Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/0PFLigjLX4BX1IsD5T9Fi44f7tY.mft
File:                     0PFLigjLX4BX1IsD5T9Fi44f7tY.mft (raw, json)
Hash identifier:          0K9qp8fZYLby1Jw66vIgemPvHAEO1AoIcDdiVKGj9H8=
Subject key identifier:   E1:45:F2:A7:5D:B3:AD:A0:DA:E0:21:B3:32:5B:3F:E4:5D:93:F8:51
Authority key identifier: D0:F1:4B:8A:08:CB:5F:80:57:D4:8B:03:E5:3F:45:8B:8E:1F:EE:D6
Certificate issuer:       /CN=d0f14b8a08cb5f8057d48b03e53f458b8e1feed6
Certificate serial:       0196C79676858066F62394B15CC7A90467CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0PFLigjLX4BX1IsD5T9Fi44f7tY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/0PFLigjLX4BX1IsD5T9Fi44f7tY.mft
Manifest number:          0187
Signing time:             Tue 13 May 2025 03:00:48 +0000
Manifest this update:     Tue 13 May 2025 03:00:48 +0000
Manifest next update:     Wed 14 May 2025 03:00:48 +0000
Files and hashes:         1: 0PFLigjLX4BX1IsD5T9Fi44f7tY.crl (hash: DaJR5oRxaAQIhA3/8Kl0rXXtx6C0yEapAzevqooPznY=)
                          2: 5XHmlHMatoj7HuqzW-xKZFCBoCk.roa (hash: 2LwcEFXQBzd4wv+NbYjPLMlRT/J2wftX73OmJ3FhceM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/0PFLigjLX4BX1IsD5T9Fi44f7tY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/0PFLigjLX4BX1IsD5T9Fi44f7tY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0PFLigjLX4BX1IsD5T9Fi44f7tY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 03:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c7:96:76:85:80:66:f6:23:94:b1:5c:c7:a9:04:67:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0f14b8a08cb5f8057d48b03e53f458b8e1feed6
        Validity
            Not Before: May 13 03:00:48 2025 GMT
            Not After : May 14 03:00:48 2025 GMT
        Subject: CN=e145f2a75db3ada0dae021b3325b3fe45d93f851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:2c:e1:45:a1:cd:c3:72:50:08:81:4d:2e:3e:
                    0e:9a:5d:45:bc:df:6c:bf:2d:02:fc:27:1e:a3:4b:
                    7d:25:da:98:68:f7:ac:d0:c2:e8:30:5c:c1:92:ec:
                    f2:18:62:9b:6a:5b:7a:cf:e7:11:3c:77:43:27:e8:
                    7c:ce:7c:8d:ca:29:e2:f4:45:82:ec:7a:3d:40:b6:
                    5a:fd:6a:77:bc:0d:47:3d:fa:b5:d4:b1:d3:43:6f:
                    85:62:d8:f2:40:05:1a:85:c4:78:ce:d7:f4:90:c3:
                    00:07:3c:81:e7:ea:d0:8c:70:16:ba:0f:21:24:37:
                    5e:3e:01:0b:98:62:81:51:04:66:04:f5:cb:a2:1e:
                    0d:1d:2b:ec:2d:a2:a6:fd:7a:9b:36:45:ad:5b:43:
                    49:6c:21:ec:bc:f3:68:f1:83:0c:b6:3f:2c:f6:5f:
                    7f:ce:d8:4b:70:9d:5a:ec:97:f0:1d:69:3b:8f:d1:
                    b3:97:30:4b:4f:a8:ee:e8:62:e4:86:42:a7:32:07:
                    8b:5a:58:3a:fc:ea:a1:2b:12:d5:95:60:f0:f5:bd:
                    d9:bb:6c:ed:08:6b:e8:37:59:ee:75:a6:b7:b8:d5:
                    7e:ca:e8:58:b7:c8:8b:79:d2:28:54:8d:3a:7b:01:
                    8d:17:33:87:66:47:b9:29:46:72:5a:85:03:ef:af:
                    6d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:45:F2:A7:5D:B3:AD:A0:DA:E0:21:B3:32:5B:3F:E4:5D:93:F8:51
            X509v3 Authority Key Identifier:
                keyid:D0:F1:4B:8A:08:CB:5F:80:57:D4:8B:03:E5:3F:45:8B:8E:1F:EE:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PFLigjLX4BX1IsD5T9Fi44f7tY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/0PFLigjLX4BX1IsD5T9Fi44f7tY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/0PFLigjLX4BX1IsD5T9Fi44f7tY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:c5:92:3a:bb:d3:2f:7b:a6:7a:22:ed:a3:29:01:b7:3c:cc:
         14:4b:b3:d7:95:1e:ce:6a:6b:fa:64:ce:2c:49:a4:ab:ea:f0:
         5b:fc:e8:cb:72:9d:e7:30:ab:3c:2f:9e:9a:d9:8e:59:de:84:
         e4:a5:27:5d:da:8a:91:64:3f:98:a2:d8:fa:23:9a:7c:de:d9:
         57:ea:44:08:c6:4d:d0:d1:0d:36:92:27:a0:60:68:77:6f:2c:
         49:dc:65:2d:e9:b1:44:08:b7:74:7a:76:c8:1f:2f:2c:e5:d9:
         19:7c:54:95:aa:59:ea:3e:ad:e5:74:4e:da:66:7d:84:78:c0:
         a0:bd:ea:bc:92:3e:0f:87:b8:8f:2f:c9:c0:6b:f3:85:2e:83:
         62:c3:43:a8:3d:0a:41:e5:62:4f:f7:fd:d8:cf:2c:43:f9:60:
         be:85:4d:2b:78:41:8f:27:63:e3:77:04:ce:52:0e:ff:3e:e0:
         5f:e2:f9:05:dd:95:59:67:eb:54:a7:1f:79:5a:66:90:c3:3f:
         62:ff:8e:d8:cc:ff:7f:a8:05:92:51:87:2c:97:b3:ff:27:c3:
         bb:02:03:c2:d8:be:0b:08:6b:1a:7d:d9:3b:13:ea:72:42:fc:
         ee:dc:9d:80:20:d5:96:9a:d4:45:62:6c:06:40:a0:5d:ce:d3:
         2a:d6:30:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 10:01:34 2025 by rpki-client