90:47:1e:fd:1c:e2:1e:54:26:17:19:bf:1e:
                    4f:15:13:c9:32:e5:5f:b5:62:bc:97:4a:95:73:c4:
                    10:4b:92:55:b7:9a:9e:5c:ec:69:fd:0f:d4:f2:55:
                    d4:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:EF:1C:C6:9A:25:CC:90:B8:05:E7:CC:2D:B2:B8:02:E6:AF:47:D6
            X509v3 Authority Key Identifier:
                keyid:2F:FB:D9:DE:8D:89:52:6C:5A:49:A7:66:C1:F4:85:F0:9F:5A:91:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L_vZ3o2JUmxaSadmwfSF8J9akWY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/L_vZ3o2JUmxaSadmwfSF8J9akWY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/L_vZ3o2JUmxaSadmwfSF8J9akWY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:dd:25:83:cd:63:bc:2d:42:8b:36:ae:67:e6:a4:c6:dc:f4:
         ff:3d:08:12:92:df:cb:9b:8b:f6:52:a7:8a:0c:26:68:95:2a:
         e1:60:7d:fc:2e:27:6e:17:ad:de:0d:c9:1a:cb:23:31:3e:50:
         c5:0e:e6:be:99:13:ec:ef:37:2d:09:9d:26:83:f5:0e:3e:d6:
         e8:17:d6:6f:4b:74:a7:86:ff:24:c9:3d:1c:8d:c2:30:5f:52:
         3f:9b:54:63:72:f8:8c:c1:15:9b:c7:5b:fd:7e:47:97:ab:b4:
         c5:c9:ac:53:f9:02:de:06:3a:47:52:4b:3f:ae:e3:0b:66:c3:
         d2:9e:d7:8f:b6:62:0e:6a:89:43:9c:5d:49:e6:9b:42:79:a9:
         85:b2:18:ab:c2:ee:9e:c6:29:c4:a1:63:88:92:57:7c:21:69:
         23:48:4b:d2:e8:0f:e9:48:d0:b0:be:8c:b1:6f:19:5f:6d:9c:
         c5:b7:2f:14:7d:12:13:c3:84:65:db:9d:c9:8b:8e:79:a4:53:
         f1:5f:ea:31:be:7f:49:e7:68:b7:6d:99:1e:f0:69:ff:28:89:
         25:81:ba:5e:34:f7:7a:ca:6f:59:72:ab:05:16:9b:85:5c:77:
         e9:3e:22:70:09:7a:98:3c:57:50:cb:1d:bf:ee:d7:dc:4a:0f:
         f0:6b:16:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 23:21:54 2025 by rpki-client