Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft
File:                     Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft (raw, json)
Hash identifier:          fG2g6GsCLGEUR7hHjEqMcHHOrAHcMZmavbCDEYfVf5E=
Subject key identifier:   07:5B:B1:C9:39:24:70:4F:8A:A9:5E:DF:F6:6F:CF:5B:9E:D8:B5:9D
Authority key identifier: 49:DE:57:8D:AC:79:2D:95:E2:17:D9:87:1E:04:F6:69:73:BB:7E:B0
Certificate issuer:       /CN=49de578dac792d95e217d9871e04f66973bb7eb0
Certificate serial:       0196CB73835287FD1765486EE787AD25F1B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sd5Xjax5LZXiF9mHHgT2aXO7frA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft
Manifest number:          056D
Signing time:             Tue 13 May 2025 21:01:07 +0000
Manifest this update:     Tue 13 May 2025 21:01:07 +0000
Manifest next update:     Wed 14 May 2025 21:01:07 +0000
Files and hashes:         1: Mz51AcN2wZIHDhS3_4YmvmIRGhQ.roa (hash: uO7pu6+EQ/hXwHNJ2EqENUuB+uo9LMGBRXK6r0igHMI=)
                          2: Sd5Xjax5LZXiF9mHHgT2aXO7frA.crl (hash: x8io5cdT4f1LN5rc73E8cOWrePJPEDuVqkx7DYiOFHQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sd5Xjax5LZXiF9mHHgT2aXO7frA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 14:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cb:73:83:52:87:fd:17:65:48:6e:e7:87:ad:25:f1:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49de578dac792d95e217d9871e04f66973bb7eb0
        Validity
            Not Before: May 13 21:01:07 2025 GMT
            Not After : May 14 21:01:07 2025 GMT
        Subject: CN=075bb1c93924704f8aa95edff66fcf5b9ed8b59d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ca:58:5c:2f:61:c3:6d:34:81:c5:83:c2:fd:
                    7b:30:1f:45:18:20:95:4d:1d:81:d0:e7:79:27:5d:
                    09:3f:a2:53:f0:04:1a:41:bd:da:6c:76:fe:78:50:
                    58:e1:34:8b:d6:ed:15:e3:42:e8:50:3d:7b:8a:2f:
                    6b:19:43:8f:df:3d:03:8e:c7:56:1d:80:97:b3:b2:
                    36:6a:49:11:94:df:f6:65:1a:99:d2:93:06:5a:23:
                    df:b0:95:56:dd:27:ff:5a:3b:21:35:d0:ca:ab:20:
                    f9:79:0f:e7:ff:4a:cb:e6:2e:55:2f:08:b6:f6:98:
                    51:13:be:73:e5:f0:11:66:6c:3b:4c:1a:b8:e1:3a:
                    f5:0a:cd:fc:f2:e2:2b:a0:84:43:cf:76:49:8c:2c:
                    c8:d7:97:61:cf:47:83:a7:8e:be:ca:d0:ad:17:b7:
                    81:90:ae:20:98:90:c6:30:41:2a:74:5e:62:9e:63:
                    33:94:42:db:d1:df:67:14:32:4f:46:c3:38:e3:4f:
                    19:7e:96:fb:4f:4c:bc:db:f3:1c:5b:5e:32:ef:12:
                    8b:d7:58:f5:6f:7d:a9:a9:12:d6:68:84:9e:21:80:
                    bb:65:ea:50:38:bb:09:8a:e1:0f:eb:f3:38:e2:38:
                    ca:1e:63:9e:6a:f4:53:0b:1e:1d:ca:08:98:cb:93:
                    c3:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:5B:B1:C9:39:24:70:4F:8A:A9:5E:DF:F6:6F:CF:5B:9E:D8:B5:9D
            X509v3 Authority Key Identifier:
                keyid:49:DE:57:8D:AC:79:2D:95:E2:17:D9:87:1E:04:F6:69:73:BB:7E:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sd5Xjax5LZXiF9mHHgT2aXO7frA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:69:78:ed:ec:28:d0:e8:76:dc:e4:ab:26:de:88:93:59:30:
         0d:84:12:29:f1:49:e4:7a:ea:7a:a7:c9:ee:c1:ee:a3:8a:21:
         3a:9e:a1:ef:69:4c:c0:35:e9:8c:6f:e3:40:1b:f0:91:12:ec:
         71:db:35:47:3d:24:6f:da:c8:2b:41:c4:c0:2a:8e:4d:5e:ea:
         0f:84:44:aa:a9:89:26:92:eb:e9:00:70:9f:7a:3f:0b:7d:f6:
         44:24:f5:5f:27:a0:a7:3c:e8:9c:17:39:71:ca:1f:a9:bd:6d:
         ee:df:7c:bb:b2:b1:1c:1b:9e:f5:fa:15:0b:48:34:06:ba:4a:
         a9:86:2b:0d:e1:6e:87:70:bb:0e:77:57:c3:c4:03:b9:5f:00:
         03:1e:6d:c9:2a:37:8a:a1:02:68:21:7b:2e:fc:09:e3:32:72:
         95:4e:c4:3c:17:1c:1c:f2:5e:df:fd:3f:c0:bc:b1:cf:0c:a8:
         b5:9e:5f:29:af:73:a7:fe:92:e3:f2:5d:79:52:a7:b6:12:55:
         f5:9d:df:99:40:7c:62:3a:36:3d:4c:bf:e3:28:ed:bd:5f:48:
         65:28:98:97:f5:b5:ff:fd:c1:f6:df:d4:40:3f:e9:27:b3:79:
         81:42:74:b3:fd:61:ff:d5:1f:b7:5a:d3:2c:f8:12:48:0a:a2:
         d6:6b:d0:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 23:24:37 2025 by rpki-client