Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft
File:                     mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft (raw, json)
Hash identifier:          U419W2yd0tR/9UGd/NIj65JLSGM2JJ2xW3ElOdq1TxI=
Subject key identifier:   21:A8:FB:B4:A5:47:D1:BF:F1:B3:79:9B:7E:81:EF:E1:F2:68:1C:CD
Authority key identifier: 98:2B:56:93:B8:26:1F:B5:39:FE:A3:B1:3C:81:71:15:F0:0C:18:DF
Certificate issuer:       /CN=982b5693b8261fb539fea3b13c817115f00c18df
Certificate serial:       0196A79DA66A04B7588594109C0C4C6CC582
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mCtWk7gmH7U5_qOxPIFxFfAMGN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft
Manifest number:          049D
Signing time:             Tue 06 May 2025 22:00:48 +0000
Manifest this update:     Tue 06 May 2025 22:00:48 +0000
Manifest next update:     Wed 07 May 2025 22:00:48 +0000
Files and hashes:         1: eVKsEsZr6gB68Zo9TNcu-9I752U.roa (hash: EZGdWjVxX6cyHbSc76sTqplIRnZDqoYAvS/hd1OeT4Q=)
                          2: mCtWk7gmH7U5_qOxPIFxFfAMGN8.crl (hash: Y7KINf706aFx2DwBfY2Z6D5m2uhe6cRX/2pLEaKIrlI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mCtWk7gmH7U5_qOxPIFxFfAMGN8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 22:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a7:9d:a6:6a:04:b7:58:85:94:10:9c:0c:4c:6c:c5:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=982b5693b8261fb539fea3b13c817115f00c18df
        Validity
            Not Before: May  6 22:00:48 2025 GMT
            Not After : May  7 22:00:48 2025 GMT
        Subject: CN=21a8fbb4a547d1bff1b3799b7e81efe1f2681ccd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b7:9f:20:90:04:78:0e:0d:c8:86:ce:82:ce:
                    ae:ae:cd:de:4a:22:40:35:fc:2c:4e:81:17:b5:26:
                    a5:d5:8e:c4:bb:68:e6:27:93:69:1b:5a:90:3c:7f:
                    20:ca:84:f7:9b:bd:f2:58:43:56:e7:ba:34:93:8e:
                    20:b7:03:e3:8c:5b:47:4d:2b:60:ec:2a:f2:36:da:
                    6a:cd:38:5a:7e:0d:d5:0a:24:ae:73:87:37:cf:7d:
                    14:12:01:37:be:04:ad:09:a6:a3:73:b7:92:31:4b:
                    78:92:69:e5:45:35:97:86:d3:f8:f7:2e:14:3c:3c:
                    13:17:a8:12:aa:41:a5:11:33:43:c9:d8:b7:63:64:
                    b1:7e:62:90:4c:ff:20:f6:cb:9a:2f:e1:39:e9:f4:
                    04:28:ae:eb:a0:97:a0:47:e2:6e:4a:a3:e2:cb:55:
                    05:19:80:d5:2b:55:83:10:0a:84:6a:c6:95:49:40:
                    06:a5:cc:11:b9:2c:dd:e1:06:f5:a4:dc:38:d4:ab:
                    d2:d7:34:55:ed:f4:b8:05:ac:d6:c6:fc:e8:43:50:
                    e9:13:89:a3:9b:c3:cc:ce:a6:3f:1a:19:5b:74:44:
                    f9:bb:df:ec:8c:44:da:9b:67:bb:11:d6:f9:6b:ab:
                    ef:6f:bb:f6:9b:78:a5:bc:c5:06:bb:27:ce:7c:22:
                    f4:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:A8:FB:B4:A5:47:D1:BF:F1:B3:79:9B:7E:81:EF:E1:F2:68:1C:CD
            X509v3 Authority Key Identifier:
                keyid:98:2B:56:93:B8:26:1F:B5:39:FE:A3:B1:3C:81:71:15:F0:0C:18:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCtWk7gmH7U5_qOxPIFxFfAMGN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:3d:dd:bc:d2:c7:c1:be:6c:77:50:ac:c1:77:c4:fb:96:f7:
         24:a3:40:f0:a3:09:a6:b9:67:67:b9:fc:a0:89:46:da:19:0f:
         35:1a:b9:46:7f:e2:eb:07:87:43:9f:b4:ad:dc:4a:10:d1:ad:
         3c:33:db:e9:38:d2:80:28:b6:22:5f:a6:e3:4d:9e:a8:d9:98:
         7d:f9:f7:9d:84:ab:7e:e0:3d:b6:90:8e:35:a5:56:41:5a:b7:
         60:ee:57:1a:78:41:db:fa:cd:d0:16:91:41:78:ea:f6:99:31:
         fa:c3:40:6b:05:1a:2a:54:06:f8:18:29:ef:61:cf:14:2f:52:
         d9:27:d1:d4:00:7d:63:17:cd:92:a8:ed:4a:5e:96:4e:06:e5:
         02:9a:e0:f3:e9:0b:ac:b2:5e:c8:b3:71:14:71:95:27:77:65:
         11:07:33:c2:f0:9f:65:18:ad:c8:96:65:5c:2e:d8:dd:2a:98:
         59:14:5e:c2:24:5d:1b:bb:25:6b:16:e9:09:7a:2c:f4:25:e6:
         a1:03:07:5f:cb:c8:5f:58:8d:2c:90:a2:d8:96:c3:82:95:af:
         ab:ef:00:a4:42:c9:6a:c8:fc:40:07:22:71:35:f8:db:4e:7c:
         63:c3:eb:38:46:d5:ee:82:a8:b0:25:d8:c5:60:ce:c0:dd:79:
         06:e8:3e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 08:34:48 2025 by rpki-client