Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.mft
File:                     z58C29lyWVoxyr6rDNldcGqM3TE.mft (raw, json)
Hash identifier:          H37u9X7PHZHBvsflZgOBL76pWU445DrFzcQ3ohrX4Ns=
Subject key identifier:   C1:10:34:DD:87:CB:43:19:23:7A:F1:CF:E6:31:4B:A5:0D:66:B3:2B
Authority key identifier: CF:9F:02:DB:D9:72:59:5A:31:CA:BE:AB:0C:D9:5D:70:6A:8C:DD:31
Certificate issuer:       /CN=cf9f02dbd972595a31cabeab0cd95d706a8cdd31
Certificate serial:       0196B8230AE824A5C68F4FE72892858736CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z58C29lyWVoxyr6rDNldcGqM3TE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.mft
Manifest number:          1531
Signing time:             Sat 10 May 2025 03:00:26 +0000
Manifest this update:     Sat 10 May 2025 03:00:26 +0000
Manifest next update:     Sun 11 May 2025 03:00:26 +0000
Files and hashes:         1: OxJ-kJNzZo8WvEyoe2NDG0AkIuw.roa (hash: zWfEvQNj+A4de5/9KNnrm0AaQsSkvDWrbOwMvnTm49M=)
                          2: z58C29lyWVoxyr6rDNldcGqM3TE.crl (hash: JHfTdz82F3gB4GT7xtE50P6rRXxyItJnHY/Es/Pn1BU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z58C29lyWVoxyr6rDNldcGqM3TE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 03:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b8:23:0a:e8:24:a5:c6:8f:4f:e7:28:92:85:87:36:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf9f02dbd972595a31cabeab0cd95d706a8cdd31
        Validity
            Not Before: May 10 03:00:26 2025 GMT
            Not After : May 11 03:00:26 2025 GMT
        Subject: CN=c11034dd87cb4319237af1cfe6314ba50d66b32b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:28:b2:d4:87:29:0c:a8:bf:f0:a4:a9:14:9d:
                    59:13:cf:36:41:5b:c2:8d:99:39:10:99:bb:ee:16:
                    69:01:fe:19:c2:52:f7:32:1a:77:6c:aa:d1:81:05:
                    f3:9d:89:1e:0a:6f:f6:f9:1c:e3:e4:19:c0:b6:c8:
                    a5:31:2e:c8:b8:44:e4:b3:8c:7d:36:51:19:5a:0f:
                    04:ba:d1:39:92:ab:39:92:87:af:9a:ff:57:6f:c4:
                    0b:4d:bd:36:b9:13:19:9b:59:47:5e:bc:db:34:2c:
                    85:51:f0:e0:7c:00:37:7f:c7:7f:00:93:55:a0:ba:
                    dc:9e:9d:7f:06:64:32:b7:36:d5:d7:de:b9:3c:2c:
                    30:87:56:c2:51:19:61:08:fe:0d:d5:05:80:bd:a4:
                    56:3d:8d:8b:e5:53:19:cd:3a:28:48:e2:c6:2d:52:
                    43:0c:1a:56:cb:18:0c:a8:19:3c:b0:f2:c3:e8:66:
                    72:a1:0a:86:78:a3:fc:ab:ce:de:98:fb:1c:99:b0:
                    e6:62:7e:ce:db:63:3e:f3:35:60:03:74:5c:9d:0e:
                    25:ba:13:53:ac:2c:1a:4c:ab:ff:6f:3c:b1:8d:15:
                    69:a8:c8:3d:ea:73:da:38:21:d1:78:a0:c4:15:1d:
                    bd:07:3b:e5:d5:07:88:ac:18:a8:b5:30:3a:60:14:
                    8d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:10:34:DD:87:CB:43:19:23:7A:F1:CF:E6:31:4B:A5:0D:66:B3:2B
            X509v3 Authority Key Identifier:
                keyid:CF:9F:02:DB:D9:72:59:5A:31:CA:BE:AB:0C:D9:5D:70:6A:8C:DD:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z58C29lyWVoxyr6rDNldcGqM3TE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:e3:93:f7:c7:72:02:8f:3a:98:4e:28:67:7f:53:f7:bd:09:
         9e:8c:00:a3:74:d5:11:0a:0d:4e:9c:b5:10:16:5b:c3:12:70:
         47:1b:21:60:86:b0:7c:89:d3:a9:a5:d0:70:8f:82:fe:d7:d8:
         0a:46:e1:93:eb:c3:4c:3c:03:b0:b1:53:aa:10:73:0f:7c:2f:
         e7:d3:da:21:43:bd:12:7b:b7:53:5d:78:27:79:13:62:5d:78:
         b0:a0:0b:ec:ed:3d:af:53:ab:7d:65:d2:e0:73:27:e9:c2:8e:
         34:d3:78:ac:79:6a:3c:f2:4d:cf:cd:fc:16:9a:7c:62:8e:c6:
         b6:fc:db:47:d2:71:b7:22:9b:73:ee:20:47:00:11:fe:2c:43:
         a3:13:d2:47:84:62:61:d6:45:b6:2a:97:12:60:77:fa:e3:89:
         0f:e5:8d:ef:26:04:7a:83:d3:de:8d:29:70:62:2f:4d:4d:78:
         0d:cd:01:d7:09:07:a1:e1:8f:17:39:53:e4:a7:3d:41:8f:77:
         f9:22:a5:cb:b1:3a:09:db:1b:c1:c6:36:d0:cf:27:2f:62:ca:
         31:17:1d:65:d6:75:be:6a:96:fc:3c:b3:d3:3f:ea:e2:78:f1:
         4a:d3:0e:72:32:e4:65:f5:da:f6:d8:0a:e5:cb:8d:77:e0:6a:
         70:23:1b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 06:55:44 2025 by rpki-client