Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/bb9f65-49d8-41e3-9ebc-c82e158c012d/1/Rb4nHWSVKTNHRlxpuX1zgOS7tG0.mft
File:                     Rb4nHWSVKTNHRlxpuX1zgOS7tG0.mft (raw, json)
Hash identifier:          BrFiGV7Cgg5pLfFK/XYmwx98VBnaUvkCEIE7THCLODk=
Subject key identifier:   58:79:72:35:C2:0A:FB:48:CC:40:72:3E:7C:A7:35:93:8F:10:37:01
Authority key identifier: 45:BE:27:1D:64:95:29:33:47:46:5C:69:B9:7D:73:80:E4:BB:B4:6D
Certificate issuer:       /CN=45be271d6495293347465c69b97d7380e4bbb46d
Certificate serial:       0196B4EAFD7F4F6FC1131431F1F0903AD690
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rb4nHWSVKTNHRlxpuX1zgOS7tG0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/bb9f65-49d8-41e3-9ebc-c82e158c012d/1/Rb4nHWSVKTNHRlxpuX1zgOS7tG0.mft
Manifest number:          0222
Signing time:             Fri 09 May 2025 12:00:21 +0000
Manifest this update:     Fri 09 May 2025 12:00:21 +0000
Manifest next update:     Sat 10 May 2025 12:00:21 +0000
Files and hashes:         1: Rb4nHWSVKTNHRlxpuX1zgOS7tG0.crl (hash: R6ovZj+bNjJhpD+atuPe5rqneJss9apQ72fYkZNjaOo=)
                          2: g8O-LxBDxPemkfnWTYdHDXGwokQ.roa (hash: 62+5Rr40UYD7j7xrWfzQh2M5veljI3mG5KafCJqpdBQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/bb9f65-49d8-41e3-9ebc-c82e158c012d/1/Rb4nHWSVKTNHRlxpuX1zgOS7tG0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/bb9f65-49d8-41e3-9ebc-c82e158c012d/1/Rb4nHWSVKTNHRlxpuX1zgOS7tG0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rb4nHWSVKTNHRlxpuX1zgOS7tG0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b4:ea:fd:7f:4f:6f:c1:13:14:31:f1:f0:90:3a:d6:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45be271d6495293347465c69b97d7380e4bbb46d
        Validity
            Not Before: May  9 12:00:21 2025 GMT
            Not After : May 10 12:00:21 2025 GMT
        Subject: CN=58797235c20afb48cc40723e7ca735938f103701
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:9c:b8:31:2b:68:8f:36:6a:33:1a:84:f5:b2:
                    85:c8:cc:1a:4b:51:ee:8c:5d:cf:fb:ff:e8:3f:f6:
                    7b:b6:8a:c5:83:85:e9:d5:79:f8:c3:68:bf:90:0d:
                    72:fe:f0:a3:45:a9:9a:0f:90:8d:98:f2:9c:9e:0b:
                    51:f2:b1:a9:59:1f:1c:f2:ed:eb:d6:98:54:6d:83:
                    cb:e8:0b:91:87:10:fd:2e:e8:95:cd:31:1a:c7:90:
                    9f:35:35:3f:11:6a:c6:75:3b:cb:ac:8a:5e:09:dd:
                    19:f2:49:5e:ed:a3:73:29:c2:74:e5:19:24:ea:c6:
                    7a:c2:4e:c5:15:92:65:35:db:7e:bd:0d:f9:ea:ec:
                    0d:47:24:e4:fb:e4:12:b3:65:ae:10:44:0c:8b:54:
                    08:d4:a5:2a:20:46:47:0a:83:41:b6:a4:96:0a:82:
                    83:21:65:4f:80:46:e0:66:57:ac:1e:e2:4f:e9:d4:
                    e8:4d:b9:ee:ce:4f:42:0c:82:08:76:d3:16:85:47:
                    41:6b:2e:36:6c:cc:d5:55:2c:2f:eb:ee:ac:98:f7:
                    07:f4:0f:ce:69:b7:ac:1c:1c:8f:8b:7d:6e:19:03:
                    cf:dd:0b:e0:20:fa:71:ec:be:0d:06:bf:ce:96:7e:
                    70:3b:fd:fa:fc:ad:8e:f1:66:ac:f1:1c:43:87:10:
                    88:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:79:72:35:C2:0A:FB:48:CC:40:72:3E:7C:A7:35:93:8F:10:37:01
            X509v3 Authority Key Identifier:
                keyid:45:BE:27:1D:64:95:29:33:47:46:5C:69:B9:7D:73:80:E4:BB:B4:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rb4nHWSVKTNHRlxpuX1zgOS7tG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/bb9f65-49d8-41e3-9ebc-c82e158c012d/1/Rb4nHWSVKTNHRlxpuX1zgOS7tG0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/bb9f65-49d8-41e3-9ebc-c82e158c012d/1/Rb4nHWSVKTNHRlxpuX1zgOS7tG0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:1f:bb:a1:50:27:e9:fb:4e:f4:d0:85:bc:a7:63:ca:9e:71:
         40:f1:cc:a2:b1:e8:e5:ca:ac:69:1e:77:b5:c5:94:f8:3e:56:
         20:cf:31:f5:50:8a:86:ab:28:dd:6b:bc:f2:15:b4:5c:f7:8f:
         b3:4d:06:d7:71:2d:b8:cb:0f:90:d7:32:13:83:cf:cd:b7:29:
         8b:45:02:9d:8a:8b:24:7a:47:3b:3f:4b:5d:f6:7b:6e:d2:ce:
         1e:79:e5:3c:df:9e:11:73:7d:87:6b:c1:90:1e:72:74:8e:bb:
         d9:39:d6:52:07:c5:c2:cc:eb:86:16:92:c8:98:7d:6a:40:c2:
         40:e9:9e:fb:a3:dc:38:1f:4e:5e:80:20:c8:df:55:d7:b6:f5:
         0f:15:93:de:d3:6b:3c:81:1f:42:9d:af:b2:36:8e:e1:50:70:
         54:73:9e:cf:5a:0d:22:b9:8e:16:99:9f:2f:4a:c2:48:e1:a2:
         d4:80:6b:f2:81:fb:cc:d4:e8:24:a5:df:2d:97:9d:5b:64:0b:
         e8:9b:e0:30:7e:fc:91:39:ab:fb:c8:df:41:9a:56:df:55:6e:
         e8:4c:d6:cb:a0:24:20:fd:02:ef:17:21:8a:ec:13:b8:4e:27:
         85:a7:40:87:a3:5f:61:0c:d1:a2:3b:ec:35:9d:ad:0c:be:81:
         07:5b:e6:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 20:00:30 2025 by rpki-client