Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.mft
File:                     0Mv2ugl6drYQyFYDW8GN55fCpnc.mft (raw, json)
Hash identifier:          8YgT0WIN/hT3jKGHjNewjyxViuCcv6fXw/8zRVbzx7o=
Subject key identifier:   CE:40:1B:94:EA:41:40:13:78:8D:1F:A2:6C:69:CE:F2:65:B9:06:9E
Authority key identifier: D0:CB:F6:BA:09:7A:76:B6:10:C8:56:03:5B:C1:8D:E7:97:C2:A6:77
Certificate issuer:       /CN=d0cbf6ba097a76b610c856035bc18de797c2a677
Certificate serial:       0196C04AD9994B7A2B5BD05F1CF9281EEB5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Mv2ugl6drYQyFYDW8GN55fCpnc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.mft
Manifest number:          071E
Signing time:             Sun 11 May 2025 17:00:52 +0000
Manifest this update:     Sun 11 May 2025 17:00:52 +0000
Manifest next update:     Mon 12 May 2025 17:00:52 +0000
Files and hashes:         1: 0Mv2ugl6drYQyFYDW8GN55fCpnc.crl (hash: EVs0KjiuNkseO3k2ynF45Fwzafq/ukWuIYtzW32y6MI=)
                          2: kAhsl83sRH6W4s8jtU8YJb8qwhQ.roa (hash: +uG81eC9noWL3YdfTYPyy1nu/3IN2ObXCeDG/BCSpTs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Mv2ugl6drYQyFYDW8GN55fCpnc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c0:4a:d9:99:4b:7a:2b:5b:d0:5f:1c:f9:28:1e:eb:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0cbf6ba097a76b610c856035bc18de797c2a677
        Validity
            Not Before: May 11 17:00:52 2025 GMT
            Not After : May 12 17:00:52 2025 GMT
        Subject: CN=ce401b94ea414013788d1fa26c69cef265b9069e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7d:25:3a:89:94:49:22:bd:4c:18:72:0a:3a:
                    b9:10:99:93:01:57:d5:46:78:cf:4d:66:b0:5f:6c:
                    a3:a6:0b:53:3b:fe:87:93:5d:35:47:58:4a:14:ae:
                    7a:80:07:37:6c:33:b5:83:fb:44:a0:41:80:50:7e:
                    83:9a:38:d8:d1:10:7e:50:81:13:5c:67:5c:90:de:
                    33:af:b9:ed:60:bd:37:f8:d2:7a:6e:89:3b:0e:d6:
                    e1:d6:1a:3a:78:2f:71:58:ed:f4:f0:d9:3b:91:50:
                    07:9c:fe:c4:96:99:66:fb:0e:63:9a:13:4e:6a:09:
                    08:ca:13:a2:35:13:2c:67:7f:44:e5:eb:93:91:ff:
                    3c:2b:7c:15:75:c0:b8:de:0f:96:b0:5b:ad:74:0e:
                    d8:c4:15:4a:a7:da:2a:ff:92:be:ee:fb:13:05:c6:
                    97:40:0d:6a:b2:91:e4:87:46:49:e8:96:94:ea:a9:
                    16:8e:fc:40:1a:10:1f:98:ea:d3:41:b6:15:93:2a:
                    9d:ed:08:d0:e7:e6:0d:3d:00:12:8c:78:78:c0:b7:
                    cd:37:b1:8d:f8:55:9b:cc:10:c6:48:32:17:bd:5c:
                    d7:66:3b:ef:77:f7:3b:3f:e5:f7:e3:bf:e1:48:9a:
                    d5:23:8c:47:f3:13:44:bf:c0:6c:ac:61:ec:fd:37:
                    b6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:40:1B:94:EA:41:40:13:78:8D:1F:A2:6C:69:CE:F2:65:B9:06:9E
            X509v3 Authority Key Identifier:
                keyid:D0:CB:F6:BA:09:7A:76:B6:10:C8:56:03:5B:C1:8D:E7:97:C2:A6:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Mv2ugl6drYQyFYDW8GN55fCpnc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:ec:ec:bb:32:6c:20:91:b4:eb:b6:50:04:b1:8f:6a:7c:51:
         49:9f:fd:6e:eb:95:11:ef:bf:4e:e4:6a:df:31:73:84:e7:c9:
         4f:f7:a3:22:71:f0:98:79:91:cb:78:d0:26:f5:30:73:b3:ee:
         15:b8:4f:69:7c:2e:2a:d5:e9:17:69:41:04:e9:69:6d:55:f5:
         07:70:68:2a:77:c7:0f:2a:48:f9:c5:d9:0f:13:af:79:65:d9:
         f0:1f:f8:6a:9a:90:e1:17:fc:bb:86:c3:fa:7b:85:ee:03:8a:
         a5:e4:23:7a:2c:69:cb:33:0c:2f:17:d7:9a:27:a8:50:96:96:
         ce:83:1e:57:4d:ac:32:9a:72:ac:a6:3f:5d:02:d4:10:c7:90:
         89:69:34:28:37:91:59:1c:71:63:29:8f:b6:e3:45:71:d2:05:
         f6:f6:fe:14:a0:13:8e:4c:30:4a:3b:cc:62:25:f9:c3:75:57:
         91:a9:9d:74:d5:06:2f:a7:ac:42:83:97:96:c2:44:b6:74:a4:
         87:f4:84:ac:e0:7b:a7:25:3b:ab:cd:2b:ae:a0:dc:75:a9:a2:
         a6:e2:38:2f:7a:b9:e9:4d:75:10:79:5c:55:ac:76:d7:cb:18:
         5a:24:48:ef:1e:b8:2a:5c:50:86:2c:9f:b3:ef:41:68:3b:d1:
         a1:20:76:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 23:16:17 2025 by rpki-client