Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.mft
File:                     75S8y9TC4P-PeqsEXhSjEfOy-f4.mft (raw, json)
Hash identifier:          SYrs1V/12ppK9GdgNhdaDAOt3Dc43o1/yL1pTR8szj8=
Subject key identifier:   C8:86:A2:EB:7E:79:FA:AE:03:94:04:12:7F:CB:F9:EF:D3:46:54:15
Authority key identifier: EF:94:BC:CB:D4:C2:E0:FF:8F:7A:AB:04:5E:14:A3:11:F3:B2:F9:FE
Certificate issuer:       /CN=ef94bccbd4c2e0ff8f7aab045e14a311f3b2f9fe
Certificate serial:       0196BBC8EC738232F0FA8B431BC81B344478
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/75S8y9TC4P-PeqsEXhSjEfOy-f4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.mft
Manifest number:          0125
Signing time:             Sat 10 May 2025 20:00:28 +0000
Manifest this update:     Sat 10 May 2025 20:00:28 +0000
Manifest next update:     Sun 11 May 2025 20:00:28 +0000
Files and hashes:         1: 75S8y9TC4P-PeqsEXhSjEfOy-f4.crl (hash: O95xNMdcF9R+LqkcnfeNwkJO6DHjrGcDXr0nGRnRyaI=)
                          2: x_UGYHPi4KGbhasIbcCsyLRrLvc.roa (hash: TZUXAFaKqC1GafLAz2qnfFwZj2ZE2C3Lq2YMTRrQmKk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/75S8y9TC4P-PeqsEXhSjEfOy-f4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 20:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bb:c8:ec:73:82:32:f0:fa:8b:43:1b:c8:1b:34:44:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef94bccbd4c2e0ff8f7aab045e14a311f3b2f9fe
        Validity
            Not Before: May 10 20:00:28 2025 GMT
            Not After : May 11 20:00:28 2025 GMT
        Subject: CN=c886a2eb7e79faae039404127fcbf9efd3465415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:bc:73:64:d4:6e:ca:92:d2:ce:46:2c:ff:bf:
                    e7:07:b1:da:92:f6:fc:70:bf:a4:b4:a3:cd:77:a5:
                    78:d1:c0:60:74:17:27:f2:99:0f:ea:c0:90:88:12:
                    c2:4d:10:7e:34:fd:86:22:f1:e0:b4:13:fb:2f:a8:
                    57:79:d4:b6:3e:99:6c:79:a0:69:5f:ab:a2:e1:92:
                    f1:bb:5f:61:0b:6b:4b:a2:26:47:93:7c:f5:f4:ca:
                    43:db:89:b6:90:0a:a0:0c:f7:46:4a:a6:ec:da:0d:
                    eb:d3:8a:5c:6e:68:6e:d7:c6:13:48:00:fe:42:72:
                    a5:83:82:6d:8f:b4:7b:05:47:34:e5:e7:58:cb:29:
                    28:b8:d9:c2:14:0c:f5:90:d2:48:8e:48:ce:a3:ef:
                    22:14:76:6c:de:33:83:fe:2c:d1:30:a2:11:f2:6b:
                    25:e0:f5:6a:6f:3b:a4:eb:d1:b4:16:83:2a:18:77:
                    41:da:93:a4:8b:bf:12:54:4a:60:2c:81:f0:85:0d:
                    ff:e3:a1:39:6a:d6:12:19:ea:b1:7e:7d:91:ff:cc:
                    8d:81:13:13:50:ef:de:95:ad:d0:7b:e9:3a:88:d9:
                    17:40:91:9e:a0:ae:2b:2e:9a:ca:c5:b9:ca:00:1a:
                    bd:93:bb:10:93:be:39:8a:21:d6:20:12:07:f2:b3:
                    ca:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:86:A2:EB:7E:79:FA:AE:03:94:04:12:7F:CB:F9:EF:D3:46:54:15
            X509v3 Authority Key Identifier:
                keyid:EF:94:BC:CB:D4:C2:E0:FF:8F:7A:AB:04:5E:14:A3:11:F3:B2:F9:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/75S8y9TC4P-PeqsEXhSjEfOy-f4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:0e:84:13:f0:eb:fe:56:1e:3a:94:5a:9b:95:60:5f:59:ec:
         6b:8d:fe:5c:3d:00:22:03:47:4d:e8:4e:ff:fe:50:9a:46:c3:
         e8:72:d7:20:11:a9:6d:4e:81:12:fc:7f:6e:d0:8d:54:8c:8f:
         59:42:df:35:d1:8e:5b:68:cd:52:2e:15:b9:bd:c0:d8:a5:1a:
         c5:e9:b1:2f:ee:97:d0:0a:52:2d:d9:d7:c8:35:aa:04:3c:4f:
         61:c0:7b:e2:ef:57:d4:fe:60:99:91:07:47:0b:67:f2:ca:f6:
         2b:40:8a:f6:36:b8:74:be:97:cf:81:01:cd:d9:22:79:aa:cd:
         8d:0d:92:ca:2e:82:08:85:be:d8:ae:7f:e0:f1:7c:73:06:33:
         65:89:29:73:e0:bf:ed:25:35:92:42:3e:6f:28:5b:92:b9:d0:
         b0:2e:48:3a:69:25:34:15:6e:db:6c:80:c3:d6:bd:14:85:b0:
         e8:e6:50:9b:f2:a6:8a:e6:46:8b:45:0f:ed:82:05:7f:4d:60:
         26:c1:ca:a4:b7:00:88:69:7b:28:f2:69:d3:8c:79:db:f1:d7:
         74:4d:16:07:c9:80:29:78:3a:4a:71:95:e2:41:9a:63:7c:63:
         80:43:06:e8:f7:b2:c8:55:b2:26:d4:c6:6d:5d:2f:bf:4d:c1:
         21:15:82:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:32:22 2025 by rpki-client