Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41d883-d99c-414b-9ab1-85a4926a739d/1/dLOekBkiWjsP_gWoNW6-8zwnvpc.mft
File:                     dLOekBkiWjsP_gWoNW6-8zwnvpc.mft (raw, json)
Hash identifier:          uBek5TxzQXjxjiqYVL9Gqq3nICDyp/nLlvGVQ4hCbEM=
Subject key identifier:   79:89:AD:D2:FB:FE:B6:96:51:8B:F2:3D:71:C8:6D:8D:8F:B8:11:4B
Authority key identifier: 74:B3:9E:90:19:22:5A:3B:0F:FE:05:A8:35:6E:BE:F3:3C:27:BE:97
Certificate issuer:       /CN=74b39e9019225a3b0ffe05a8356ebef33c27be97
Certificate serial:       0196A84238CADE772753A99BAEC24E63E76A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dLOekBkiWjsP_gWoNW6-8zwnvpc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/41d883-d99c-414b-9ab1-85a4926a739d/1/dLOekBkiWjsP_gWoNW6-8zwnvpc.mft
Manifest number:          051C
Signing time:             Wed 07 May 2025 01:00:34 +0000
Manifest this update:     Wed 07 May 2025 01:00:34 +0000
Manifest next update:     Thu 08 May 2025 01:00:34 +0000
Files and hashes:         1: ZRVv1QEy1kLLZIQQzKY3v_cBQvM.roa (hash: dP4rVEZl+sj+rbeXk/M+iHEaNgIv2c4UoqRTeljUbU8=)
                          2: dLOekBkiWjsP_gWoNW6-8zwnvpc.crl (hash: MVeXQu1UvzQICS2EXCdFZtKWAnOBYcu6lYMvd2/+S1Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/41d883-d99c-414b-9ab1-85a4926a739d/1/dLOekBkiWjsP_gWoNW6-8zwnvpc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/41d883-d99c-414b-9ab1-85a4926a739d/1/dLOekBkiWjsP_gWoNW6-8zwnvpc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dLOekBkiWjsP_gWoNW6-8zwnvpc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a8:42:38:ca:de:77:27:53:a9:9b:ae:c2:4e:63:e7:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b39e9019225a3b0ffe05a8356ebef33c27be97
        Validity
            Not Before: May  7 01:00:34 2025 GMT
            Not After : May  8 01:00:34 2025 GMT
        Subject: CN=7989add2fbfeb696518bf23d71c86d8d8fb8114b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c3:17:1d:2e:28:75:6b:86:ad:9b:d1:91:b9:
                    1c:2d:a4:29:24:35:79:dc:74:71:3d:c5:c1:99:b5:
                    89:ea:22:d1:f5:b7:da:50:8a:0b:37:85:fd:6f:6e:
                    72:fe:65:47:f4:a1:14:bd:8c:07:d1:49:21:49:6a:
                    17:c0:67:36:a6:be:f8:b2:f8:14:18:25:cf:b1:0d:
                    0d:3e:33:fa:57:60:cd:a7:b6:59:97:30:df:dc:fb:
                    e3:04:ea:d1:84:1b:75:e5:78:72:d8:bc:70:4b:fa:
                    07:6d:2d:9c:b5:c1:86:69:ed:9f:6b:eb:80:9d:a9:
                    0d:05:9c:3d:78:57:05:67:e8:ac:0f:88:4d:a5:fe:
                    b2:0d:81:40:4c:db:46:00:7f:8e:5e:a4:66:56:7c:
                    6f:bd:fd:ca:d6:5a:08:d1:29:41:7d:6f:36:8c:e4:
                    0d:90:1c:b9:94:81:52:63:8f:ec:ef:03:4e:12:31:
                    8d:ef:69:ee:0e:1c:30:79:0f:5a:d3:33:82:a0:a4:
                    89:5c:12:c5:00:d8:72:ed:15:af:d7:4b:7e:ff:1c:
                    eb:9e:f5:63:af:dd:53:e4:8e:9d:a5:f5:6f:9d:d6:
                    32:43:8f:77:89:e1:ad:17:7f:ee:10:cd:5b:1f:5e:
                    a0:80:cc:50:0b:8c:77:be:9d:50:8f:2d:87:61:39:
                    75:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:89:AD:D2:FB:FE:B6:96:51:8B:F2:3D:71:C8:6D:8D:8F:B8:11:4B
            X509v3 Authority Key Identifier:
                keyid:74:B3:9E:90:19:22:5A:3B:0F:FE:05:A8:35:6E:BE:F3:3C:27:BE:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLOekBkiWjsP_gWoNW6-8zwnvpc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41d883-d99c-414b-9ab1-85a4926a739d/1/dLOekBkiWjsP_gWoNW6-8zwnvpc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41d883-d99c-414b-9ab1-85a4926a739d/1/dLOekBkiWjsP_gWoNW6-8zwnvpc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:80:b0:1f:84:f2:11:6a:e4:ad:42:2a:e0:ab:3c:c6:8a:89:
         f3:25:dc:1e:db:9a:6b:c8:9e:30:1d:2f:21:3d:c1:f6:c9:d1:
         9b:c8:0d:57:25:18:fa:de:25:3e:e2:21:9d:30:26:1c:77:1b:
         08:d7:1f:0f:7f:ca:0d:3b:e0:ad:ca:c4:f5:49:69:e9:ee:b0:
         30:d1:d9:47:f9:2e:9b:38:ae:57:ed:e1:c7:a0:b5:ba:02:37:
         42:96:ea:ae:de:a3:96:12:f2:68:1f:97:57:ce:4d:91:1e:cc:
         a2:a7:92:f2:b2:4e:4a:01:a3:78:76:f1:3c:2e:2b:fd:3e:c0:
         c2:42:bc:83:b7:26:8d:aa:a8:6c:85:46:02:4b:b3:51:64:5c:
         46:89:03:1c:e7:a4:df:6c:0f:3d:b8:a1:36:71:13:3d:ec:92:
         63:5f:a9:f9:08:04:9a:f6:0e:9d:79:fe:72:66:4c:68:95:27:
         b6:e1:b9:60:19:14:28:01:db:3c:9f:18:23:c8:a0:16:5d:1e:
         89:8d:d8:23:e8:88:b5:1a:5d:06:56:93:5d:29:eb:a7:8c:ae:
         02:53:c2:12:41:23:61:3f:2a:4b:56:50:a9:16:fe:7e:24:b3:
         79:1e:b4:25:d3:ad:ea:be:d5:56:ac:d5:ae:59:89:54:a3:8f:
         b5:72:1d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 06:01:00 2025 by rpki-client