Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft
File:                     dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft (raw, json)
Hash identifier:          6v1SmcF+DCkt5fBYt6kGSRD+1wUjCYVmLmqOslOQEoc=
Subject key identifier:   26:85:E7:83:71:91:A8:61:A4:99:6A:A4:05:25:92:CA:3D:03:27:F7
Authority key identifier: 74:26:7F:3E:CF:CC:61:66:8E:05:01:BC:A6:0C:ED:6D:D7:5D:34:7C
Certificate issuer:       /CN=74267f3ecfcc61668e0501bca60ced6dd75d347c
Certificate serial:       0196B7B5AB74F91BEB8DAE09DC1B8142CC69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dCZ_Ps_MYWaOBQG8pgztbdddNHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft
Manifest number:          150A
Signing time:             Sat 10 May 2025 01:00:58 +0000
Manifest this update:     Sat 10 May 2025 01:00:58 +0000
Manifest next update:     Sun 11 May 2025 01:00:58 +0000
Files and hashes:         1: DkayGfO7JIkj0aP3u5tMKhfrqH0.roa (hash: SB2VJh36vskB6Jgns8zRjcE+4UksZV6puEKomuTZHlg=)
                          2: dCZ_Ps_MYWaOBQG8pgztbdddNHw.crl (hash: RJAFFWdnXOTqc+18xQoq4JRhX0WaH6Ah1IuO8s3CCds=)
                          3: jTx6aqvdEE_gQg73ReX0FkwgmQE.roa (hash: dAhHIig8KT1KxztIrLQE0kBlocl6eJfFH0R4JNRSc1E=)
                          4: kXcbCMejOpaJKyA1cSI33Gt-rG4.roa (hash: iBpLOB8D/HeQeT6S/JRKzQuf3+rJGJcLZkTdT9ZbR50=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dCZ_Ps_MYWaOBQG8pgztbdddNHw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b7:b5:ab:74:f9:1b:eb:8d:ae:09:dc:1b:81:42:cc:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74267f3ecfcc61668e0501bca60ced6dd75d347c
        Validity
            Not Before: May 10 01:00:58 2025 GMT
            Not After : May 11 01:00:58 2025 GMT
        Subject: CN=2685e7837191a861a4996aa4052592ca3d0327f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e8:cf:4b:c0:dc:72:1b:5c:b0:0a:29:eb:95:
                    c8:73:04:08:49:e4:04:fd:1d:51:4c:4f:ce:2b:12:
                    a1:be:b6:9c:6d:3a:92:c1:f1:92:8b:4e:d1:09:20:
                    1c:3d:8b:23:6b:42:76:d8:d9:73:40:e5:77:9e:5d:
                    6f:23:e0:bc:72:b9:87:a0:22:45:9b:1d:8d:c6:4b:
                    2f:6b:83:4d:24:e7:bc:bc:a7:2b:fb:d3:28:65:34:
                    13:83:83:db:7a:ae:a6:22:77:6e:92:a1:82:2e:2d:
                    b2:7b:46:2e:a2:55:23:ee:fc:73:0b:61:d1:c3:2b:
                    e0:a3:d1:97:56:8f:70:cc:b5:c8:f7:75:19:95:83:
                    0b:75:d0:34:2a:12:40:df:a0:00:c2:25:e1:fb:cf:
                    9e:d4:17:a9:be:94:41:14:6e:cc:a7:80:f9:e6:f7:
                    91:f3:c2:e3:ff:5f:40:90:b6:70:82:f7:b2:12:cc:
                    20:64:da:b5:93:ed:c4:14:3c:1f:df:96:98:a3:59:
                    b9:bf:b7:25:94:2f:b1:8a:7e:6f:7a:6a:86:78:77:
                    da:29:43:49:4d:94:27:67:6c:db:37:d6:54:22:1f:
                    03:eb:3f:36:8a:ae:22:d7:ea:a7:15:67:34:c9:3d:
                    f8:15:4a:da:84:e6:e6:f0:6b:09:b5:34:d2:05:a6:
                    75:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:85:E7:83:71:91:A8:61:A4:99:6A:A4:05:25:92:CA:3D:03:27:F7
            X509v3 Authority Key Identifier:
                keyid:74:26:7F:3E:CF:CC:61:66:8E:05:01:BC:A6:0C:ED:6D:D7:5D:34:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCZ_Ps_MYWaOBQG8pgztbdddNHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:0b:ab:78:ff:b6:ec:90:ab:dc:65:a3:34:8c:22:9e:e1:85:
         2b:d5:d1:0d:44:68:fe:eb:58:16:6a:41:1a:0f:a1:35:d7:93:
         56:10:c6:de:34:d1:52:28:b9:51:f5:14:78:8c:54:9b:39:10:
         fc:f9:1f:20:75:66:31:82:d6:a1:3c:d2:f1:d1:d6:a9:84:e8:
         be:c7:0b:8c:80:f1:a1:07:0e:22:48:1f:1d:e6:bb:89:e8:ce:
         b8:7d:71:69:41:e9:16:86:d6:86:fc:86:35:32:96:7a:8e:12:
         0d:a7:6f:7d:30:96:b6:e3:b9:39:b2:3f:52:93:b7:db:7c:32:
         a1:9e:94:ae:dd:ce:0e:2c:1e:be:e6:dd:8c:15:dc:32:25:bf:
         b8:7c:36:a2:cf:0e:4d:e0:e5:45:b6:e1:93:48:75:c1:9c:a4:
         c5:10:de:ab:68:12:84:e2:51:33:f7:72:84:b9:04:63:4d:05:
         ee:62:b4:e8:fc:87:cd:28:61:9c:e2:71:19:21:a1:9f:8d:dc:
         55:68:a4:6a:64:6e:51:4b:f7:eb:82:3e:32:91:87:43:97:51:
         b0:92:b1:fd:2b:05:41:f8:44:1b:2e:84:94:5f:6b:9e:bb:10:
         48:13:94:7a:54:f2:27:d9:5e:b6:e6:68:6c:3f:be:79:45:92:
         6e:90:a9:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 04:59:00 2025 by rpki-client