Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.mft
File:                     c45l-wPm1gfYviBDRdbgWkYLmk8.mft (raw, json)
Hash identifier:          aCrn8u6DHwSaRhw+T3VjixsW9D1XF/yprgyXJWWcq78=
Subject key identifier:   1E:6C:0D:AD:C0:E0:CE:4B:A8:F2:E9:F4:67:E8:FD:66:89:EC:42:82
Authority key identifier: 73:8E:65:FB:03:E6:D6:07:D8:BE:20:43:45:D6:E0:5A:46:0B:9A:4F
Certificate issuer:       /CN=738e65fb03e6d607d8be204345d6e05a460b9a4f
Certificate serial:       0196B1EA70C7F02D8FA79F7D60CAAAB0FCA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c45l-wPm1gfYviBDRdbgWkYLmk8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.mft
Manifest number:          0D2F
Signing time:             Thu 08 May 2025 22:00:53 +0000
Manifest this update:     Thu 08 May 2025 22:00:53 +0000
Manifest next update:     Fri 09 May 2025 22:00:53 +0000
Files and hashes:         1: Bm65E--O4RsSyCzNAmCOH5DCwbg.roa (hash: Dk5vtQSO5xVuQ/klL2R5yHYHzC51XBPO7azd9yPCmHY=)
                          2: c45l-wPm1gfYviBDRdbgWkYLmk8.crl (hash: lnEQ2U80MR8f8lf/IljppnoroVdK7yFdJdVgJjvCx0Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c45l-wPm1gfYviBDRdbgWkYLmk8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b1:ea:70:c7:f0:2d:8f:a7:9f:7d:60:ca:aa:b0:fc:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=738e65fb03e6d607d8be204345d6e05a460b9a4f
        Validity
            Not Before: May  8 22:00:53 2025 GMT
            Not After : May  9 22:00:53 2025 GMT
        Subject: CN=1e6c0dadc0e0ce4ba8f2e9f467e8fd6689ec4282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:5f:e7:55:8e:60:53:64:5c:c5:c6:49:7b:f2:
                    39:21:d7:26:b6:06:25:1a:38:8b:03:de:dc:4f:c4:
                    b8:4b:5b:a2:1a:52:c2:55:3e:59:80:26:52:f0:ab:
                    34:72:43:d9:18:5b:41:5b:5f:fc:3b:44:49:d6:b7:
                    94:01:3a:d4:4f:56:43:c3:e4:00:31:b0:55:fe:63:
                    fd:fd:56:19:62:e6:bc:7b:5b:3d:05:36:93:d9:35:
                    e8:48:6c:ea:9c:18:ff:af:9e:51:dc:22:8c:98:31:
                    b0:63:98:e6:f3:0e:8d:f1:1a:d9:9c:78:3c:18:fd:
                    53:ca:81:0c:8d:24:07:a6:20:ab:42:9d:2d:9c:15:
                    98:c0:68:1e:b8:ac:d6:c1:80:60:00:98:c7:6a:2c:
                    3a:a5:45:0c:de:b7:96:55:79:5f:db:32:10:89:c3:
                    e4:ab:26:ce:c5:c8:59:32:fe:bd:f8:b0:25:be:b9:
                    d2:c5:de:77:0d:56:17:b1:e9:8d:88:9d:d1:41:b1:
                    08:64:5d:d7:5b:24:85:6b:bf:4c:af:f8:8f:18:1a:
                    83:aa:da:84:9f:db:5e:c0:72:d0:cf:0e:e2:3c:8f:
                    1d:39:a9:6a:3a:c7:86:ee:36:47:d6:41:f2:e8:f2:
                    90:b9:89:35:c4:1a:ff:84:08:47:ae:f0:0b:bd:99:
                    6d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:6C:0D:AD:C0:E0:CE:4B:A8:F2:E9:F4:67:E8:FD:66:89:EC:42:82
            X509v3 Authority Key Identifier:
                keyid:73:8E:65:FB:03:E6:D6:07:D8:BE:20:43:45:D6:E0:5A:46:0B:9A:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c45l-wPm1gfYviBDRdbgWkYLmk8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:2f:5a:df:0a:bb:24:f8:5b:53:e7:10:1f:2d:bd:55:54:64:
         50:ca:bb:17:88:76:f7:c9:00:a4:6c:6e:34:cf:77:78:5c:19:
         83:cd:5c:f4:45:b6:0e:68:3c:fb:47:c5:82:fe:68:be:b8:60:
         4c:3f:7b:99:74:31:ae:30:9d:30:4a:5d:fb:68:ab:73:0b:58:
         2a:92:fd:fc:b6:35:77:1b:61:5c:d5:b5:3d:ec:c8:3d:32:ce:
         f7:82:55:25:91:fa:bd:67:e0:03:81:80:8d:56:21:e0:d2:4b:
         04:1c:29:db:63:1f:73:6b:c6:ac:d4:39:13:2e:64:08:2e:53:
         b2:b9:d5:b8:c3:b7:66:72:f3:21:5b:9d:0f:f7:f6:db:ed:38:
         2a:a5:e2:49:b9:40:3c:78:47:08:cc:5b:20:d8:80:42:31:05:
         d2:f9:f3:b6:63:73:ca:4e:39:60:50:ec:12:82:af:4a:6e:4b:
         8b:8b:41:3d:1e:ce:81:f7:10:f9:8b:90:c2:1c:03:05:c7:54:
         3b:16:b2:4a:08:cf:2d:c1:3c:fd:25:c4:b9:25:81:74:76:c6:
         a0:a9:43:59:a3:a8:6d:44:bc:4f:f2:57:4a:9a:87:67:ce:e7:
         3e:5c:e2:a7:d0:dd:ae:6c:a8:4d:aa:ff:48:38:76:a0:f3:8b:
         13:a5:13:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:43:42 2025 by rpki-client