Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5246e6-72c6-4f47-a3a3-e4df5a87d4ed/1/dkE2w82_1ftgyv1Kmx1HOjtnJjU.mft
File:                     dkE2w82_1ftgyv1Kmx1HOjtnJjU.mft (raw, json)
Hash identifier:          gAMMIlUcm3wkd5XyA8GQiYP6TO+5ULnZcmtvf79tXAI=
Subject key identifier:   C0:D0:DD:85:6A:87:4C:F6:D1:77:98:B2:76:84:B5:CB:D3:76:4E:74
Authority key identifier: 76:41:36:C3:CD:BF:D5:FB:60:CA:FD:4A:9B:1D:47:3A:3B:67:26:35
Certificate issuer:       /CN=764136c3cdbfd5fb60cafd4a9b1d473a3b672635
Certificate serial:       0196BB921890C1E64702D05D4734C9DB764A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dkE2w82_1ftgyv1Kmx1HOjtnJjU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/5246e6-72c6-4f47-a3a3-e4df5a87d4ed/1/dkE2w82_1ftgyv1Kmx1HOjtnJjU.mft
Manifest number:          0918
Signing time:             Sat 10 May 2025 19:00:36 +0000
Manifest this update:     Sat 10 May 2025 19:00:36 +0000
Manifest next update:     Sun 11 May 2025 19:00:36 +0000
Files and hashes:         1: dkE2w82_1ftgyv1Kmx1HOjtnJjU.crl (hash: 7YCuzJxaFceA60RjC4saOBskad87xcJsKkPSo8H591M=)
                          2: uTA8mSJ_3Pm9uHRtbBQGox8CCms.roa (hash: JKMyKU4R0Hs07ETR6QJe5cFRF5p9HW1pjj1e0SHJl68=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/5246e6-72c6-4f47-a3a3-e4df5a87d4ed/1/dkE2w82_1ftgyv1Kmx1HOjtnJjU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/5246e6-72c6-4f47-a3a3-e4df5a87d4ed/1/dkE2w82_1ftgyv1Kmx1HOjtnJjU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dkE2w82_1ftgyv1Kmx1HOjtnJjU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 19:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bb:92:18:90:c1:e6:47:02:d0:5d:47:34:c9:db:76:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=764136c3cdbfd5fb60cafd4a9b1d473a3b672635
        Validity
            Not Before: May 10 19:00:36 2025 GMT
            Not After : May 11 19:00:36 2025 GMT
        Subject: CN=c0d0dd856a874cf6d17798b27684b5cbd3764e74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5c:f1:61:40:34:e9:f7:bf:e1:89:aa:fd:e0:
                    93:2f:4b:5f:c5:a9:30:4e:2d:5c:6b:d4:2b:f7:d5:
                    80:3e:ea:66:bd:e7:66:49:b2:e5:88:f5:9d:14:19:
                    53:d8:88:61:2c:92:30:b6:37:7a:5e:a7:fa:77:e7:
                    06:ec:a8:d8:b2:d4:5b:5e:50:49:62:3f:a2:60:db:
                    3a:75:49:c8:6d:92:f9:80:09:d4:1f:aa:4f:15:b5:
                    e9:22:20:a7:26:3c:a7:78:63:91:c3:ff:a6:55:84:
                    03:c1:c1:70:a5:22:4d:42:a2:d8:65:22:42:55:02:
                    f9:4d:a6:a1:89:47:ec:6d:bb:38:bf:b3:98:8a:c6:
                    e1:7f:f0:09:2c:ab:39:53:06:1e:f7:e1:ec:16:2a:
                    77:67:d0:88:a7:8b:0d:2b:60:0d:a3:30:b7:3a:e4:
                    e1:19:8d:63:72:84:94:7a:7a:86:24:5f:cb:df:6e:
                    78:e2:21:fe:b6:22:c2:c8:63:2d:4b:de:2f:ea:a8:
                    24:d7:e6:b6:bb:e6:51:62:44:df:6d:19:30:d4:f2:
                    33:3f:98:91:d1:b3:a8:a3:c8:49:64:0b:69:2f:5b:
                    d8:8d:03:96:d9:4d:d5:b3:02:7b:f1:2a:d5:f5:90:
                    e8:1c:ad:b4:af:c2:72:e5:5b:18:06:b6:1c:6d:d8:
                    d3:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:D0:DD:85:6A:87:4C:F6:D1:77:98:B2:76:84:B5:CB:D3:76:4E:74
            X509v3 Authority Key Identifier:
                keyid:76:41:36:C3:CD:BF:D5:FB:60:CA:FD:4A:9B:1D:47:3A:3B:67:26:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkE2w82_1ftgyv1Kmx1HOjtnJjU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5246e6-72c6-4f47-a3a3-e4df5a87d4ed/1/dkE2w82_1ftgyv1Kmx1HOjtnJjU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5246e6-72c6-4f47-a3a3-e4df5a87d4ed/1/dkE2w82_1ftgyv1Kmx1HOjtnJjU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:08:e5:04:a5:2a:97:d3:b8:85:98:53:26:6f:bb:b7:dd:91:
         a6:f2:48:2c:ea:e3:94:0d:4b:35:9f:2c:1f:88:4a:8f:6f:79:
         ba:06:91:00:13:a9:fa:9e:1c:88:b5:79:05:2c:ad:24:d1:96:
         cf:d1:2b:e5:9d:f2:19:57:19:cc:6e:00:7d:02:28:8b:ac:3d:
         41:03:c6:b2:ba:9d:c9:0d:f2:89:a1:21:60:a8:80:3c:2a:dc:
         e5:9b:66:24:0d:91:b4:94:67:e7:0d:65:22:d7:bd:6c:9f:d0:
         bb:a6:f2:66:db:bb:99:22:d4:38:e2:7f:6f:70:93:ef:a2:43:
         ac:39:1d:57:58:2c:41:80:8d:02:1f:d5:2a:ba:b5:ab:99:56:
         ad:f1:28:35:8d:3d:58:38:6d:a5:b9:5e:05:87:e1:e8:d6:e9:
         d7:1b:24:04:d3:70:a5:d4:c0:f3:db:72:0f:e2:89:3c:c1:c0:
         dc:30:85:31:3a:5f:9b:b1:62:b4:4f:09:f3:23:3d:1a:a5:b1:
         16:f1:76:91:64:27:79:e2:51:eb:94:5d:94:3e:84:4d:49:85:
         61:52:1e:6f:49:65:a5:5f:ec:d2:73:c5:08:00:03:e7:85:7f:
         bf:79:f9:4b:8d:d3:89:fb:13:c5:6a:54:6f:f0:3a:d4:dd:35:
         06:99:9c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 03:54:28 2025 by rpki-client