Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/DuPU2BDyR3hBqLhVk7jzDors1Ak.mft
File:                     DuPU2BDyR3hBqLhVk7jzDors1Ak.mft (raw, json)
Hash identifier:          imGpJjOsx/6GjDf7+ADDyHzoYyqUhR6Q78cmEjJxB1Q=
Subject key identifier:   D3:66:B5:8B:D1:C9:1A:60:2B:06:E1:A8:C8:3D:FF:80:79:70:DA:CD
Authority key identifier: 0E:E3:D4:D8:10:F2:47:78:41:A8:B8:55:93:B8:F3:0E:8A:EC:D4:09
Certificate issuer:       /CN=0ee3d4d810f2477841a8b85593b8f30e8aecd409
Certificate serial:       0196B0695E8E83C84ADAF62FC80841AF9457
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DuPU2BDyR3hBqLhVk7jzDors1Ak.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/DuPU2BDyR3hBqLhVk7jzDors1Ak.mft
Manifest number:          152D
Signing time:             Thu 08 May 2025 15:00:17 +0000
Manifest this update:     Thu 08 May 2025 15:00:17 +0000
Manifest next update:     Fri 09 May 2025 15:00:17 +0000
Files and hashes:         1: DuPU2BDyR3hBqLhVk7jzDors1Ak.crl (hash: Eo5qwFkVMVI8KvT8N7ygJIGC+cK3t3sFAJpBa8CODA8=)
                          2: kT96Syix82Ksegk49TAUeSUGMVc.roa (hash: d9BAb8ybDMu+8NvAhemfJFOhiARZSFEf5iHfB6YfEWg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/DuPU2BDyR3hBqLhVk7jzDors1Ak.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/DuPU2BDyR3hBqLhVk7jzDors1Ak.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DuPU2BDyR3hBqLhVk7jzDors1Ak.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b0:69:5e:8e:83:c8:4a:da:f6:2f:c8:08:41:af:94:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ee3d4d810f2477841a8b85593b8f30e8aecd409
        Validity
            Not Before: May  8 15:00:17 2025 GMT
            Not After : May  9 15:00:17 2025 GMT
        Subject: CN=d366b58bd1c91a602b06e1a8c83dff807970dacd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:29:b3:b9:e4:64:39:9f:66:df:ba:d2:fc:61:
                    6b:06:48:59:d4:b1:49:1f:34:21:b4:dc:60:1d:67:
                    3a:9a:a0:68:4e:33:fd:17:4e:29:da:14:12:3b:fe:
                    97:c6:a9:bd:42:a2:f2:2d:e9:e6:2d:cd:01:c6:31:
                    5f:8e:10:f5:94:46:09:44:ca:3b:86:de:81:da:f0:
                    b7:94:73:4d:b8:04:2f:65:1c:62:34:af:20:8c:24:
                    9a:6a:94:55:98:ba:3f:68:33:c9:a5:b3:a4:2e:cc:
                    b5:1a:81:63:d6:3c:a4:f8:39:47:50:db:ba:c5:ac:
                    c3:3d:a6:7b:ce:78:ca:56:bd:e9:ab:b6:74:d6:1e:
                    26:71:ba:80:a6:83:f0:93:05:06:4a:a8:c0:98:9c:
                    be:fb:36:a9:36:be:dd:e4:b7:9a:78:59:65:f4:82:
                    f5:5d:6c:e9:c1:0a:94:cc:39:f7:01:34:1a:f7:b2:
                    3c:24:f2:50:5b:a3:f6:67:db:d9:35:83:ca:b2:27:
                    36:b8:10:1b:62:0d:05:63:1a:04:92:c3:3c:01:84:
                    1e:c1:16:f7:3e:b5:b0:fc:b3:a8:f2:54:0a:5d:47:
                    d6:92:1f:9c:e0:66:ef:fe:ad:be:13:5f:da:55:80:
                    8c:24:8d:41:7f:17:11:52:33:03:5d:c1:b9:35:76:
                    b5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:66:B5:8B:D1:C9:1A:60:2B:06:E1:A8:C8:3D:FF:80:79:70:DA:CD
            X509v3 Authority Key Identifier:
                keyid:0E:E3:D4:D8:10:F2:47:78:41:A8:B8:55:93:B8:F3:0E:8A:EC:D4:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DuPU2BDyR3hBqLhVk7jzDors1Ak.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/DuPU2BDyR3hBqLhVk7jzDors1Ak.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/DuPU2BDyR3hBqLhVk7jzDors1Ak.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:85:3b:f5:24:a0:c8:44:c9:03:4d:50:87:87:21:56:9b:a5:
         19:b3:9c:b2:25:98:be:27:d4:b3:ae:3d:61:0e:19:08:6b:68:
         1a:5b:4f:d2:6f:c3:eb:72:aa:99:5d:09:18:4d:ec:c6:4e:34:
         7f:de:f8:c2:a1:3b:f3:06:95:16:ef:a7:14:78:31:67:9e:02:
         39:89:7b:86:44:34:d0:f0:b2:2d:ac:77:82:42:36:b3:ef:df:
         6c:1f:ab:d7:50:fe:23:26:41:e3:e9:6a:36:74:15:68:5f:0d:
         a4:43:d7:cd:db:70:02:70:d4:e5:1f:e0:91:2c:96:45:f6:2c:
         76:70:26:1a:64:e2:84:20:49:03:24:fd:59:f2:d6:47:6e:9d:
         2b:e0:9d:01:3a:78:17:5f:e2:d4:62:18:d2:98:e5:b4:c7:ca:
         f8:0f:f9:c1:e9:c2:fc:02:b1:58:61:8a:48:e6:a4:a1:73:21:
         75:b7:76:d7:62:06:5e:5a:e2:7a:db:fb:00:04:1a:5f:52:36:
         fb:e3:a5:4d:39:ee:15:60:eb:d6:96:34:7a:12:fd:aa:ea:d4:
         6e:08:d7:e2:ab:76:0b:37:37:b5:cf:ab:31:af:6a:df:98:06:
         09:30:5d:7e:2a:5d:dd:55:6c:72:f0:67:2d:83:b5:3b:7e:0f:
         67:9c:68:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 21:48:19 2025 by rpki-client