Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.mft
File:                     C1jJIcs-nIHdwxb_A5y5w20qQ5A.mft (raw, json)
Hash identifier:          zMiaCadDwC5PVE1XGr8Xc+ReprGcmwLO8s1N+AeaZz4=
Subject key identifier:   FC:5C:FC:52:DF:87:6C:B2:AC:6E:56:01:B2:EA:ED:DE:2A:D3:1D:9B
Authority key identifier: 0B:58:C9:21:CB:3E:9C:81:DD:C3:16:FF:03:9C:B9:C3:6D:2A:43:90
Certificate issuer:       /CN=0b58c921cb3e9c81ddc316ff039cb9c36d2a4390
Certificate serial:       0196C98526BE1D33568FE0C771E1563D43E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C1jJIcs-nIHdwxb_A5y5w20qQ5A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.mft
Manifest number:          0568
Signing time:             Tue 13 May 2025 12:01:08 +0000
Manifest this update:     Tue 13 May 2025 12:01:08 +0000
Manifest next update:     Wed 14 May 2025 12:01:08 +0000
Files and hashes:         1: C1jJIcs-nIHdwxb_A5y5w20qQ5A.crl (hash: OHlxoKq+WaL3CgUSMhLU1dPtvzh319+o/YnTCGcMoDQ=)
                          2: dy6V06G8CC2FK34EGVuxtzegKH4.roa (hash: gPhDzrN8RIm6TShQaGb5YzX92bCG0Thu0kMn08thu4Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C1jJIcs-nIHdwxb_A5y5w20qQ5A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 12:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c9:85:26:be:1d:33:56:8f:e0:c7:71:e1:56:3d:43:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b58c921cb3e9c81ddc316ff039cb9c36d2a4390
        Validity
            Not Before: May 13 12:01:08 2025 GMT
            Not After : May 14 12:01:08 2025 GMT
        Subject: CN=fc5cfc52df876cb2ac6e5601b2eaedde2ad31d9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b7:66:94:bb:3a:ba:45:e5:55:71:36:90:e9:
                    be:3b:a5:16:c4:ad:07:09:f1:ef:17:7b:fb:4e:50:
                    7c:4c:15:64:7c:2b:7b:ae:b3:ab:60:88:60:8f:b7:
                    df:e9:13:dd:eb:86:a6:96:2b:27:0b:b5:4d:0f:f4:
                    3c:f6:36:0c:c4:2e:4f:e9:38:04:01:66:07:40:c5:
                    ab:51:6b:b2:92:5f:15:d4:9c:27:ac:c6:eb:e1:e5:
                    cf:07:54:f5:77:3d:fa:2b:f0:be:f3:74:04:d8:68:
                    c6:19:2f:a8:8b:be:d9:55:f6:eb:ff:96:fc:b5:38:
                    56:86:6a:37:a7:41:83:5c:2d:9c:fc:60:71:5e:d8:
                    9b:79:c4:b2:38:c9:7b:bf:6e:07:0e:92:f9:44:6c:
                    0c:7f:cc:de:c7:e0:50:c3:d4:85:52:5d:0b:6a:56:
                    10:64:79:3e:90:b7:fd:d9:2c:8a:8c:ca:d1:69:08:
                    2f:43:22:ad:10:b0:a4:c3:15:38:11:f8:97:e8:38:
                    a5:a0:01:48:04:74:ef:0f:c5:e5:77:6c:a5:14:17:
                    6f:23:c8:69:30:c1:e6:53:92:d5:49:5d:55:c4:07:
                    23:8c:5e:f6:43:e1:6a:c9:e1:fd:74:45:e9:f4:0c:
                    dd:88:ac:26:59:2d:f5:c1:6e:ba:32:2d:08:25:06:
                    f8:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:5C:FC:52:DF:87:6C:B2:AC:6E:56:01:B2:EA:ED:DE:2A:D3:1D:9B
            X509v3 Authority Key Identifier:
                keyid:0B:58:C9:21:CB:3E:9C:81:DD:C3:16:FF:03:9C:B9:C3:6D:2A:43:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1jJIcs-nIHdwxb_A5y5w20qQ5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:0a:75:51:2b:02:57:27:b9:1c:bf:4a:bb:7d:f1:63:88:42:
         48:17:b0:60:5a:08:c4:17:ab:32:bb:55:ab:80:95:ec:4f:c0:
         0a:3a:cc:05:c2:e2:9f:05:0c:2e:a3:33:a4:b5:98:54:64:ca:
         ef:af:03:2d:25:c1:45:ac:48:3b:e1:34:66:2b:e0:ae:59:91:
         78:1e:31:a9:c8:0a:49:60:91:80:39:7f:f4:82:c1:7f:b3:01:
         d7:7b:73:31:e9:df:17:63:95:20:b1:68:1b:8f:5b:c3:de:04:
         c9:4a:86:58:ce:87:4c:6e:e1:4e:19:14:e0:9f:42:34:91:73:
         b1:06:df:1c:a8:44:7f:6d:1e:4d:71:6d:f5:7a:39:2f:58:97:
         1b:40:ae:e7:67:cd:7c:f0:b7:74:ab:61:5b:b4:86:90:0c:0a:
         60:ea:1a:1f:7e:fd:4b:3b:48:d2:6a:05:ad:2d:08:67:d7:57:
         59:a8:69:96:31:f3:19:a8:31:50:10:93:35:82:96:4f:50:fb:
         14:69:91:2e:a8:66:b4:7b:29:c5:d3:b1:0e:86:62:db:52:d9:
         90:47:a5:7b:3f:9a:f0:55:23:34:8e:6d:8b:40:de:ce:48:b7:
         d7:6f:ce:5b:14:71:5e:95:08:d0:07:8c:10:b7:c6:90:7d:bc:
         4c:35:b9:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 21:25:27 2025 by rpki-client