Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.mft
File:                     c2fEkER_UEXAI2fbjSG04IdJ-nY.mft (raw, json)
Hash identifier:          +ngfuO1PE8asSHPnLNrhMC4w7abPbedBMNFufZk5vVY=
Subject key identifier:   E0:9C:A3:A0:16:FA:CC:27:41:69:FB:50:08:E6:FE:C8:32:5A:08:60
Authority key identifier: 73:67:C4:90:44:7F:50:45:C0:23:67:DB:8D:21:B4:E0:87:49:FA:76
Certificate issuer:       /CN=7367c490447f5045c02367db8d21b4e08749fa76
Certificate serial:       0196BC377A5EE8F286F79E1CB4C2D6EBFBF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c2fEkER_UEXAI2fbjSG04IdJ-nY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.mft
Manifest number:          072C
Signing time:             Sat 10 May 2025 22:01:14 +0000
Manifest this update:     Sat 10 May 2025 22:01:14 +0000
Manifest next update:     Sun 11 May 2025 22:01:14 +0000
Files and hashes:         1: c2fEkER_UEXAI2fbjSG04IdJ-nY.crl (hash: U4OR19WYe5Yror+ZEmcNKW0kYFbu0sCVKdW/xHbVQHM=)
                          2: zxcUujcSrD8SI1LnYGJEIzlJLRs.roa (hash: 9DpZ6fCwMNxgzvUI8W4qG2/5GfqMuaNy171SPmB26NM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c2fEkER_UEXAI2fbjSG04IdJ-nY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bc:37:7a:5e:e8:f2:86:f7:9e:1c:b4:c2:d6:eb:fb:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7367c490447f5045c02367db8d21b4e08749fa76
        Validity
            Not Before: May 10 22:01:14 2025 GMT
            Not After : May 11 22:01:14 2025 GMT
        Subject: CN=e09ca3a016facc274169fb5008e6fec8325a0860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d5:27:b9:03:ab:75:ff:b9:73:af:18:5d:db:
                    5c:4d:6b:7b:7f:fa:ba:55:68:5f:4e:1c:26:f9:ad:
                    06:69:df:b2:14:c9:81:75:26:ce:f0:38:08:95:7c:
                    c0:07:af:3f:73:c1:93:bb:31:9d:1a:51:78:cb:db:
                    17:5e:d6:dc:d8:e6:3c:da:64:28:8a:8f:18:17:15:
                    51:56:d8:3c:90:ef:76:cd:73:99:1c:85:e8:c5:ae:
                    32:cf:12:23:c4:5a:4b:e1:77:fc:59:e8:77:2f:20:
                    c3:0b:62:7a:ea:40:12:9a:5c:17:24:2f:7e:6b:35:
                    82:80:03:16:29:e2:31:3a:08:d2:75:4d:5a:f7:a5:
                    d1:03:e9:94:25:3b:8f:c5:52:0d:85:44:6f:92:1c:
                    1e:54:c2:3a:5b:6f:ec:41:06:1b:1c:27:bb:c2:f3:
                    37:37:6d:84:47:2e:a3:82:94:62:44:fb:53:3a:09:
                    57:f7:b6:04:03:ac:cf:ab:7b:0f:4d:df:43:7e:69:
                    ef:31:6d:f9:29:3c:86:83:cc:0a:57:b2:5e:a9:f6:
                    f9:bf:9a:67:99:13:e0:b1:cd:97:00:46:2b:09:0e:
                    d5:90:91:7b:dd:4c:e1:77:98:a6:3d:cb:97:49:bf:
                    26:bf:ef:93:17:8b:a7:a5:bb:f3:d6:c6:b5:30:2f:
                    ea:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:9C:A3:A0:16:FA:CC:27:41:69:FB:50:08:E6:FE:C8:32:5A:08:60
            X509v3 Authority Key Identifier:
                keyid:73:67:C4:90:44:7F:50:45:C0:23:67:DB:8D:21:B4:E0:87:49:FA:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2fEkER_UEXAI2fbjSG04IdJ-nY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:36:21:eb:92:8e:64:37:59:d8:12:c4:06:b4:0d:02:bb:13:
         5b:ee:78:2b:48:2d:e3:f7:e4:79:dd:69:8b:a3:f9:d4:47:44:
         38:14:98:14:c1:36:2d:92:69:f3:f6:f6:ed:1c:63:a5:47:19:
         8f:ed:d8:5a:95:6b:5e:84:02:ed:1e:7d:f3:65:6e:d6:09:36:
         30:d9:fa:54:64:fe:82:16:d4:ad:dc:96:b3:df:d1:c6:57:8c:
         38:d2:05:64:e5:21:1c:0a:46:30:17:b4:79:7c:24:fb:56:16:
         b4:71:03:54:36:a1:e8:fb:59:0f:89:2f:8d:34:db:bf:15:38:
         66:78:d9:e2:b0:24:9b:7d:6d:11:af:93:b2:8a:bb:a7:21:1d:
         d2:96:57:f3:24:ff:45:82:05:31:b2:8d:57:a9:32:06:64:e0:
         25:88:90:93:3d:66:ad:87:f4:52:c4:ac:43:80:df:9d:af:05:
         42:08:a6:53:89:15:50:25:99:d0:41:bc:44:20:31:b3:4b:0e:
         03:26:a8:32:e2:7a:4e:68:5e:c5:3f:fd:90:ae:ef:15:a0:9a:
         1f:0c:b0:88:51:28:32:39:c6:50:36:b2:a4:45:bf:08:1c:86:
         b6:35:f9:0b:88:f8:dc:cf:fa:b0:b2:8f:85:d3:ec:98:d9:57:
         33:4c:96:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:12:15 2025 by rpki-client