Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.mft
File:                     fsZmdy15vXuyEZmiq9r-IgJRHHA.mft (raw, json)
Hash identifier:          qYg5m4hul4QRbD6bVTpTwYFTu0bnu3n0R74WKhf8K3g=
Subject key identifier:   00:BB:FE:84:23:08:C4:1A:A3:6B:84:88:D6:14:F8:28:8D:0D:9D:49
Authority key identifier: 7E:C6:66:77:2D:79:BD:7B:B2:11:99:A2:AB:DA:FE:22:02:51:1C:70
Certificate issuer:       /CN=7ec666772d79bd7bb21199a2abdafe2202511c70
Certificate serial:       0196BCDBF446DD84B8D32BDAAAC2020DEE59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fsZmdy15vXuyEZmiq9r-IgJRHHA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.mft
Manifest number:          0C47
Signing time:             Sun 11 May 2025 01:00:53 +0000
Manifest this update:     Sun 11 May 2025 01:00:53 +0000
Manifest next update:     Mon 12 May 2025 01:00:53 +0000
Files and hashes:         1: dWmsOWayzQrhACw6PZROUA9TY4k.roa (hash: k+N79FADkE2zFtD7FMss3oaOymFQNUYiml90eSHs5KE=)
                          2: fsZmdy15vXuyEZmiq9r-IgJRHHA.crl (hash: lTalybaQY/Dwi+I151GM8Krrhr5gPOQniqM16c7GnKo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fsZmdy15vXuyEZmiq9r-IgJRHHA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bc:db:f4:46:dd:84:b8:d3:2b:da:aa:c2:02:0d:ee:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ec666772d79bd7bb21199a2abdafe2202511c70
        Validity
            Not Before: May 11 01:00:53 2025 GMT
            Not After : May 12 01:00:53 2025 GMT
        Subject: CN=00bbfe842308c41aa36b8488d614f8288d0d9d49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:8d:9e:77:ca:82:ef:f9:b2:f2:a7:b8:c8:d5:
                    4b:ed:08:5c:ad:fa:3a:3e:fc:99:aa:15:93:37:60:
                    70:6f:5c:6d:3b:8d:48:92:25:e1:0d:1e:4b:cb:c8:
                    29:d1:a5:ae:20:9b:9f:02:bf:65:8f:48:3d:f5:c0:
                    29:c4:7f:e8:84:96:8d:d6:7a:58:aa:61:77:9d:66:
                    63:09:19:c8:12:11:d6:06:bd:62:e6:f2:67:ea:cd:
                    84:59:e4:02:29:76:5a:0a:f4:f2:7d:54:eb:05:2f:
                    7e:62:2f:5f:3b:00:aa:78:47:fc:41:a1:0a:02:a3:
                    ae:ca:f5:2d:5a:7f:3d:b0:4d:ce:4e:7a:9b:d3:70:
                    aa:d4:37:fe:c8:de:d4:79:11:31:ba:30:5c:86:12:
                    4a:7c:40:6b:3d:bb:9b:a6:8e:a8:d5:7c:95:7a:c2:
                    61:9c:77:55:ea:36:df:2f:fb:a2:de:5d:c0:ef:ef:
                    af:5b:a5:81:54:79:2c:a0:a5:96:1c:e9:c0:8f:99:
                    1b:a4:0c:60:1e:c6:3e:03:44:f6:58:93:15:d1:d0:
                    1a:fe:d9:a2:44:31:33:67:99:02:48:c8:48:fd:65:
                    f3:a7:f9:e4:25:cf:a2:df:fb:02:73:52:ca:f3:de:
                    2a:25:e5:d3:d4:4d:fe:cb:2a:ce:db:b1:a1:ac:19:
                    17:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:BB:FE:84:23:08:C4:1A:A3:6B:84:88:D6:14:F8:28:8D:0D:9D:49
            X509v3 Authority Key Identifier:
                keyid:7E:C6:66:77:2D:79:BD:7B:B2:11:99:A2:AB:DA:FE:22:02:51:1C:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsZmdy15vXuyEZmiq9r-IgJRHHA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:06:af:c7:11:b7:4a:c6:a2:50:c2:f3:5b:18:56:a4:2d:75:
         b7:19:ba:07:dd:41:74:c8:8c:8f:64:ea:b7:e0:bb:63:1a:53:
         3d:32:27:31:24:8c:48:fe:66:1b:b4:a4:e4:4f:cb:dc:06:95:
         35:29:3b:33:69:f0:7b:2a:da:80:bb:2a:aa:db:be:74:01:9a:
         29:b4:ba:5d:f1:bd:b8:eb:35:60:ad:9b:13:4a:53:77:53:a4:
         52:28:80:89:33:77:42:74:42:53:e1:92:16:d8:8b:b8:eb:c5:
         eb:c5:76:36:9a:00:0a:2a:af:cb:98:85:6a:cf:b8:5e:45:0a:
         44:69:ce:12:d0:8d:da:d5:4e:12:8f:da:6f:21:ce:90:09:68:
         a4:87:ad:69:6a:4c:f8:c9:93:7d:dd:67:93:16:d0:5f:80:1e:
         b7:0b:eb:49:86:09:5e:f4:08:0e:bb:e7:04:d8:26:6d:d8:90:
         af:e7:84:2c:0c:01:49:29:4a:a6:20:60:d6:b6:6a:d9:d5:06:
         71:cf:cd:1f:b0:92:e1:f9:f5:dc:eb:c1:5b:cb:c5:1c:cb:be:
         c4:84:4e:13:60:22:27:95:f6:6f:ba:2c:bf:7f:80:38:97:0f:
         ba:ff:46:c9:a9:e1:dc:59:75:1b:71:9f:56:88:70:5b:e5:8c:
         0b:06:2a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:27:53 2025 by rpki-client