Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft
File:                     7jfTSGm8YLfZ54M19KMjgftyEOU.mft (raw, json)
Hash identifier:          kcxzG1D1yQ5B/TxI+Ab0xcE6JSrlXiqPRmOCfKcxlJM=
Subject key identifier:   0F:AF:E1:B6:60:19:5B:03:67:A5:07:2F:62:2A:2C:24:36:41:E6:FA
Authority key identifier: EE:37:D3:48:69:BC:60:B7:D9:E7:83:35:F4:A3:23:81:FB:72:10:E5
Certificate issuer:       /CN=ee37d34869bc60b7d9e78335f4a32381fb7210e5
Certificate serial:       01969DF5BAB09E937E1A3E2C45426D4733C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft
Manifest number:          152E
Signing time:             Mon 05 May 2025 01:00:49 +0000
Manifest this update:     Mon 05 May 2025 01:00:49 +0000
Manifest next update:     Tue 06 May 2025 01:00:49 +0000
Files and hashes:         1: 7jfTSGm8YLfZ54M19KMjgftyEOU.crl (hash: 7wYTG9krS4IWucuyuG1jlWWZQzLIjz5fxd+GlK9OE+I=)
                          2: JjxG5JBV-4sLSO9ydbLM49BAtzE.roa (hash: cqElNxOa+f907x34fYoberfp0CD4VgTc1FzaMtoENtc=)
                          3: tkrTEHat3bSdWp0mTcT7h8ohu0E.roa (hash: 9f4QW5MnJXddCGseXoiWv8iW8ue5LxII6QEIhlpZ0fM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9d:f5:ba:b0:9e:93:7e:1a:3e:2c:45:42:6d:47:33:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee37d34869bc60b7d9e78335f4a32381fb7210e5
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : May  6 01:00:49 2025 GMT
        Subject: CN=0fafe1b660195b0367a5072f622a2c243641e6fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:58:6a:c3:d6:87:35:d0:eb:35:6f:71:bb:3b:
                    8c:91:e0:64:29:ce:37:b6:05:e9:c2:09:5e:b4:53:
                    79:71:b8:d0:3c:24:b1:69:49:c6:bb:d7:0e:24:37:
                    9b:e9:6d:40:a0:ec:3e:f0:9a:9b:08:59:19:61:12:
                    64:7f:aa:b4:a1:67:8c:0d:42:d2:d8:e2:d3:c6:6b:
                    2d:60:6b:ec:b7:8a:71:6a:4a:6e:2f:88:a2:24:54:
                    34:1d:2b:27:82:96:03:2a:b3:c7:b9:fc:af:50:c8:
                    88:af:9d:e3:82:f9:71:d1:c0:bb:b0:8a:fb:77:36:
                    5f:15:86:14:96:df:61:01:8d:5b:75:be:3b:a9:e6:
                    9a:db:c4:d8:a9:c8:38:f0:4f:a5:1d:ed:5f:3b:19:
                    f4:7e:ce:45:a5:33:25:67:86:2b:da:04:b5:6c:2e:
                    97:cc:b6:bc:33:5b:5f:0a:e9:7a:27:a6:2b:34:81:
                    11:d8:08:c1:3b:cf:53:1d:bb:26:48:c7:e4:1a:55:
                    14:b7:6c:26:0a:a8:a3:6f:9d:72:02:c4:59:ef:a7:
                    67:6e:ee:9f:c9:63:63:6e:80:66:8c:37:69:6e:33:
                    7d:06:5b:de:ca:b6:34:46:f6:72:04:d6:e4:c7:d0:
                    99:94:70:37:1d:b6:48:6f:fd:a4:99:6f:a2:2a:6b:
                    c6:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:AF:E1:B6:60:19:5B:03:67:A5:07:2F:62:2A:2C:24:36:41:E6:FA
            X509v3 Authority Key Identifier:
                keyid:EE:37:D3:48:69:BC:60:B7:D9:E7:83:35:F4:A3:23:81:FB:72:10:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:8c:6d:25:9a:8c:c5:fd:64:9f:32:a3:d8:41:fe:03:a3:36:
         d3:36:52:2a:ce:bf:3a:79:b1:a3:35:a0:9f:da:cc:a5:96:a3:
         54:12:c8:9b:79:54:02:ad:29:1e:a7:78:dd:88:ab:cb:34:71:
         eb:af:84:92:5f:01:bd:bf:32:b1:ed:8c:08:05:ba:51:85:91:
         5b:13:e6:28:45:be:6b:c5:ec:84:c4:8a:9c:a6:cd:c5:e9:f5:
         bb:d9:06:a5:11:e4:41:32:9a:d2:47:e1:89:ea:2c:7a:f7:eb:
         5d:d0:7d:90:92:15:54:b4:93:98:28:41:3a:89:c8:1d:a0:ad:
         60:63:f4:5e:06:ac:e9:32:6f:7d:ae:ec:c9:bd:6f:a1:52:af:
         d4:fe:81:ee:93:65:e5:ca:5c:a6:07:1f:f5:20:5c:b9:af:66:
         c6:f5:21:0c:00:bf:6a:cb:85:76:fd:14:e0:6e:8b:aa:61:77:
         79:fb:8d:b3:86:52:ce:10:fb:e3:a6:71:72:0f:bb:10:3e:27:
         16:76:27:6f:1a:af:98:27:3a:dd:ec:e4:36:e6:60:1e:3b:b3:
         76:fc:09:5a:7c:ee:73:3e:b9:6b:0a:b6:3a:4a:75:47:d3:c3:
         9d:d3:c8:be:c3:20:ab:53:bb:d5:d6:3a:7d:8b:05:b6:af:5a:
         37:78:d6:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 07:40:46 2025 by rpki-client