Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.mft
File:                     MHbphV-byjAXoQE3tEPujFKMqVI.mft (raw, json)
Hash identifier:          iPPLDiR/k1yfcfR3dDGsmtvL1T6zaYeXPwNOv4UuW30=
Subject key identifier:   37:BC:A5:2C:50:D6:44:A9:A8:FF:1C:20:35:EA:2D:5A:07:79:3A:7E
Authority key identifier: 30:76:E9:85:5F:9B:CA:30:17:A1:01:37:B4:43:EE:8C:52:8C:A9:52
Certificate issuer:       /CN=3076e9855f9bca3017a10137b443ee8c528ca952
Certificate serial:       0196B8C7B2AC072DECB990CEC5B1EEBDAF88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MHbphV-byjAXoQE3tEPujFKMqVI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.mft
Manifest number:          1533
Signing time:             Sat 10 May 2025 06:00:17 +0000
Manifest this update:     Sat 10 May 2025 06:00:17 +0000
Manifest next update:     Sun 11 May 2025 06:00:17 +0000
Files and hashes:         1: MHbphV-byjAXoQE3tEPujFKMqVI.crl (hash: Aor+Mb50Zd1w3KANkNClhnxoOlSzy2sKZxDHpyof2nc=)
                          2: Wrs6edZF_FheJS0JSp4oL-e56WQ.roa (hash: vV9mNOx2NnPdDR1+6XQLcqlbWprm1qsghkqsjFpy7rE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MHbphV-byjAXoQE3tEPujFKMqVI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b8:c7:b2:ac:07:2d:ec:b9:90:ce:c5:b1:ee:bd:af:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3076e9855f9bca3017a10137b443ee8c528ca952
        Validity
            Not Before: May 10 06:00:17 2025 GMT
            Not After : May 11 06:00:17 2025 GMT
        Subject: CN=37bca52c50d644a9a8ff1c2035ea2d5a07793a7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:53:6f:14:da:90:fd:c0:1d:2a:6e:50:ae:b6:
                    ed:c8:69:ae:23:ad:79:4c:f3:0d:70:c0:ee:4f:28:
                    05:6a:99:53:9c:6c:dd:3e:07:cd:8f:52:fc:96:3f:
                    9a:48:20:ff:09:b8:43:07:da:9e:eb:a1:bf:a4:71:
                    d6:6f:d3:60:a0:22:ae:a6:7a:34:e5:26:df:f0:59:
                    8e:bd:4c:97:1f:9c:ab:d6:43:c5:03:06:b7:e1:0e:
                    3b:84:21:29:5c:1d:36:d8:f1:24:75:a1:bb:5c:18:
                    8d:24:61:9b:ee:57:b2:b5:51:8f:29:22:b3:ac:14:
                    f3:45:b1:8e:b9:9b:cf:12:83:44:b5:d6:4d:d0:c5:
                    99:b6:9d:46:e0:9d:08:3c:22:c2:6f:88:8c:cf:1a:
                    fd:2b:f0:8e:14:8c:80:32:35:7d:07:2a:08:86:ad:
                    ab:70:0d:6f:05:d0:f9:bc:06:03:a2:df:4e:28:d6:
                    be:67:e3:72:c0:14:7c:bb:95:5d:94:67:c4:53:d7:
                    63:ca:38:ec:96:d3:5d:10:7c:d2:88:4a:ef:2d:c6:
                    4a:38:7e:4d:7e:ea:02:52:4e:86:ed:33:85:f1:d1:
                    ee:4f:32:79:13:ff:1c:63:0e:bc:ec:f2:2f:9c:0f:
                    21:64:d0:1e:4c:ae:46:5b:a4:0c:b4:00:1f:5b:17:
                    19:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:BC:A5:2C:50:D6:44:A9:A8:FF:1C:20:35:EA:2D:5A:07:79:3A:7E
            X509v3 Authority Key Identifier:
                keyid:30:76:E9:85:5F:9B:CA:30:17:A1:01:37:B4:43:EE:8C:52:8C:A9:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHbphV-byjAXoQE3tEPujFKMqVI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:f6:9d:b3:5e:c6:7b:69:46:68:ee:fd:83:f1:e7:d1:6f:53:
         d4:23:3a:72:d6:75:9d:1a:44:7b:72:62:15:fb:25:57:15:8e:
         e4:16:29:51:a3:ee:e6:2f:d7:d0:08:52:a1:51:a6:9a:bb:cf:
         66:46:47:a8:da:e2:e9:38:c1:cd:31:bf:1f:1f:bd:32:4e:9e:
         9f:79:16:de:ab:34:65:39:e6:37:0a:c6:1f:5b:f1:f5:84:1b:
         df:a8:1c:ed:f6:2e:62:a4:50:68:60:75:71:d2:57:90:87:d9:
         37:a8:e7:f8:5e:86:ae:56:69:ff:bd:52:42:df:5f:19:b9:80:
         ea:81:f0:8f:9f:19:f2:54:c4:56:39:00:5a:65:81:1e:1f:78:
         6c:dd:ef:35:6d:34:7f:cc:6d:46:6d:47:bf:2e:e7:15:f2:a8:
         96:25:3b:65:9b:58:9a:19:47:39:f1:8f:18:44:d7:4b:8a:6b:
         98:9f:98:98:6b:4d:69:f2:b5:84:9a:36:20:24:5a:20:e2:ae:
         95:d6:e9:a3:5d:34:36:34:f3:b0:eb:b4:b3:7c:4f:47:f3:6e:
         7e:76:13:3c:f2:7f:2e:9c:67:e9:f7:92:04:bd:5d:b5:2f:c2:
         93:44:7c:e9:db:65:5e:c6:0c:1a:a7:7c:c0:b9:52:66:7d:96:
         ae:61:47:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:19:20 2025 by rpki-client