Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.mft
File:                     1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.mft (raw, json)
Hash identifier:          nAllTcXVv/lpaETy8ClnKuno9nvruD6OoSxtq+aaUjU=
Subject key identifier:   2A:92:28:29:FE:3D:AB:58:39:F3:F9:F7:88:C5:E6:9B:F7:04:4A:59
Authority key identifier: FB:48:6A:0B:A9:B9:B0:9F:4D:E4:79:62:E2:C2:AE:41:FC:55:76:86
Certificate issuer:       /CN=fb486a0ba9b9b09f4de47962e2c2ae41fc557686
Certificate serial:       0196C04B2493384938EDAE3D9201E5E8431C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.mft
Manifest number:          13A5
Signing time:             Sun 11 May 2025 17:01:12 +0000
Manifest this update:     Sun 11 May 2025 17:01:12 +0000
Manifest next update:     Mon 12 May 2025 17:01:12 +0000
Files and hashes:         1: 1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.crl (hash: qW+pg+OvhTL7CNDWPEluv4S5Lp1KLNoARCohzsGi684=)
                          2: B0cXI8R5Jkebb1b4_AZX0QkItTI.roa (hash: qU3eVg9ZrPWSREJWyOFSPkiCSojLDzpwNgzDMrBwxd0=)
                          3: LOHHuqh5utbV1sVMvLXO9x4HEv0.roa (hash: zlFj/WpL6Qd/ZD0zeyPqhzWIhhj8Nvvt5witl0z9Yic=)
                          4: ndH6JM8LGw_-a86HEW7P-1qV0gM.roa (hash: PbblUtc0vHojXJBh5Iy7RwAYCiNyZajL5DEQ2efa9es=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c0:4b:24:93:38:49:38:ed:ae:3d:92:01:e5:e8:43:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb486a0ba9b9b09f4de47962e2c2ae41fc557686
        Validity
            Not Before: May 11 17:01:12 2025 GMT
            Not After : May 12 17:01:12 2025 GMT
        Subject: CN=2a922829fe3dab5839f3f9f788c5e69bf7044a59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:dc:a1:92:2f:53:eb:c5:a0:6b:02:84:57:cc:
                    05:00:eb:d8:62:3c:c9:55:dd:57:34:d5:9e:68:e9:
                    8f:2c:5c:6f:0c:f1:10:67:23:3f:a4:83:4a:02:83:
                    ca:74:bf:19:ee:b3:d4:48:60:9b:dc:68:a1:2c:b4:
                    e5:7c:15:f5:f0:48:72:cc:24:9b:24:91:3e:73:1a:
                    60:77:1c:fb:1f:83:d1:e9:e0:6f:08:3e:01:b0:db:
                    5f:bd:86:91:25:a0:3d:c4:72:c1:44:ab:1d:b3:ff:
                    fc:09:e0:d9:81:a6:2c:9d:dd:82:3b:9c:f3:11:d7:
                    62:29:2c:b1:d5:a2:2b:d1:7b:f0:72:d5:70:79:21:
                    d3:8e:f3:67:8f:ca:35:da:6b:58:94:34:14:33:43:
                    a3:60:09:4c:d3:f3:11:75:10:c7:c9:fe:5f:73:f5:
                    a7:8c:de:2f:15:7a:32:70:4f:d6:df:dd:06:8f:45:
                    fe:c5:04:e6:f5:58:2e:4e:c2:ce:ca:eb:91:1e:0b:
                    56:97:a6:f3:1a:d2:0d:a0:b5:6c:20:cc:d0:54:cd:
                    1b:d6:68:19:d6:f5:59:78:6a:33:7e:d5:18:ed:8b:
                    75:79:de:b2:40:12:06:40:0d:07:21:fb:f2:7b:6c:
                    5f:9a:35:49:8f:9c:a1:67:d8:5b:ea:ea:28:94:00:
                    20:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:92:28:29:FE:3D:AB:58:39:F3:F9:F7:88:C5:E6:9B:F7:04:4A:59
            X509v3 Authority Key Identifier:
                keyid:FB:48:6A:0B:A9:B9:B0:9F:4D:E4:79:62:E2:C2:AE:41:FC:55:76:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:05:c1:12:2f:ca:d4:2a:8f:44:19:d5:c2:43:75:38:17:76:
         50:26:f1:69:56:9f:5c:c8:1a:62:67:17:ab:56:46:fe:dd:20:
         42:6d:6c:44:62:0b:58:86:81:14:5b:fc:22:91:c5:1c:ed:9b:
         6e:bb:18:55:5d:0e:2d:74:9d:21:a9:34:2b:ca:19:a7:87:bd:
         bb:c8:32:4a:75:10:9b:6c:eb:61:d3:11:2f:3f:6b:af:34:55:
         3c:ab:06:48:2a:15:4c:22:71:70:dd:e1:90:7b:25:22:f2:e7:
         01:7f:99:93:65:bb:fa:16:ba:58:e9:75:71:db:43:c9:45:91:
         e3:3a:ae:64:73:b2:3f:7c:dc:4c:64:a5:98:8c:aa:82:39:2e:
         27:bf:9a:b2:f7:2e:6e:91:0d:4b:ca:8f:e7:21:ac:f4:37:0e:
         0d:e4:b0:74:c0:d7:d3:4f:05:05:47:4a:b8:d7:33:19:a2:c8:
         76:bc:e3:e3:2b:cc:42:b1:91:03:6e:2d:dc:0d:86:4b:e4:1a:
         ab:3f:49:70:16:e7:78:fa:d6:a7:b7:d6:2f:8b:70:7f:b1:a7:
         d0:15:f4:68:eb:83:ec:66:a8:cf:c6:71:a6:8a:72:b0:e8:81:
         8c:d2:60:83:5f:56:52:47:5f:af:47:a5:82:94:82:dd:dc:3d:
         0d:a8:71:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:53:11 2025 by rpki-client