Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
File:                     ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft (raw, json)
Hash identifier:          GVOaeDJzqMzzz6PVrCkTUO9b/ilbkSiYnAiijCVbETk=
Subject key identifier:   2C:4E:AA:AD:70:55:BE:1F:C4:94:28:BA:8C:00:98:31:2D:7C:BD:11
Authority key identifier: 65:E2:26:BC:F4:A8:30:B2:F4:48:FD:6E:A9:97:6B:15:20:87:DD:45
Certificate issuer:       /CN=65e226bcf4a830b2f448fd6ea9976b152087dd45
Certificate serial:       01969E9B0072FF1D8D8B7A756F47D3A756DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZeImvPSoMLL0SP1uqZdrFSCH3UU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
Manifest number:          0818
Signing time:             Mon 05 May 2025 04:01:20 +0000
Manifest this update:     Mon 05 May 2025 04:01:20 +0000
Manifest next update:     Tue 06 May 2025 04:01:20 +0000
Files and hashes:         1: XYOBnWiU8eSr5U3IwBwtwnYLEfo.roa (hash: 6TTZ52iyvKNZkBSm069RV4M98MsIuCFiWdEX+2UCHxo=)
                          2: ZeImvPSoMLL0SP1uqZdrFSCH3UU.crl (hash: IqOEU7mWRxrip/QNoGHRwH0e8BxsvDbmG/Jd5DAMYfo=)
                          3: ywRs-a89Yf3Zz1Mxm7EOZ0IaGgU.roa (hash: KcIGbva9ede7mLUbD84cHz+pICtWNbvc08mVQzdEhMk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZeImvPSoMLL0SP1uqZdrFSCH3UU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 04:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9e:9b:00:72:ff:1d:8d:8b:7a:75:6f:47:d3:a7:56:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65e226bcf4a830b2f448fd6ea9976b152087dd45
        Validity
            Not Before: May  5 04:01:20 2025 GMT
            Not After : May  6 04:01:20 2025 GMT
        Subject: CN=2c4eaaad7055be1fc49428ba8c0098312d7cbd11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8a:9c:bf:fd:3f:85:6e:56:90:d5:f2:94:c7:
                    bb:ca:3f:b9:61:08:f7:d3:e0:d1:a2:3c:0a:63:a8:
                    58:5f:c7:b2:0e:eb:cf:af:af:12:f6:30:e6:25:3c:
                    65:08:e8:0e:74:95:34:7e:6c:ad:13:61:6f:4d:48:
                    61:fb:87:5c:90:bd:c8:2b:a5:b3:38:f3:ae:24:1d:
                    ad:af:68:3d:e7:90:be:6c:73:ff:36:bc:11:ed:33:
                    bd:83:a4:19:b9:40:da:bc:bf:b3:3b:6d:69:98:32:
                    71:2b:05:f4:52:51:79:a9:00:aa:4a:10:50:65:db:
                    23:bb:88:17:28:f8:c6:15:5d:ce:19:ac:81:75:4b:
                    f2:0e:50:06:94:f5:58:c7:33:e0:9f:6e:44:77:8d:
                    6b:87:e6:ab:c1:d6:d5:ce:54:20:b0:b6:65:c3:8e:
                    10:3a:1c:b2:f7:dd:bc:c5:87:7b:64:79:ac:5e:42:
                    13:a6:b9:a5:2f:aa:5b:bc:69:3b:7c:10:7e:17:9e:
                    97:db:6e:52:35:94:7f:da:a3:7f:4c:c5:32:fd:96:
                    e6:e6:8b:9e:e5:74:97:c0:4a:a6:11:5b:16:e2:fa:
                    ec:e6:5f:11:cc:49:e6:f8:88:0b:7d:b9:b8:78:b2:
                    b3:1c:e2:e1:16:67:35:48:f5:4a:c7:ae:ad:97:a1:
                    bc:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:4E:AA:AD:70:55:BE:1F:C4:94:28:BA:8C:00:98:31:2D:7C:BD:11
            X509v3 Authority Key Identifier:
                keyid:65:E2:26:BC:F4:A8:30:B2:F4:48:FD:6E:A9:97:6B:15:20:87:DD:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeImvPSoMLL0SP1uqZdrFSCH3UU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:76:6c:0a:f3:66:13:73:4c:a8:a6:18:e0:c9:24:79:32:ba:
         ff:57:35:0d:6f:25:f9:08:e1:cf:4d:c1:b2:32:37:72:8e:00:
         c1:3f:a2:70:be:65:90:db:b7:59:59:27:0d:44:40:a6:79:44:
         27:b7:5b:92:25:08:74:9f:10:62:f1:83:50:72:fd:f7:e4:e1:
         39:6a:e8:8c:3c:68:2e:61:61:24:f5:92:92:f4:ff:f7:8d:c7:
         f5:20:20:32:9b:76:78:fc:84:d2:3c:d3:3e:ef:ff:22:b6:cd:
         a8:c7:6c:86:02:40:d5:f2:b2:9f:cb:bf:6d:20:67:cd:fe:58:
         ca:69:e6:a6:19:aa:bd:23:ec:8f:5b:e8:93:c1:27:e4:73:71:
         5e:79:6b:a4:ae:e5:d5:fb:19:7b:6c:77:2f:7e:f6:3f:4e:e8:
         e4:9d:68:da:ce:4a:d1:f2:db:45:e1:81:e5:7e:43:14:5c:a0:
         21:f1:fb:2b:aa:98:ed:9f:c2:89:65:cf:61:03:34:63:38:27:
         27:ba:b8:cd:29:f4:eb:c0:a3:86:e4:cb:1d:73:1b:e7:ef:b4:
         62:76:b6:7c:e1:cf:f7:23:61:ac:f1:9c:5c:2f:2c:cd:9b:32:
         ab:68:93:8b:80:70:52:87:f3:9d:02:67:75:af:7d:7a:5f:ca:
         f6:70:fd:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 11:38:47 2025 by rpki-client