Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/8d2e35-9fed-4fdf-9034-76ae812f076c/1/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.mft
File:                     SlSCGpGx29xzvdo0vO1xBwZ5ZK0.mft (raw, json)
Hash identifier:          T74FDMJrMyMFh7T2PX9IcQPoB4o5RIe/7PE1Hl1rTVM=
Subject key identifier:   EC:F0:F1:18:FE:30:7E:65:D7:7A:26:E8:0D:4E:4A:D2:69:5B:12:89
Authority key identifier: 4A:54:82:1A:91:B1:DB:DC:73:BD:DA:34:BC:ED:71:07:06:79:64:AD
Certificate issuer:       /CN=4a54821a91b1dbdc73bdda34bced7107067964ad
Certificate serial:       0196BA120F65DD7BF9CCC56AB314661143BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/8d2e35-9fed-4fdf-9034-76ae812f076c/1/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.mft
Manifest number:          0E2E
Signing time:             Sat 10 May 2025 12:01:07 +0000
Manifest this update:     Sat 10 May 2025 12:01:07 +0000
Manifest next update:     Sun 11 May 2025 12:01:07 +0000
Files and hashes:         1: JTPc5_QTZJxWgsLJFBAm1KUSpd0.roa (hash: ODeawNoXLkHerXTl+flqRC6XG80opVvKSVEN1ax5xro=)
                          2: SlSCGpGx29xzvdo0vO1xBwZ5ZK0.crl (hash: +jVSQ5nOGgTMsueOCY0LZSaEW/vXfAoF5tURWQ6g2Vo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/8d2e35-9fed-4fdf-9034-76ae812f076c/1/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/8d2e35-9fed-4fdf-9034-76ae812f076c/1/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 12:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ba:12:0f:65:dd:7b:f9:cc:c5:6a:b3:14:66:11:43:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a54821a91b1dbdc73bdda34bced7107067964ad
        Validity
            Not Before: May 10 12:01:07 2025 GMT
            Not After : May 11 12:01:07 2025 GMT
        Subject: CN=ecf0f118fe307e65d77a26e80d4e4ad2695b1289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:21:04:4b:20:07:28:6f:e6:47:76:cd:52:02:
                    99:06:a5:72:eb:3b:9a:78:b0:51:d2:7d:d5:84:a8:
                    09:bc:fb:16:ec:a3:40:73:c3:63:ab:53:f9:5e:2e:
                    88:a2:d4:93:a6:87:e0:a8:9f:95:1e:ca:bc:db:01:
                    cd:5b:9e:c1:b0:ad:74:af:d4:3f:02:74:21:50:d8:
                    ad:4f:0e:64:13:60:62:e7:25:92:b7:d1:7d:56:67:
                    6f:f4:5a:a2:8a:cc:1c:f4:aa:f9:38:c5:a3:fc:5e:
                    7f:a6:fd:2d:7d:e6:ca:ba:4c:18:fe:56:bd:fe:e0:
                    a8:b5:74:f1:01:38:a8:90:b0:dc:48:bb:a3:92:bd:
                    40:fc:02:f8:5f:16:a7:7f:cd:15:f0:80:4c:21:f2:
                    54:d3:e4:5a:61:19:57:43:30:cc:eb:95:89:ed:40:
                    d6:b9:34:30:5e:f6:8d:a0:69:ec:5e:9c:4f:2a:3f:
                    0c:e7:e8:4e:54:51:f8:de:e0:66:96:2a:03:32:44:
                    32:85:b8:55:7a:1b:9e:87:e2:c1:a7:ef:6a:2d:04:
                    f1:18:1b:91:c8:5c:2f:d4:1e:ac:c6:a6:c0:75:5e:
                    0c:56:72:5f:41:59:e9:af:0d:30:23:57:3f:91:12:
                    d7:6b:13:b3:2c:90:f8:71:76:32:f8:af:cd:b3:47:
                    3e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:F0:F1:18:FE:30:7E:65:D7:7A:26:E8:0D:4E:4A:D2:69:5B:12:89
            X509v3 Authority Key Identifier:
                keyid:4A:54:82:1A:91:B1:DB:DC:73:BD:DA:34:BC:ED:71:07:06:79:64:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8d2e35-9fed-4fdf-9034-76ae812f076c/1/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8d2e35-9fed-4fdf-9034-76ae812f076c/1/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:22:37:6a:b2:44:d8:cb:8a:9a:a1:9d:b8:c3:8b:0c:54:3f:
         fc:64:8b:59:86:4b:09:f8:2d:21:f1:86:ab:39:17:2e:85:53:
         a3:b8:db:72:a9:de:5c:3e:66:03:e1:94:6f:09:81:a8:56:8c:
         6f:90:0c:7d:6f:81:55:b9:c3:60:cd:83:d8:f9:6f:86:f8:0a:
         6c:de:0b:75:0a:91:23:1e:ff:0c:81:e1:34:81:7f:9c:59:6b:
         6b:4e:58:1a:ea:d8:ae:a5:5b:64:74:f5:6c:32:13:fa:10:c5:
         f7:d6:32:17:b3:ae:97:9f:69:fa:38:21:cd:2a:c0:74:8e:f4:
         8c:f9:04:90:f1:59:d0:d7:10:71:90:98:87:37:29:e3:5b:d5:
         b6:6d:8f:eb:68:20:cb:75:be:08:3d:95:21:c5:e1:52:47:83:
         21:d3:28:5f:8e:d2:c4:52:16:0c:62:b7:b1:46:76:ab:4f:44:
         0c:7f:9e:bc:4e:58:ea:db:a3:4f:fe:5f:35:d5:f5:7d:8c:e2:
         d9:0f:c1:4b:86:c5:9c:02:19:48:ce:44:f3:ec:1c:d6:50:d7:
         3c:cd:75:be:1f:e3:1e:97:e3:07:ee:f4:ca:e0:f8:5d:c4:65:
         6a:9b:1c:2b:9e:d7:14:78:9d:0a:05:fb:27:1c:0e:7a:c3:c0:
         34:16:fa:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 18:43:07 2025 by rpki-client