Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/01335c-b345-4815-bb9e-fd5faed1c1d0/1/q1m0Yu_ARYOWCiBfL0Vlncf-PGw.mft
File:                     q1m0Yu_ARYOWCiBfL0Vlncf-PGw.mft (raw, json)
Hash identifier:          rnJ/mh2xE8EGo4yKWf0uuCQ6/vXqS+5RsXsnnXWIZAY=
Subject key identifier:   01:76:9D:05:CE:38:C3:EA:83:9D:96:6A:50:A4:AC:8E:CA:00:01:D0
Authority key identifier: AB:59:B4:62:EF:C0:45:83:96:0A:20:5F:2F:45:65:9D:C7:FE:3C:6C
Certificate issuer:       /CN=ab59b462efc04583960a205f2f45659dc7fe3c6c
Certificate serial:       01969E2C38D9C4DE5BC44883B022CB2D869E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q1m0Yu_ARYOWCiBfL0Vlncf-PGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/01335c-b345-4815-bb9e-fd5faed1c1d0/1/q1m0Yu_ARYOWCiBfL0Vlncf-PGw.mft
Manifest number:          04EA
Signing time:             Mon 05 May 2025 02:00:20 +0000
Manifest this update:     Mon 05 May 2025 02:00:20 +0000
Manifest next update:     Tue 06 May 2025 02:00:20 +0000
Files and hashes:         1: WWXaaN1zwBirDLU3BmnsrZPd1-s.roa (hash: ZqdlSOebOyA4siBcQOkN6AJQaX0krOyaiW9rxlzSPYA=)
                          2: q1m0Yu_ARYOWCiBfL0Vlncf-PGw.crl (hash: fMVsamTj3yNZW1Pu1w1NdMrSCCxja3rxxTzAQMwbyI8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/01335c-b345-4815-bb9e-fd5faed1c1d0/1/q1m0Yu_ARYOWCiBfL0Vlncf-PGw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/01335c-b345-4815-bb9e-fd5faed1c1d0/1/q1m0Yu_ARYOWCiBfL0Vlncf-PGw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q1m0Yu_ARYOWCiBfL0Vlncf-PGw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9e:2c:38:d9:c4:de:5b:c4:48:83:b0:22:cb:2d:86:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab59b462efc04583960a205f2f45659dc7fe3c6c
        Validity
            Not Before: May  5 02:00:20 2025 GMT
            Not After : May  6 02:00:20 2025 GMT
        Subject: CN=01769d05ce38c3ea839d966a50a4ac8eca0001d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3c:79:e9:ae:0e:71:e8:4d:a3:16:f3:01:f9:
                    57:ee:b2:9c:21:01:4b:db:18:6e:0f:38:83:52:8e:
                    f1:3c:5d:b2:bb:4f:3e:29:60:86:93:5f:40:cd:a3:
                    c9:8f:c2:42:64:7b:38:74:0b:7a:c1:38:74:f0:df:
                    6b:1b:fe:90:75:8d:8a:e9:a6:e8:e1:11:68:1b:7d:
                    6f:20:5d:57:20:ff:9d:20:09:4b:55:6b:db:5d:bf:
                    f0:0c:d2:f7:7d:4c:39:30:6d:d8:6b:88:e6:48:e7:
                    1f:da:07:76:85:e8:b6:0f:52:3e:5c:9a:b5:de:95:
                    07:04:7c:75:62:ba:05:a1:43:51:b4:6f:01:c3:be:
                    e3:9f:33:32:4d:20:5d:6e:de:80:f9:ad:3d:8f:f7:
                    18:65:fb:77:94:af:7e:0a:94:7e:61:3f:58:bc:f8:
                    02:18:a9:1a:9c:2b:92:4a:85:d0:70:38:b5:f4:88:
                    02:d2:ff:d5:4f:52:3a:f2:d9:bb:28:2d:a6:1b:f9:
                    17:44:ae:96:04:d3:e6:a3:dc:fa:98:7c:b9:3f:f9:
                    73:6f:d1:65:c5:15:71:48:63:15:b1:57:45:7e:09:
                    bf:84:cd:27:e7:74:f8:10:11:4d:53:84:5f:02:79:
                    41:bf:0a:23:64:d2:d0:1d:c7:aa:35:8d:2f:b9:1b:
                    c5:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:76:9D:05:CE:38:C3:EA:83:9D:96:6A:50:A4:AC:8E:CA:00:01:D0
            X509v3 Authority Key Identifier:
                keyid:AB:59:B4:62:EF:C0:45:83:96:0A:20:5F:2F:45:65:9D:C7:FE:3C:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1m0Yu_ARYOWCiBfL0Vlncf-PGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/01335c-b345-4815-bb9e-fd5faed1c1d0/1/q1m0Yu_ARYOWCiBfL0Vlncf-PGw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/01335c-b345-4815-bb9e-fd5faed1c1d0/1/q1m0Yu_ARYOWCiBfL0Vlncf-PGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:13:3f:36:19:33:83:26:ef:3c:a1:a3:9d:3c:66:59:c4:18:
         96:ed:7c:93:9d:7a:32:78:f5:10:c0:6b:c7:f0:52:55:09:5e:
         72:95:1b:1f:82:be:16:47:2e:bc:7a:d3:ee:00:5d:72:50:56:
         2b:ab:19:62:f0:a9:5c:7f:d9:85:e3:cd:6f:7a:3a:2f:9a:61:
         95:9d:82:18:35:93:d6:d9:20:2f:dd:fa:b9:a4:34:f2:2c:22:
         b2:45:70:12:c6:2b:52:ca:a0:f4:ed:45:13:ac:29:b1:46:de:
         55:b4:e3:41:01:d0:bc:c5:df:78:8d:e7:33:41:b7:12:4f:08:
         88:fd:1c:08:c6:3d:ba:05:09:d6:28:7f:16:b4:f2:09:ad:c1:
         be:7a:cd:38:4f:10:a7:1e:f8:0d:64:78:10:2f:dd:bb:e7:11:
         d3:39:f2:5f:20:86:69:12:ce:5c:7a:1f:da:c5:04:c8:30:e4:
         5e:14:1e:69:e5:43:2b:21:e7:11:08:88:57:38:91:27:22:d6:
         0a:c8:80:0e:02:59:d5:fe:d7:e4:65:2b:1d:55:f4:64:1a:37:
         30:f3:1b:13:ef:32:97:a7:98:b1:2b:0e:78:b5:d6:5e:5b:a0:
         b6:20:ee:ac:b0:df:a0:6b:4f:5c:4f:53:aa:87:5e:ee:6c:9f:
         59:ef:c2:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 04:12:58 2025 by rpki-client