Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft
File:                     Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft (raw, json)
Hash identifier:          oymu+fvq850aGVruzT7VZYIewe9IldGqnZJplCrw0Ow=
Subject key identifier:   03:28:8F:09:43:2A:4B:1A:F0:AC:5D:E1:56:EB:3D:0B:28:3D:B4:50
Authority key identifier: 4E:AE:FC:49:E6:CD:67:E2:59:96:A2:C0:FC:57:B8:0C:C2:3D:BA:44
Certificate issuer:       /CN=4eaefc49e6cd67e25996a2c0fc57b80cc23dba44
Certificate serial:       0196CFBDEFF9C5246DE59B2B27C80F14543C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft
Manifest number:          14D0
Signing time:             Wed 14 May 2025 17:00:53 +0000
Manifest this update:     Wed 14 May 2025 17:00:53 +0000
Manifest next update:     Thu 15 May 2025 17:00:53 +0000
Files and hashes:         1: Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.crl (hash: kK9LAb07oztKmDZm/s3uRVKvd5V7g7DQu/7SzVKpjqM=)
                          2: pXY7p3AnqDJfjALLmtVHw8U2GfM.roa (hash: ZUNXce9TBnEjmUfFa15l+WlhliqRz/AO8NwAB4Sid60=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 17:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cf:bd:ef:f9:c5:24:6d:e5:9b:2b:27:c8:0f:14:54:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eaefc49e6cd67e25996a2c0fc57b80cc23dba44
        Validity
            Not Before: May 14 17:00:53 2025 GMT
            Not After : May 15 17:00:53 2025 GMT
        Subject: CN=03288f09432a4b1af0ac5de156eb3d0b283db450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:3c:a2:4d:21:a0:0f:d1:c6:66:e1:0b:16:d7:
                    a2:e7:83:33:29:8c:3a:82:a5:0b:02:7b:77:cf:41:
                    b2:20:44:0f:c8:2f:57:e1:6f:c8:f2:cc:8b:75:e3:
                    08:86:db:d0:08:b2:f9:49:97:3f:33:d2:bc:3f:6e:
                    ec:65:9d:4f:b2:21:f6:2a:bf:f6:b1:f7:ae:a9:89:
                    07:a1:e1:9e:53:a6:96:9b:91:ec:62:54:28:32:f0:
                    a9:c5:9d:03:2d:83:88:39:b2:ff:68:10:bb:57:4b:
                    62:ab:83:6f:61:78:5d:c8:67:1f:96:5d:bd:c2:ef:
                    1d:cd:4e:4b:ec:dc:45:12:1a:45:7f:b7:a9:53:bb:
                    ed:42:64:2c:0b:fc:91:58:fd:2c:d9:f3:13:1f:7a:
                    a8:d5:8b:ec:ef:e0:27:75:11:28:66:6c:c4:b2:06:
                    6b:ef:4a:16:73:45:cf:1a:09:89:24:d5:cb:59:10:
                    50:45:b4:46:d6:fc:6d:e6:ad:37:fb:de:41:9d:d1:
                    4a:9a:6b:c5:b6:a8:3e:5b:c1:58:4a:b5:54:82:2b:
                    b9:54:6a:c5:bb:c9:36:f9:84:ca:2b:73:d7:73:c0:
                    91:12:90:00:66:4c:a0:9a:9b:96:a7:84:be:68:46:
                    4e:d6:47:a2:47:38:56:c7:00:a2:2d:3e:2a:48:fc:
                    cb:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:28:8F:09:43:2A:4B:1A:F0:AC:5D:E1:56:EB:3D:0B:28:3D:B4:50
            X509v3 Authority Key Identifier:
                keyid:4E:AE:FC:49:E6:CD:67:E2:59:96:A2:C0:FC:57:B8:0C:C2:3D:BA:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:9d:cb:7c:44:35:2c:a1:2b:16:04:3e:6f:61:75:b5:d8:74:
         4e:0e:fc:fd:19:0b:03:90:6c:75:1e:17:74:73:b1:07:b6:e5:
         e6:b0:4f:d5:9d:79:59:97:57:a2:d0:90:94:44:03:7a:ac:90:
         55:57:33:5a:27:50:ac:7c:5b:5f:9f:91:e9:7c:e7:d7:1f:50:
         65:4b:1a:53:e6:ce:51:e8:8e:c3:92:0c:a5:83:5f:bf:27:a3:
         d9:5f:62:43:8f:d9:fd:84:ee:f9:8c:63:c7:e0:2e:c9:c8:be:
         b7:d9:f1:4f:74:c4:a2:cf:15:db:d4:66:d8:d1:24:3b:31:eb:
         f4:bd:59:40:db:24:68:ca:35:d4:24:4e:e0:9e:25:e0:ea:bd:
         35:9a:7d:3e:d3:65:2a:c5:3c:4e:35:34:43:89:ae:cb:cb:ed:
         e3:c5:75:94:e1:84:a1:46:57:cc:60:f8:11:3e:3a:8c:8c:57:
         28:d7:b9:60:c8:5e:38:67:dc:fb:c3:8c:3c:e4:8b:12:a0:02:
         10:17:18:7f:2f:6b:09:aa:91:97:33:01:44:16:f4:8b:17:b0:
         d3:de:7b:4a:b8:4c:bc:f9:5d:71:f7:c7:12:b8:0b:e4:c6:52:
         a3:e4:5b:73:71:70:71:94:fa:c7:01:18:5b:e6:0e:dd:ca:3e:
         6f:85:8c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 02:10:46 2025 by rpki-client