Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft
File:                     Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft (raw, json)
Hash identifier:          vVWbGNWzEpUfEDpUghYM0D9NN8/X/iaaXrZZMQAcV7Y=
Subject key identifier:   4F:95:4C:54:43:3E:BA:90:12:80:92:77:6B:39:AE:B0:90:B9:59:90
Authority key identifier: 67:45:31:45:16:48:3F:E2:7C:05:30:CC:B9:70:7C:37:6D:20:E7:F0
Certificate issuer:       /CN=6745314516483fe27c0530ccb9707c376d20e7f0
Certificate serial:       0196BF6F627E670517FCDB4FBA2F8257BA66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z0UxRRZIP-J8BTDMuXB8N20g5_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft
Manifest number:          0A18
Signing time:             Sun 11 May 2025 13:01:10 +0000
Manifest this update:     Sun 11 May 2025 13:01:10 +0000
Manifest next update:     Mon 12 May 2025 13:01:10 +0000
Files and hashes:         1: Z0UxRRZIP-J8BTDMuXB8N20g5_A.crl (hash: FaRHYutqVb2mX4PWgWsKPJ/qHOa2Sz/XTNgKJCG/7fM=)
                          2: omUHhrKSJPjXc3fnFI7A_uy7HUU.roa (hash: xj7VTWYKB+CTrZ+OfVzTG694MjcNSO25Qbd0GhfZgnw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z0UxRRZIP-J8BTDMuXB8N20g5_A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bf:6f:62:7e:67:05:17:fc:db:4f:ba:2f:82:57:ba:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6745314516483fe27c0530ccb9707c376d20e7f0
        Validity
            Not Before: May 11 13:01:10 2025 GMT
            Not After : May 12 13:01:10 2025 GMT
        Subject: CN=4f954c54433eba90128092776b39aeb090b95990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d3:e0:63:1d:65:ae:78:6b:10:33:a7:b0:30:
                    e1:5e:60:4d:5e:5b:5a:c6:1b:9b:be:c0:5b:28:26:
                    1b:07:2b:ba:67:35:42:86:80:c2:ef:ad:13:f3:b3:
                    c0:d8:b9:08:6e:cc:d8:46:7e:f9:89:0b:ed:d5:25:
                    3c:c8:2b:49:72:22:60:4c:62:45:1d:af:66:da:52:
                    be:60:a5:69:cf:07:1d:f2:17:17:29:62:2f:33:90:
                    ec:63:b1:31:b4:fe:21:2c:23:ae:bf:04:34:6b:db:
                    51:9e:e3:0a:a9:a1:ad:5b:ff:0c:98:bd:d2:a0:6a:
                    69:49:99:05:e9:9c:5b:14:38:d1:89:82:09:37:13:
                    34:ca:65:aa:5c:9c:0a:ce:be:cb:e5:9e:71:56:1b:
                    33:b4:f3:b1:e2:8a:75:00:6c:81:8f:d8:63:99:7d:
                    79:4b:84:40:5a:cb:af:f7:58:fb:6f:76:09:01:35:
                    aa:52:d7:d4:5c:77:09:02:8a:7e:7c:4b:cf:6f:ed:
                    d0:74:80:04:38:98:e3:54:7f:05:74:d4:c7:e0:70:
                    7a:f2:16:c6:7f:70:5e:27:72:67:a3:04:bc:57:5b:
                    97:48:ec:36:dd:23:53:65:5a:18:7a:5f:a5:1d:53:
                    db:1e:98:fc:a0:0c:68:10:20:d4:f9:7c:2d:17:c1:
                    4a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:95:4C:54:43:3E:BA:90:12:80:92:77:6B:39:AE:B0:90:B9:59:90
            X509v3 Authority Key Identifier:
                keyid:67:45:31:45:16:48:3F:E2:7C:05:30:CC:B9:70:7C:37:6D:20:E7:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0UxRRZIP-J8BTDMuXB8N20g5_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:fe:1d:02:18:db:b8:43:b7:4f:79:93:e5:84:98:5a:f5:98:
         07:42:6e:fe:29:de:d1:be:34:46:91:6e:21:45:7d:11:29:e7:
         b5:29:15:cc:ae:1c:d6:48:1f:83:ab:ea:d9:82:0b:92:be:06:
         45:dd:08:34:f8:95:fd:1d:b1:f3:69:65:82:6a:09:64:ef:ec:
         ed:a7:28:d9:8e:48:23:ac:19:93:aa:74:bb:0c:69:88:b9:6f:
         5a:72:a8:0c:de:2a:8e:69:97:34:98:74:4c:65:da:b2:94:1d:
         db:5b:c4:0e:ce:29:1d:c3:10:85:b7:af:e8:76:cc:f4:c2:5a:
         e2:45:47:9e:6d:bb:b4:0d:fd:21:d0:3c:53:f4:ca:6c:53:ec:
         e9:50:cd:1f:c6:0d:f3:ba:69:bd:aa:38:4f:fe:02:39:31:5c:
         90:3e:9c:2e:ad:78:08:62:21:6d:cb:b2:a2:e7:92:15:80:c1:
         6f:92:eb:7d:56:8c:d6:10:b3:02:83:e8:28:af:d8:99:63:19:
         4e:2e:c6:6d:87:5a:78:72:af:9b:0a:0b:de:6a:b5:a4:05:b9:
         df:e8:98:64:4d:10:2c:5f:af:52:8a:4a:e5:28:91:05:5d:8c:
         23:24:59:2b:67:97:71:ff:26:38:8a:83:80:4f:fe:9c:fc:bd:
         50:01:c2:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:25:35 2025 by rpki-client