Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/d41c4a-9bef-4737-95a1-08f17c410765/1/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.mft
File:                     Ld_cpzzWTXXmVt0KOkQn7WGYKj0.mft (raw, json)
Hash identifier:          Lxii2CNQO9cZtbbV8+To0mnz43Ro+6goy3M5DYGevmU=
Subject key identifier:   C2:AA:ED:A7:A9:6E:B7:36:0C:59:3F:2D:61:DA:B0:E6:65:0B:76:CA
Authority key identifier: 2D:DF:DC:A7:3C:D6:4D:75:E6:56:DD:0A:3A:44:27:ED:61:98:2A:3D
Certificate issuer:       /CN=2ddfdca73cd64d75e656dd0a3a4427ed61982a3d
Certificate serial:       0196C081A0B3E887B6BD13CBFCC59AD0E166
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/d41c4a-9bef-4737-95a1-08f17c410765/1/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.mft
Manifest number:          064D
Signing time:             Sun 11 May 2025 18:00:42 +0000
Manifest this update:     Sun 11 May 2025 18:00:42 +0000
Manifest next update:     Mon 12 May 2025 18:00:42 +0000
Files and hashes:         1: Ld_cpzzWTXXmVt0KOkQn7WGYKj0.crl (hash: k/FMlKOdnqaFAfW4oGnN/BTZNrNqvFb0gJ9Z2lt9bHA=)
                          2: Ovla5EJUgy9GZRovhELArfkHbLc.roa (hash: 1ZYYi0oYPWoj0xBQr1HbwZ7BRAZOIkZmTAi9EvpW7yY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/d41c4a-9bef-4737-95a1-08f17c410765/1/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/d41c4a-9bef-4737-95a1-08f17c410765/1/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c0:81:a0:b3:e8:87:b6:bd:13:cb:fc:c5:9a:d0:e1:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ddfdca73cd64d75e656dd0a3a4427ed61982a3d
        Validity
            Not Before: May 11 18:00:42 2025 GMT
            Not After : May 12 18:00:42 2025 GMT
        Subject: CN=c2aaeda7a96eb7360c593f2d61dab0e6650b76ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:3e:73:a5:64:2c:54:ee:59:be:9c:f7:66:7c:
                    fc:3c:e8:e6:8d:67:8b:13:69:ee:29:1c:19:0c:38:
                    ca:44:9c:1f:a3:1b:18:f2:50:fe:fb:91:e7:d2:e7:
                    81:95:72:ee:99:1f:74:ca:e1:29:1b:39:f4:cc:8f:
                    66:57:2f:09:e1:1b:0d:fe:53:94:45:3f:30:2e:4c:
                    a7:1e:60:2c:1c:57:40:95:10:e2:ae:e0:8b:4b:5d:
                    4d:23:10:09:a0:91:7d:c0:ec:60:e6:55:8d:eb:97:
                    6c:46:d0:ba:d1:aa:46:fe:68:cd:4b:49:34:be:86:
                    de:a8:51:0a:bc:e8:11:2e:2d:2a:4e:ae:2b:98:31:
                    19:fd:6b:93:de:c5:43:60:73:77:de:86:7c:71:6f:
                    8a:11:7f:60:5e:eb:df:ac:e7:47:fc:25:e3:d9:94:
                    f2:af:5c:36:0a:fe:4c:93:b9:6f:01:03:56:26:cb:
                    a5:bd:e6:fd:4b:c9:12:ec:0d:93:ad:d0:5c:f6:47:
                    68:8d:11:d4:f2:19:c2:7f:f1:d4:74:73:de:4d:16:
                    d4:06:bf:0f:e2:58:1a:6b:77:86:4d:8a:95:72:c1:
                    a6:d3:a6:db:4f:fd:a4:26:52:6f:87:2f:f9:e2:98:
                    5e:ee:74:87:7b:48:1b:01:23:fa:f2:e2:22:ee:58:
                    63:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:AA:ED:A7:A9:6E:B7:36:0C:59:3F:2D:61:DA:B0:E6:65:0B:76:CA
            X509v3 Authority Key Identifier:
                keyid:2D:DF:DC:A7:3C:D6:4D:75:E6:56:DD:0A:3A:44:27:ED:61:98:2A:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d41c4a-9bef-4737-95a1-08f17c410765/1/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d41c4a-9bef-4737-95a1-08f17c410765/1/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:92:7b:aa:80:22:c8:a6:a7:ba:9d:70:44:70:f6:96:f2:93:
         51:f8:7b:1f:b2:ff:32:e4:f7:91:99:ce:cb:54:ca:b4:a0:6c:
         41:f5:5e:4b:3f:8f:80:48:25:6e:71:b6:bb:8e:4c:59:b7:55:
         c6:f6:1a:6d:71:d0:17:87:98:59:22:0c:ea:5b:9f:f4:3d:e9:
         f3:cd:32:42:f6:2a:d9:ed:fe:78:02:a1:cb:b9:27:b4:32:90:
         9e:d4:0b:89:08:27:5a:0e:c3:a1:6c:6f:85:c2:41:54:1a:6c:
         32:00:8e:98:c6:b4:9a:63:2a:93:92:00:e6:b8:89:82:fb:10:
         90:9c:8b:2f:ec:d0:09:fa:39:b8:cc:71:08:f9:2d:6e:c5:7a:
         29:e7:ec:16:cf:eb:d6:b4:fa:1a:44:eb:be:8d:c0:d0:da:81:
         6f:66:ad:57:c1:d6:6e:8b:59:c3:f7:34:75:26:47:5b:52:7b:
         89:99:33:88:3c:a1:0e:b7:69:37:f6:c0:22:1b:fa:84:28:72:
         90:24:f6:28:f7:d0:e6:ca:a9:5d:4f:bb:d4:21:bb:3a:a8:97:
         05:bb:e5:28:85:f5:1f:98:95:8b:41:48:31:ad:07:5d:e0:d7:
         05:59:06:b0:a0:91:57:35:9a:79:74:5e:7a:34:95:3b:7a:66:
         64:69:0a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:14:04 2025 by rpki-client