Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/7008fc-acc4-4ef5-8fb9-90795fb3928c/1/Mn2iLLkBOLBQg37c8ew2pauMQqw.mft
File:                     Mn2iLLkBOLBQg37c8ew2pauMQqw.mft (raw, json)
Hash identifier:          9oxQA0+TqByEq6tFxu1ITPttjF455tYfpcd8zvMeEZg=
Subject key identifier:   F8:CA:54:15:16:35:1A:0F:AE:3C:3F:B9:5A:A6:58:D3:06:D6:EE:AF
Authority key identifier: 32:7D:A2:2C:B9:01:38:B0:50:83:7E:DC:F1:EC:36:A5:AB:8C:42:AC
Certificate issuer:       /CN=327da22cb90138b050837edcf1ec36a5ab8c42ac
Certificate serial:       0196BC00412BE5C348DDC1ED529FBF88785E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mn2iLLkBOLBQg37c8ew2pauMQqw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/7008fc-acc4-4ef5-8fb9-90795fb3928c/1/Mn2iLLkBOLBQg37c8ew2pauMQqw.mft
Manifest number:          1192
Signing time:             Sat 10 May 2025 21:00:55 +0000
Manifest this update:     Sat 10 May 2025 21:00:55 +0000
Manifest next update:     Sun 11 May 2025 21:00:55 +0000
Files and hashes:         1: Mn2iLLkBOLBQg37c8ew2pauMQqw.crl (hash: okH3uNX2ZyWV+tc1iLQx01ZmZckn4SJ9UzzsBAzFRGI=)
                          2: Ws-3to11mYQT65QlLPSv_a64Aow.roa (hash: bLLs3zCR6QgpvfFD4PT4W3Xh5DmPnAizoHMgUfONgYQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/7008fc-acc4-4ef5-8fb9-90795fb3928c/1/Mn2iLLkBOLBQg37c8ew2pauMQqw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/7008fc-acc4-4ef5-8fb9-90795fb3928c/1/Mn2iLLkBOLBQg37c8ew2pauMQqw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mn2iLLkBOLBQg37c8ew2pauMQqw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bc:00:41:2b:e5:c3:48:dd:c1:ed:52:9f:bf:88:78:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=327da22cb90138b050837edcf1ec36a5ab8c42ac
        Validity
            Not Before: May 10 21:00:55 2025 GMT
            Not After : May 11 21:00:55 2025 GMT
        Subject: CN=f8ca541516351a0fae3c3fb95aa658d306d6eeaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:69:80:84:14:fe:d1:03:5f:73:94:85:77:7c:
                    ec:34:82:b9:1e:f4:3d:51:e9:7e:8f:f2:28:9e:ee:
                    a3:75:b0:bf:14:ce:e1:f0:97:cc:2a:5a:96:a0:9d:
                    b2:81:85:e4:62:82:12:64:2d:ee:21:fc:44:a4:df:
                    02:63:0e:6a:24:c7:2a:6f:63:cd:e9:85:35:46:3e:
                    d1:d8:30:f5:4b:33:26:de:cc:67:b2:2a:88:36:2a:
                    6a:35:21:da:69:04:f4:e9:24:e5:75:f6:36:f0:7c:
                    4a:3f:92:a5:d0:37:1e:d8:e4:ad:f9:91:bc:d6:52:
                    c4:54:fd:dd:76:e7:c2:8d:0f:3b:2e:81:01:a3:93:
                    de:75:4b:3d:00:90:64:29:38:76:14:0d:b5:94:38:
                    a9:6a:a6:c1:12:d7:ba:49:25:4c:40:a8:76:9f:c0:
                    72:6e:8d:45:59:c2:dc:bf:0c:c9:fe:4b:8a:4a:0c:
                    50:43:a7:07:92:2e:dd:6c:ae:58:2f:90:00:a9:ee:
                    a4:75:10:8a:c3:82:a8:42:20:fd:b5:8a:63:f4:78:
                    4e:32:fa:19:51:58:2c:8d:d2:27:6e:a6:35:09:96:
                    9f:db:e6:6a:3e:c8:17:a4:b0:75:f8:a7:8f:09:b2:
                    09:6c:36:46:90:36:f5:31:89:fd:46:bb:2a:a8:e1:
                    07:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:CA:54:15:16:35:1A:0F:AE:3C:3F:B9:5A:A6:58:D3:06:D6:EE:AF
            X509v3 Authority Key Identifier:
                keyid:32:7D:A2:2C:B9:01:38:B0:50:83:7E:DC:F1:EC:36:A5:AB:8C:42:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mn2iLLkBOLBQg37c8ew2pauMQqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/7008fc-acc4-4ef5-8fb9-90795fb3928c/1/Mn2iLLkBOLBQg37c8ew2pauMQqw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/7008fc-acc4-4ef5-8fb9-90795fb3928c/1/Mn2iLLkBOLBQg37c8ew2pauMQqw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:15:39:2b:6a:4c:03:e7:fb:9f:ef:31:08:3a:89:7c:73:00:
         75:8d:d9:8e:2c:a4:73:25:e8:0e:d8:65:12:84:a6:85:5f:5e:
         5f:e4:0b:5a:97:70:0d:06:70:e3:a7:ce:5d:de:87:76:97:10:
         9e:10:4a:30:f0:2c:3c:e5:78:ad:35:d9:4a:7c:92:8b:44:36:
         38:35:0e:c7:d9:e0:ef:2b:06:22:ef:7e:13:39:51:bf:d4:9c:
         57:ba:b5:fb:c1:1e:67:28:5c:06:b4:29:94:1b:00:a6:e8:e9:
         13:95:54:3d:66:ae:f7:03:9a:41:8c:06:08:bc:3f:ee:42:96:
         df:ea:49:9f:1c:7b:3a:98:15:82:b3:29:2d:20:45:ed:fa:8a:
         75:4a:44:e1:d8:0b:13:c6:57:a3:de:7e:e8:b2:63:d5:20:a4:
         68:a8:f2:62:de:3e:a7:dc:ef:ff:33:9d:30:d7:51:e1:69:1b:
         d0:bd:23:de:99:43:2e:91:2a:49:52:7b:a1:a2:2a:85:54:ab:
         79:61:8b:39:6f:84:a7:86:39:f0:f6:6a:62:99:fe:0f:61:49:
         bf:59:80:a0:78:66:0f:65:1e:89:04:cb:97:b3:d0:65:44:27:
         ca:ab:5c:93:21:4d:57:45:c7:0a:a1:80:36:81:e2:74:93:86:
         53:61:80:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 23:02:32 2025 by rpki-client