Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft
File:                     RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft (raw, json)
Hash identifier:          4N+YL/6bsC78Nx0TZF5UAYQ2W4bImLgMIaQH1znnQck=
Subject key identifier:   E4:C0:A9:2B:A7:13:0D:6D:1D:20:AD:42:75:9F:10:B0:01:A9:EE:70
Authority key identifier: 46:03:C6:56:C1:97:46:1A:49:CA:A1:FF:D7:20:D1:8B:EE:AC:80:76
Certificate issuer:       /CN=4603c656c197461a49caa1ffd720d18beeac8076
Certificate serial:       0196C2DD871D636700A64B8BA0CA7AAC2CD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RgPGVsGXRhpJyqH_1yDRi-6sgHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft
Manifest number:          02FF
Signing time:             Mon 12 May 2025 05:00:19 +0000
Manifest this update:     Mon 12 May 2025 05:00:19 +0000
Manifest next update:     Tue 13 May 2025 05:00:19 +0000
Files and hashes:         1: RgPGVsGXRhpJyqH_1yDRi-6sgHY.crl (hash: NeZAs3Ljr8ZZ1AFxnieiUOeYg+vBC2/dJrn3EzkxU8w=)
                          2: etkRbnW9ryrJ6e3ywwJ1q9bD7Xw.roa (hash: JMmWgxd8mijwpLVsPTeG3AKA8OAxDNzyK+lSzQE8/U0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RgPGVsGXRhpJyqH_1yDRi-6sgHY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 05:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c2:dd:87:1d:63:67:00:a6:4b:8b:a0:ca:7a:ac:2c:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4603c656c197461a49caa1ffd720d18beeac8076
        Validity
            Not Before: May 12 05:00:19 2025 GMT
            Not After : May 13 05:00:19 2025 GMT
        Subject: CN=e4c0a92ba7130d6d1d20ad42759f10b001a9ee70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5d:6b:4d:7f:5e:2d:70:c1:91:44:00:7c:2a:
                    4d:38:35:9d:00:48:a0:05:81:7b:8d:b4:62:ea:84:
                    e3:09:8f:41:e4:e9:d5:e6:36:78:7a:e1:f6:1c:25:
                    b9:60:48:79:43:ef:21:ce:b6:59:8c:59:6f:a5:16:
                    b8:1a:73:10:61:1e:82:bb:f9:3c:d2:78:f5:61:b2:
                    76:51:44:2d:95:6d:99:3c:4d:4d:19:88:e6:f0:b3:
                    c3:ac:9a:6d:b3:bb:5c:15:39:74:23:b2:65:b9:8c:
                    3a:c4:c5:00:63:1a:fa:1c:fe:2e:42:03:c4:5b:0d:
                    98:67:70:07:aa:f5:97:f8:08:16:bc:74:f2:14:a1:
                    77:03:b8:b8:32:4c:18:39:63:98:45:62:8a:99:bb:
                    af:18:f6:73:16:bf:34:51:99:56:fa:fb:62:46:59:
                    94:4b:38:91:75:c4:c4:fb:b7:b6:b3:d4:f8:3b:cc:
                    88:72:18:92:f9:a2:e8:51:ba:3b:fb:3a:29:2b:27:
                    8f:23:01:65:c9:04:77:fb:54:5e:3d:8e:e0:f3:c7:
                    c0:e5:ff:d5:af:97:2b:29:29:b7:e9:46:84:31:81:
                    42:9c:29:fc:59:5f:39:b1:bd:c7:2e:e1:b7:73:d8:
                    0a:a5:7d:2f:2f:b1:c1:76:90:4f:09:91:1f:e6:8c:
                    61:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:C0:A9:2B:A7:13:0D:6D:1D:20:AD:42:75:9F:10:B0:01:A9:EE:70
            X509v3 Authority Key Identifier:
                keyid:46:03:C6:56:C1:97:46:1A:49:CA:A1:FF:D7:20:D1:8B:EE:AC:80:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RgPGVsGXRhpJyqH_1yDRi-6sgHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:67:12:61:32:b4:1f:15:b4:e1:85:11:f7:9f:79:7a:2d:1c:
         a3:51:09:31:dd:83:30:72:32:61:ba:49:95:7f:8d:c8:c2:3b:
         66:cd:ff:f9:43:13:b7:6f:12:28:a8:f9:b3:0c:c3:da:19:30:
         1c:1f:13:ca:bd:ca:f4:be:32:68:93:88:58:79:f7:c7:53:71:
         2b:15:51:6e:2b:65:9e:aa:22:1b:c6:04:06:05:76:0d:df:6f:
         55:94:52:14:f3:46:16:72:d2:3d:a0:86:12:39:b5:67:89:79:
         19:09:ff:32:ac:81:94:b6:ca:3e:b9:76:43:31:00:38:e0:96:
         e0:b0:0c:0a:17:6a:85:4c:9f:49:03:2a:5e:c8:7a:6e:df:69:
         10:84:88:e4:df:8f:45:cc:65:73:38:a1:ec:57:68:c7:c5:aa:
         95:96:78:2c:f7:8e:e1:49:7d:43:ee:8a:29:90:7e:98:74:e8:
         bc:d6:fe:1a:62:8d:6e:d3:48:34:64:1a:49:ef:46:b4:ed:c6:
         9b:2a:fe:3a:aa:83:49:e9:2e:53:14:58:56:39:33:01:fd:39:
         9f:2b:cc:2a:d8:61:48:93:68:b4:0d:bf:fa:42:37:9d:12:3f:
         f4:1f:75:a1:fd:8c:0d:57:a0:e9:67:2d:23:bf:0f:b7:65:0d:
         f6:f6:07:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:33:14 2025 by rpki-client