Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/8c7cc9-c095-42f5-9bb6-946c0f7e8f78/1/Ezm5qJRtJr4tj__mwePCLLk-BIY.mft
File:                     Ezm5qJRtJr4tj__mwePCLLk-BIY.mft (raw, json)
Hash identifier:          +l9Fgshd66v12w8Gs1uIXVta1l/CPO0xG87ZlJBjp2k=
Subject key identifier:   FA:BD:5E:5F:44:45:86:23:99:F7:83:5A:A0:D5:81:4C:4A:90:50:7E
Authority key identifier: 13:39:B9:A8:94:6D:26:BE:2D:8F:FF:E6:C1:E3:C2:2C:B9:3E:04:86
Certificate issuer:       /CN=1339b9a8946d26be2d8fffe6c1e3c22cb93e0486
Certificate serial:       0196C239613C2DE18B89C0E36F0A355855B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ezm5qJRtJr4tj__mwePCLLk-BIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/8c7cc9-c095-42f5-9bb6-946c0f7e8f78/1/Ezm5qJRtJr4tj__mwePCLLk-BIY.mft
Manifest number:          0BFF
Signing time:             Mon 12 May 2025 02:01:02 +0000
Manifest this update:     Mon 12 May 2025 02:01:02 +0000
Manifest next update:     Tue 13 May 2025 02:01:02 +0000
Files and hashes:         1: Ezm5qJRtJr4tj__mwePCLLk-BIY.crl (hash: ni5g/rEEXkwZSqTE+y09aBsTiY2MMF68qCHpQrpsWhE=)
                          2: Pd_TRMzeLXmR4l_ISjIRf3kfJG8.roa (hash: eMT9U1JgE9Qp7ruvpzaw9x/RY238h1ceOul754xPuwk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/8c7cc9-c095-42f5-9bb6-946c0f7e8f78/1/Ezm5qJRtJr4tj__mwePCLLk-BIY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/8c7cc9-c095-42f5-9bb6-946c0f7e8f78/1/Ezm5qJRtJr4tj__mwePCLLk-BIY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ezm5qJRtJr4tj__mwePCLLk-BIY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c2:39:61:3c:2d:e1:8b:89:c0:e3:6f:0a:35:58:55:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1339b9a8946d26be2d8fffe6c1e3c22cb93e0486
        Validity
            Not Before: May 12 02:01:02 2025 GMT
            Not After : May 13 02:01:02 2025 GMT
        Subject: CN=fabd5e5f4445862399f7835aa0d5814c4a90507e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:90:05:d3:23:69:5f:69:1a:1e:db:fd:03:de:
                    6b:ef:7d:34:77:d8:66:c0:dc:ae:02:45:e0:06:5b:
                    17:0a:35:9c:a7:c2:8b:8b:95:58:b3:b8:8d:ed:b5:
                    2d:13:79:46:6b:fb:7f:15:da:70:f3:44:5e:3d:79:
                    81:e5:3d:42:9d:93:fd:8a:b0:cc:14:22:79:24:ed:
                    af:73:dc:f8:8a:32:0e:bd:08:f5:61:cc:1f:73:8a:
                    f6:32:56:26:9d:44:99:3c:c6:56:01:ae:cc:c2:da:
                    63:d9:ad:f2:7d:c3:25:f0:3a:c6:5f:06:29:80:98:
                    9a:4c:a9:12:30:86:f0:11:a5:48:a9:08:55:f4:bd:
                    24:61:09:a0:9f:22:32:e3:94:f6:01:4c:61:7f:21:
                    c5:fe:5d:b1:df:0a:74:f6:13:29:d4:48:c0:df:ab:
                    25:7a:6b:63:a8:dd:3f:33:6c:7e:72:8c:f3:b9:50:
                    ba:e2:32:2e:95:91:1d:98:a2:1e:9d:95:49:66:bc:
                    5f:81:02:7a:d0:20:5a:cf:b2:71:0f:91:0a:66:97:
                    94:b5:5d:b0:a6:eb:9f:ff:16:dc:d6:47:a6:1c:4f:
                    61:61:15:08:6c:ca:5b:44:ad:2f:92:78:39:06:6f:
                    f6:6b:2b:cd:3f:59:a3:07:fd:98:c1:85:bc:b1:16:
                    b0:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:BD:5E:5F:44:45:86:23:99:F7:83:5A:A0:D5:81:4C:4A:90:50:7E
            X509v3 Authority Key Identifier:
                keyid:13:39:B9:A8:94:6D:26:BE:2D:8F:FF:E6:C1:E3:C2:2C:B9:3E:04:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ezm5qJRtJr4tj__mwePCLLk-BIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c7cc9-c095-42f5-9bb6-946c0f7e8f78/1/Ezm5qJRtJr4tj__mwePCLLk-BIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c7cc9-c095-42f5-9bb6-946c0f7e8f78/1/Ezm5qJRtJr4tj__mwePCLLk-BIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:6e:c6:46:62:24:28:dd:88:cc:82:10:0e:01:c6:f5:c3:d6:
         89:8f:ce:12:a9:b9:81:65:e7:0d:cb:01:3f:a7:72:ac:cb:e4:
         42:59:08:06:30:ff:da:39:0b:59:13:06:c3:e7:b6:cc:37:54:
         ea:f0:38:f7:08:2e:73:5d:ed:8c:65:49:88:5f:e9:22:4a:0b:
         91:5f:0c:55:c5:dd:0b:80:ff:f9:bb:4f:dc:1c:03:51:7a:49:
         f9:ba:bb:9c:45:18:bf:2f:15:a8:47:81:2e:c7:8a:35:65:94:
         2c:e2:e7:1d:e6:3d:83:d1:2b:14:ff:9d:7a:a2:7a:85:42:bc:
         47:09:7a:f6:3e:08:fd:ca:9e:c3:6c:6b:8c:11:9c:2e:e4:0e:
         a2:56:f7:66:b2:3a:14:df:6b:9a:e5:3d:a7:8c:7d:34:86:df:
         9b:13:14:04:42:1b:f7:ad:49:45:20:44:0d:50:5e:da:df:6e:
         7b:51:bf:fd:96:7b:df:f2:93:5c:52:e7:35:1f:76:45:e6:c3:
         e3:34:5c:97:e2:b3:56:fb:5c:7f:fe:36:e9:94:29:d6:89:43:
         d7:0c:14:b2:62:6e:c7:09:0e:2a:9e:b3:8b:10:07:21:aa:d3:
         3e:58:84:81:e7:85:0d:6b:02:ee:35:5c:bc:12:6f:63:52:4f:
         18:77:e9:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:46:11 2025 by rpki-client