Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/e718e4-53b7-47bb-a336-5a17719d449e/1/Mw5kD51jupQ6l7PcENTGhEpdPcE.mft
File:                     Mw5kD51jupQ6l7PcENTGhEpdPcE.mft (raw, json)
Hash identifier:          RLDDUgF+1O6o2LTRhy6CFKMqSz5NEZr8NFCiYjIE5kA=
Subject key identifier:   F0:64:E0:DE:BC:79:96:A2:E3:96:4F:12:89:21:D6:C7:3D:05:E8:40
Authority key identifier: 33:0E:64:0F:9D:63:BA:94:3A:97:B3:DC:10:D4:C6:84:4A:5D:3D:C1
Certificate issuer:       /CN=330e640f9d63ba943a97b3dc10d4c6844a5d3dc1
Certificate serial:       0196C804A103D89D06050E9BD2DE88EC3722
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mw5kD51jupQ6l7PcENTGhEpdPcE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/e718e4-53b7-47bb-a336-5a17719d449e/1/Mw5kD51jupQ6l7PcENTGhEpdPcE.mft
Manifest number:          1543
Signing time:             Tue 13 May 2025 05:01:08 +0000
Manifest this update:     Tue 13 May 2025 05:01:08 +0000
Manifest next update:     Wed 14 May 2025 05:01:08 +0000
Files and hashes:         1: 1-Jd_qc8apOR4p6laQN0XEPGV69E.roa (hash: GOoNb/QIaZMGL6bF2qxv1TbNPoQ9D5q5E8h1u/bWgGs=)
                          2: Mw5kD51jupQ6l7PcENTGhEpdPcE.crl (hash: gWg6jMM3XeWw81Y1+WiioZ14D/NwV3zn6sGmmOAsFoM=)
                          3: mHYNXLzzWgHgWDnXKZl-4Vzir0c.roa (hash: li78OcXCZpUgKLA0YsVNzvnIFn5UmiFLcC5dihhrvhY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/e718e4-53b7-47bb-a336-5a17719d449e/1/Mw5kD51jupQ6l7PcENTGhEpdPcE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/e718e4-53b7-47bb-a336-5a17719d449e/1/Mw5kD51jupQ6l7PcENTGhEpdPcE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mw5kD51jupQ6l7PcENTGhEpdPcE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c8:04:a1:03:d8:9d:06:05:0e:9b:d2:de:88:ec:37:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=330e640f9d63ba943a97b3dc10d4c6844a5d3dc1
        Validity
            Not Before: May 13 05:01:08 2025 GMT
            Not After : May 14 05:01:08 2025 GMT
        Subject: CN=f064e0debc7996a2e3964f128921d6c73d05e840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7b:cb:65:7a:cb:73:5a:20:c0:34:3b:68:76:
                    fb:2b:95:1b:c0:62:ed:16:e2:12:c9:c1:f3:a8:16:
                    92:0d:1d:3d:48:37:32:d8:34:47:7f:4c:74:26:17:
                    05:04:b4:69:31:92:85:16:32:8a:32:79:8f:7e:cd:
                    d1:7a:73:e0:29:c3:fc:ca:b2:6b:c8:19:b1:aa:36:
                    81:55:da:a7:71:ec:be:1b:5c:9e:e5:bb:24:da:d8:
                    a0:de:1a:8e:4f:39:c0:91:0e:8f:32:e6:61:f4:cd:
                    bd:3a:a6:11:36:75:00:3b:30:a7:fb:11:bb:35:75:
                    10:94:65:df:53:a1:34:10:d2:de:f6:0a:34:1c:e4:
                    ad:51:ed:50:69:09:2d:4e:b7:19:80:76:c8:f5:63:
                    43:a2:45:ff:d7:fb:d0:4d:62:5a:49:86:1b:34:2c:
                    08:37:f6:4d:54:d2:6d:c4:78:45:6f:70:c2:37:1e:
                    1c:78:eb:0d:c2:9c:01:e5:aa:16:88:06:3e:62:bf:
                    a0:df:c0:73:c9:2b:66:3e:66:44:f8:dd:f3:ce:55:
                    f2:1c:7f:82:0e:9c:69:67:fa:4d:c2:57:cf:fe:82:
                    ad:54:52:56:6c:d6:8c:83:e5:bc:d4:32:7d:1a:67:
                    10:b5:a4:79:67:0e:1c:46:ee:76:17:ec:00:ba:cb:
                    4c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:64:E0:DE:BC:79:96:A2:E3:96:4F:12:89:21:D6:C7:3D:05:E8:40
            X509v3 Authority Key Identifier:
                keyid:33:0E:64:0F:9D:63:BA:94:3A:97:B3:DC:10:D4:C6:84:4A:5D:3D:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mw5kD51jupQ6l7PcENTGhEpdPcE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e718e4-53b7-47bb-a336-5a17719d449e/1/Mw5kD51jupQ6l7PcENTGhEpdPcE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e718e4-53b7-47bb-a336-5a17719d449e/1/Mw5kD51jupQ6l7PcENTGhEpdPcE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:2c:d4:38:48:c4:91:b6:0d:21:f8:11:62:73:89:a3:a6:90:
         09:0f:95:25:7d:9b:ea:4e:5a:81:63:4c:37:c0:5b:54:76:21:
         e2:75:6c:5f:30:14:7b:e3:06:34:af:5e:50:c8:b0:21:1e:9e:
         84:95:00:17:79:cb:e9:2c:4b:8c:d7:6b:02:81:c4:03:63:7b:
         b1:43:18:9f:de:c1:9c:47:cf:43:77:e8:0a:b5:ec:9d:90:2d:
         f3:89:2c:20:7b:df:ac:41:c1:20:e9:f7:e9:ef:b8:68:d4:33:
         0d:9e:ed:7f:56:af:d1:15:7c:a3:63:12:bd:e0:97:73:08:a3:
         3a:2b:db:dd:16:f4:0e:4c:7a:8b:9a:0c:da:a7:a0:18:ac:09:
         57:a8:e8:4d:c0:f0:f1:cd:74:03:b1:8d:8f:52:cd:18:19:53:
         a0:53:88:b6:c9:2c:3c:2e:e5:4e:f1:31:b8:0c:6f:0d:2a:77:
         aa:99:d1:65:28:5f:12:54:28:7e:2a:bd:cd:83:88:a5:60:31:
         f8:fc:32:37:78:4c:98:4b:9d:6f:a6:1d:55:e4:d1:7e:b4:1a:
         63:c8:ee:a3:06:fe:62:a1:ad:df:7b:ef:fc:54:af:ba:d5:00:
         3a:31:ab:0d:2b:b9:b7:6d:37:39:2b:44:f1:0f:4b:a1:4c:9a:
         87:08:71:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 07:12:59 2025 by rpki-client