Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f3f06d-4b27-4981-95c6-2f56a5a9a756/1/pTJy83vudp-iPqZUueOPsCNGjZI.mft
File:                     pTJy83vudp-iPqZUueOPsCNGjZI.mft (raw, json)
Hash identifier:          QPrig77Y61yqzkN0vTMe8WhJFLpAysTk4bX5lK4KBwQ=
Subject key identifier:   AF:67:BF:7E:4F:85:3D:84:CC:88:A5:8D:44:3C:05:58:52:29:D8:DC
Authority key identifier: A5:32:72:F3:7B:EE:76:9F:A2:3E:A6:54:B9:E3:8F:B0:23:46:8D:92
Certificate issuer:       /CN=a53272f37bee769fa23ea654b9e38fb023468d92
Certificate serial:       0196AD68C2BE6BC75B387BCA57D902F1066F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pTJy83vudp-iPqZUueOPsCNGjZI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/f3f06d-4b27-4981-95c6-2f56a5a9a756/1/pTJy83vudp-iPqZUueOPsCNGjZI.mft
Manifest number:          E1
Signing time:             Thu 08 May 2025 01:00:45 +0000
Manifest this update:     Thu 08 May 2025 01:00:45 +0000
Manifest next update:     Fri 09 May 2025 01:00:45 +0000
Files and hashes:         1: kl_zb47rnd8AaAP4vBoCuK61hPA.roa (hash: e2T6+pFfv8tCYwWL0QcrJLWjz1NsTR4Qy2fxVQvCN8Q=)
                          2: pTJy83vudp-iPqZUueOPsCNGjZI.crl (hash: lXc5btZhRng8dXq7UhBMPNAv2/tAl9KyeNVTKFPjN6w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/f3f06d-4b27-4981-95c6-2f56a5a9a756/1/pTJy83vudp-iPqZUueOPsCNGjZI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/f3f06d-4b27-4981-95c6-2f56a5a9a756/1/pTJy83vudp-iPqZUueOPsCNGjZI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pTJy83vudp-iPqZUueOPsCNGjZI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 01:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ad:68:c2:be:6b:c7:5b:38:7b:ca:57:d9:02:f1:06:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53272f37bee769fa23ea654b9e38fb023468d92
        Validity
            Not Before: May  8 01:00:45 2025 GMT
            Not After : May  9 01:00:45 2025 GMT
        Subject: CN=af67bf7e4f853d84cc88a58d443c05585229d8dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:53:b4:04:95:15:91:a6:08:13:32:c6:29:fd:
                    97:d7:63:81:06:4b:d4:46:e5:01:3f:52:bb:e3:0f:
                    7f:e0:44:e4:75:3c:aa:aa:25:d3:c0:d6:4a:d4:55:
                    70:c1:12:9e:47:86:52:b8:4a:d8:a4:a4:8f:b2:21:
                    da:67:a4:2b:f6:b7:49:89:01:e0:65:6d:53:38:62:
                    a9:90:71:82:91:45:e4:30:33:b7:dd:62:f5:7f:f6:
                    6c:81:45:a9:7c:aa:62:8b:16:48:d9:f1:1d:d4:a6:
                    8a:99:af:7e:ae:34:ca:7e:9a:37:cc:20:6b:c9:7f:
                    b5:3e:9f:6d:df:20:67:e5:b2:ee:a2:02:63:bf:be:
                    2f:8f:37:63:ff:26:56:9f:30:b1:5f:9f:0f:06:b1:
                    b6:03:53:fc:c2:1b:23:06:03:38:3d:02:25:e3:78:
                    bd:25:5b:df:9f:4b:72:57:74:66:a2:aa:cf:24:08:
                    5c:8e:ca:95:56:8a:bb:b7:2e:52:de:be:83:ed:fa:
                    63:eb:16:96:32:c5:de:72:0b:dc:09:8e:10:e4:6f:
                    ed:24:34:0a:8f:33:30:7e:74:d3:90:62:c1:d4:98:
                    2e:17:75:4e:d8:0a:6b:4a:38:6d:b4:5b:d7:8b:60:
                    8d:90:d4:81:3f:69:f8:fc:96:37:b2:fa:c0:a3:4b:
                    90:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:67:BF:7E:4F:85:3D:84:CC:88:A5:8D:44:3C:05:58:52:29:D8:DC
            X509v3 Authority Key Identifier:
                keyid:A5:32:72:F3:7B:EE:76:9F:A2:3E:A6:54:B9:E3:8F:B0:23:46:8D:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTJy83vudp-iPqZUueOPsCNGjZI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f3f06d-4b27-4981-95c6-2f56a5a9a756/1/pTJy83vudp-iPqZUueOPsCNGjZI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f3f06d-4b27-4981-95c6-2f56a5a9a756/1/pTJy83vudp-iPqZUueOPsCNGjZI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:7e:0b:3b:9e:80:65:25:81:d4:f9:39:f6:4b:07:9f:41:8c:
         ca:81:12:6a:ab:a4:fa:22:5a:f4:01:82:48:fa:9e:3c:50:8d:
         60:6a:90:85:b1:7c:ac:7b:b3:37:f7:72:19:ed:fc:87:9c:af:
         cb:36:10:0b:a2:36:9c:32:39:cc:03:f6:5f:c1:8e:a5:5a:29:
         48:7b:30:6a:f5:48:bc:50:4c:b7:9a:bf:50:0d:8c:7f:8e:56:
         0f:c0:b5:99:f9:1d:16:39:8f:15:39:6d:80:7e:5f:df:cc:6f:
         5f:f7:96:4b:fe:df:05:3c:07:3c:71:03:e8:ec:d9:bf:f3:e4:
         f1:7f:fd:1c:8c:bb:18:09:81:67:7e:d8:b8:87:5c:e2:30:81:
         4c:28:ff:3f:1e:18:67:c4:dc:55:59:91:c5:46:fa:71:6e:07:
         84:3e:36:9b:37:08:77:c3:02:c3:4e:c4:a5:93:4a:8a:1f:b3:
         6c:d3:49:16:29:f6:16:77:34:d4:d5:2d:c2:7e:0b:52:61:90:
         e0:cd:af:10:01:72:54:c4:28:88:f3:f2:bf:f0:aa:d1:3a:48:
         ce:79:a6:a6:a2:9c:ed:db:4a:4a:ce:1b:c2:6d:1b:0c:8b:18:
         c7:4e:0a:c4:cf:70:52:61:7c:e0:8c:be:c8:9f:bd:e2:c4:06:
         f5:ee:d7:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 10:23:20 2025 by rpki-client