Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.mft
File:                     0LkE317sIhazQwFsXLJLuQpD06Q.mft (raw, json)
Hash identifier:          6iKq+bzLrKIbCL6GMQtNg2HWKMLkSnZJcWVNeCm4sP4=
Subject key identifier:   66:5B:09:7A:30:90:D6:6B:FA:CC:6A:99:20:7E:3B:F4:E5:64:19:DB
Authority key identifier: D0:B9:04:DF:5E:EC:22:16:B3:43:01:6C:5C:B2:4B:B9:0A:43:D3:A4
Certificate issuer:       /CN=d0b904df5eec2216b343016c5cb24bb90a43d3a4
Certificate serial:       0196C20286651C39995D3B9615A1780F58F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0LkE317sIhazQwFsXLJLuQpD06Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.mft
Manifest number:          1533
Signing time:             Mon 12 May 2025 01:01:07 +0000
Manifest this update:     Mon 12 May 2025 01:01:07 +0000
Manifest next update:     Tue 13 May 2025 01:01:07 +0000
Files and hashes:         1: 0LkE317sIhazQwFsXLJLuQpD06Q.crl (hash: iDS8fRaN/H9ScgsXCfEY+iUn5pS+HNS0113eNA1+fAE=)
                          2: NrSqEKUOU2XauV-i5XcFK6G4SDE.roa (hash: QbfLyNgfhw89ncOBcXtsqNeuurH1zO/6qaF1UEA+u6E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0LkE317sIhazQwFsXLJLuQpD06Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c2:02:86:65:1c:39:99:5d:3b:96:15:a1:78:0f:58:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0b904df5eec2216b343016c5cb24bb90a43d3a4
        Validity
            Not Before: May 12 01:01:07 2025 GMT
            Not After : May 13 01:01:07 2025 GMT
        Subject: CN=665b097a3090d66bfacc6a99207e3bf4e56419db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b7:5b:c2:74:c3:87:1b:8a:df:38:3f:00:b7:
                    59:08:65:e0:08:83:ef:e6:0c:40:63:bb:d9:74:5e:
                    33:47:7a:03:78:67:f6:40:b3:40:4f:dd:19:e1:05:
                    0d:e1:f2:69:34:1e:f1:9f:67:d5:ac:87:63:78:bb:
                    cb:de:7b:53:5f:3a:47:e4:80:90:f9:fd:f0:8b:5d:
                    29:ef:ba:0e:93:f4:20:31:99:aa:3f:4a:10:ec:79:
                    12:ff:7f:79:a3:11:10:0d:87:35:21:91:d0:05:a1:
                    97:3c:81:f1:c9:b8:7e:ff:ce:8b:a1:25:90:0c:0e:
                    a7:be:e1:79:f4:35:ed:1c:21:83:44:fb:48:e8:a9:
                    68:5a:f2:68:1b:d2:43:58:07:c3:d1:07:54:3c:5b:
                    a3:db:36:00:f3:ff:a5:2c:0a:19:6e:3f:5e:27:eb:
                    bb:4a:da:e8:65:82:b0:b4:80:c8:58:a8:7c:ce:46:
                    40:f1:f8:91:5d:12:a8:70:dc:77:cd:f9:6e:5e:16:
                    dd:6b:d6:b6:aa:25:b6:f6:75:1b:e3:4d:9d:2a:ae:
                    12:69:8f:2d:51:9e:9d:0a:2f:3a:f3:d7:5b:dc:98:
                    f8:49:d2:2c:8e:34:03:a4:07:bd:f7:2c:b6:49:ba:
                    46:9e:8d:26:f5:34:53:dd:f6:69:65:50:d2:d4:23:
                    32:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:5B:09:7A:30:90:D6:6B:FA:CC:6A:99:20:7E:3B:F4:E5:64:19:DB
            X509v3 Authority Key Identifier:
                keyid:D0:B9:04:DF:5E:EC:22:16:B3:43:01:6C:5C:B2:4B:B9:0A:43:D3:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LkE317sIhazQwFsXLJLuQpD06Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:e0:52:99:58:2d:fc:14:48:cf:ea:b1:5c:f0:af:dc:75:55:
         a3:4b:6e:18:41:e5:da:1b:17:34:e6:57:e5:0c:cc:be:eb:14:
         17:1e:53:7f:3e:07:23:1b:b1:5e:53:83:d6:04:da:39:4c:aa:
         f8:44:43:de:7b:e9:8c:83:eb:df:a2:53:b4:31:96:0f:08:5b:
         cc:6a:2e:bb:ee:18:1b:1e:a1:af:fa:ee:9f:d2:79:26:7c:d4:
         21:92:3a:bf:b2:56:87:25:1e:07:fa:af:96:af:7b:ea:35:9d:
         38:1a:1b:21:e5:a9:64:01:81:f8:63:53:f9:5c:f4:af:bc:90:
         64:e1:15:79:97:13:7a:19:aa:ee:4b:ef:4a:a3:d4:dd:d6:90:
         0f:d9:03:d7:13:f1:a7:ee:38:4d:5b:5a:59:d5:44:d9:3a:d6:
         36:ce:18:92:24:1c:29:f6:27:b6:3a:2a:cb:ed:bd:76:c8:32:
         fb:f5:e7:1b:44:62:7f:3c:06:27:8d:2c:3c:f0:b8:a2:88:8c:
         d2:71:c1:b1:5d:9c:66:86:3b:a2:05:fb:60:55:93:43:05:cd:
         80:aa:94:53:f4:fb:ce:fd:c2:b3:4a:86:91:51:f0:49:93:f3:
         20:3b:3c:ea:52:ef:17:a9:4f:72:b4:dd:24:39:6a:4e:63:31:
         76:01:d6:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:37:26 2025 by rpki-client