Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/790648-dd90-44eb-9a8f-8fa09874113e/1/7XcsL6I75vqOKK6kpxXVrDHwzJ8.mft
File:                     7XcsL6I75vqOKK6kpxXVrDHwzJ8.mft (raw, json)
Hash identifier:          nvrUg8g8cUZECLHxW6IxQeqKEdGhYQzAfwCokBcCpuE=
Subject key identifier:   2C:4A:90:06:E6:85:3F:26:28:4F:96:2E:88:38:14:DA:54:47:EB:94
Authority key identifier: ED:77:2C:2F:A2:3B:E6:FA:8E:28:AE:A4:A7:15:D5:AC:31:F0:CC:9F
Certificate issuer:       /CN=ed772c2fa23be6fa8e28aea4a715d5ac31f0cc9f
Certificate serial:       0196C34C848D15C972D29A197C34BD175C48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7XcsL6I75vqOKK6kpxXVrDHwzJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/790648-dd90-44eb-9a8f-8fa09874113e/1/7XcsL6I75vqOKK6kpxXVrDHwzJ8.mft
Manifest number:          0370
Signing time:             Mon 12 May 2025 07:01:33 +0000
Manifest this update:     Mon 12 May 2025 07:01:33 +0000
Manifest next update:     Tue 13 May 2025 07:01:33 +0000
Files and hashes:         1: 7XcsL6I75vqOKK6kpxXVrDHwzJ8.crl (hash: GIoTz7jHEERauVm8TlwqV3bIm/8CnyJDl54sT8f0Jxs=)
                          2: tv6tClbvL3fe6dvTJo3FM5f_h3Y.roa (hash: A+tnxsTWmCeZid4USiunoHsPUSXZ+9POOmWlZ50vqKI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/790648-dd90-44eb-9a8f-8fa09874113e/1/7XcsL6I75vqOKK6kpxXVrDHwzJ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/790648-dd90-44eb-9a8f-8fa09874113e/1/7XcsL6I75vqOKK6kpxXVrDHwzJ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7XcsL6I75vqOKK6kpxXVrDHwzJ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c3:4c:84:8d:15:c9:72:d2:9a:19:7c:34:bd:17:5c:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed772c2fa23be6fa8e28aea4a715d5ac31f0cc9f
        Validity
            Not Before: May 12 07:01:33 2025 GMT
            Not After : May 13 07:01:33 2025 GMT
        Subject: CN=2c4a9006e6853f26284f962e883814da5447eb94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e9:1d:e3:8f:9d:9e:2b:bb:05:40:3b:47:f9:
                    5f:db:4e:c3:5c:3b:c3:d7:66:ca:a2:ba:41:b3:0c:
                    79:46:77:3a:fb:26:a3:4d:c1:79:81:86:c8:c5:de:
                    98:20:dd:80:5f:60:38:3c:76:b9:68:83:ba:f3:93:
                    eb:34:f6:3d:cf:cc:de:3f:ac:25:7c:9a:81:5a:85:
                    49:9d:93:72:52:d5:01:ea:b8:7f:90:a8:15:2d:d1:
                    b3:2d:7a:4e:8c:e5:10:52:ad:76:ff:5e:c9:83:53:
                    68:52:90:6e:5b:50:83:86:ec:ef:28:9e:14:64:96:
                    ad:05:54:fa:38:26:2a:90:53:07:9c:28:86:3f:4c:
                    b0:b7:1d:ca:00:e1:96:f1:fc:c1:be:bf:ab:cd:22:
                    64:6a:c5:db:bf:e9:56:ef:e5:ba:db:a5:c0:b4:80:
                    82:73:6e:63:11:59:ea:5b:22:aa:17:1a:78:32:6a:
                    5b:6e:62:03:8e:49:5a:59:ba:49:15:17:6f:a5:17:
                    22:e5:43:7b:5f:4f:5e:75:32:04:5a:a2:7d:c1:b1:
                    57:df:51:15:5c:c6:54:bc:56:97:a0:48:26:fb:48:
                    98:68:4c:05:b3:78:0b:1e:31:a4:35:77:20:93:0a:
                    60:2e:e8:25:c9:8d:6c:10:82:af:7c:69:66:cb:97:
                    c5:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:4A:90:06:E6:85:3F:26:28:4F:96:2E:88:38:14:DA:54:47:EB:94
            X509v3 Authority Key Identifier:
                keyid:ED:77:2C:2F:A2:3B:E6:FA:8E:28:AE:A4:A7:15:D5:AC:31:F0:CC:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XcsL6I75vqOKK6kpxXVrDHwzJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/790648-dd90-44eb-9a8f-8fa09874113e/1/7XcsL6I75vqOKK6kpxXVrDHwzJ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/790648-dd90-44eb-9a8f-8fa09874113e/1/7XcsL6I75vqOKK6kpxXVrDHwzJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:8e:c9:ec:5d:e1:97:a9:92:43:c3:51:ba:19:dc:60:1a:dd:
         f4:8d:48:b5:c9:30:09:cf:06:44:d0:d0:af:52:18:09:ce:14:
         45:75:24:ce:7b:65:47:94:9f:fe:7f:ea:03:b1:9f:0a:b7:f2:
         45:a0:88:17:72:fd:20:5c:39:c7:12:5c:e9:3a:b0:c6:8c:ee:
         64:ff:8c:87:8d:7e:67:7b:c6:7a:3a:38:3a:c1:00:b8:58:00:
         a5:11:06:8a:b0:77:02:d8:c7:9b:64:62:a1:4b:08:d5:cd:b8:
         e1:4f:81:97:84:d7:68:43:76:24:bf:62:33:24:ee:c1:b9:87:
         25:ee:9b:87:d2:d4:6f:93:45:55:bf:6e:16:c6:e2:20:11:f7:
         cf:2d:e8:88:be:56:5b:86:4a:45:8f:c9:48:3d:ba:18:90:52:
         01:bb:98:55:63:83:84:10:f7:6b:57:11:02:45:93:c5:02:8a:
         9b:dc:1d:bc:ba:c8:5a:f7:8d:1a:3a:ba:a0:b0:dc:c3:b6:df:
         15:67:42:35:2d:19:75:86:f8:81:31:2d:3f:f9:78:ae:62:1a:
         06:4b:21:df:57:8e:ba:27:40:5c:f4:a9:f4:c1:d5:16:b9:31:
         c4:72:f2:84:d1:f9:32:dc:c5:1b:29:16:db:96:57:96:02:fb:
         72:30:08:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:25:50 2025 by rpki-client