Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/84a85e-ad49-4c63-ab59-ab7b0aa1c3d4/1/MeZZHRoE1q_h7V9O0B05SuUUhYk.mft
File:                     MeZZHRoE1q_h7V9O0B05SuUUhYk.mft (raw, json)
Hash identifier:          CVg3LmI82S7B2JVxAsg1ErMvWDj655F/621KpuJg3kE=
Subject key identifier:   62:6D:2A:91:59:F7:17:08:45:94:77:E1:E6:7F:90:29:CC:46:E9:EB
Authority key identifier: 31:E6:59:1D:1A:04:D6:AF:E1:ED:5F:4E:D0:1D:39:4A:E5:14:85:89
Certificate issuer:       /CN=31e6591d1a04d6afe1ed5f4ed01d394ae5148589
Certificate serial:       0196BFA579A651A011778429B8014BC1C0C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MeZZHRoE1q_h7V9O0B05SuUUhYk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/84a85e-ad49-4c63-ab59-ab7b0aa1c3d4/1/MeZZHRoE1q_h7V9O0B05SuUUhYk.mft
Manifest number:          0530
Signing time:             Sun 11 May 2025 14:00:14 +0000
Manifest this update:     Sun 11 May 2025 14:00:14 +0000
Manifest next update:     Mon 12 May 2025 14:00:14 +0000
Files and hashes:         1: JhwNwII4YOfneNhA5yI11PtA4Rk.roa (hash: xDvSQcwSJJU3/GnqEWqCRE4KK2ZXksvwiDHhnfKzQ7A=)
                          2: MeZZHRoE1q_h7V9O0B05SuUUhYk.crl (hash: LC9t0fUgl98CuDinOKmwPm0zQTIFjloOtqgN9lYmjvI=)
                          3: NJKcRgijhXh37gGjWUXBc4kdFrM.roa (hash: VgH49H33jw2zh7xceu9DxV5517h/9Lf09S+uqXMzIIo=)
                          4: fhtC19QCvGdf0Oc_EeWcXSC0cgs.roa (hash: W3l2bfxo/nDFx3boBX/Qrxp8uh2idkRpvnrRaDUWAME=)
                          5: l-1-sJYhOvDnP0vt97ZEE8EG64Y.roa (hash: a9IJZav4U9lQV/r8RFyllgV9eyE4dU00VcjenG9YGbw=)
                          6: yL32EH6JFTrCOhK8RiGGmgov4oE.roa (hash: cEac+CHXj7CTP1r+Y4KLas1tMJqLekECb13nf0gmkms=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/84a85e-ad49-4c63-ab59-ab7b0aa1c3d4/1/MeZZHRoE1q_h7V9O0B05SuUUhYk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/84a85e-ad49-4c63-ab59-ab7b0aa1c3d4/1/MeZZHRoE1q_h7V9O0B05SuUUhYk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MeZZHRoE1q_h7V9O0B05SuUUhYk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bf:a5:79:a6:51:a0:11:77:84:29:b8:01:4b:c1:c0:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31e6591d1a04d6afe1ed5f4ed01d394ae5148589
        Validity
            Not Before: May 11 14:00:14 2025 GMT
            Not After : May 12 14:00:14 2025 GMT
        Subject: CN=626d2a9159f71708459477e1e67f9029cc46e9eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ff:ad:95:63:c1:39:a9:32:96:5a:cb:54:30:
                    d6:81:5c:29:d2:c7:20:0d:40:92:bd:17:15:8d:a5:
                    85:32:ad:fb:7d:04:53:3d:ca:1b:25:b7:c0:f6:4c:
                    37:70:64:05:2a:83:e5:f6:70:50:8a:d4:d0:ee:25:
                    89:78:ca:ac:b5:e7:15:ab:6c:5e:86:43:7e:59:05:
                    8f:6d:16:69:56:4f:ac:80:7d:13:f1:a1:85:9e:ae:
                    f9:a4:98:50:fa:5d:f8:4c:23:b5:c8:6a:90:bf:cd:
                    58:4d:07:ee:d3:ac:35:e7:b7:e3:ad:32:45:71:15:
                    c8:e6:f6:a2:a7:3d:2c:3c:95:58:b1:75:1b:33:fa:
                    38:38:82:03:d7:ab:c3:19:b5:b7:cb:2f:40:57:c2:
                    d1:6d:2e:33:db:a5:7a:6c:04:85:7b:c0:3f:ea:ef:
                    5b:d2:8b:d5:9e:ea:06:ad:be:51:01:7a:fe:be:24:
                    10:ee:f2:ed:c3:c3:29:8c:81:45:ac:56:79:c9:08:
                    84:d0:34:05:eb:c8:7a:31:cd:d8:b1:f4:44:ad:5c:
                    b4:04:bc:7a:e5:7c:bf:e6:bf:4d:92:be:e6:e6:fb:
                    52:07:52:f8:f9:1e:c9:de:1f:14:76:2d:b0:57:52:
                    39:30:d7:b2:3a:7a:10:a6:ad:54:27:33:98:45:20:
                    e8:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:6D:2A:91:59:F7:17:08:45:94:77:E1:E6:7F:90:29:CC:46:E9:EB
            X509v3 Authority Key Identifier:
                keyid:31:E6:59:1D:1A:04:D6:AF:E1:ED:5F:4E:D0:1D:39:4A:E5:14:85:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MeZZHRoE1q_h7V9O0B05SuUUhYk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/84a85e-ad49-4c63-ab59-ab7b0aa1c3d4/1/MeZZHRoE1q_h7V9O0B05SuUUhYk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/84a85e-ad49-4c63-ab59-ab7b0aa1c3d4/1/MeZZHRoE1q_h7V9O0B05SuUUhYk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:bd:48:2e:32:eb:4e:58:ab:2d:ff:64:1e:a1:0b:1d:78:60:
         27:60:91:e9:ce:c1:51:03:32:ae:6c:4e:af:e3:45:7d:57:53:
         f2:ef:d3:55:62:61:b2:cf:22:5a:5b:ed:cb:03:fd:a7:40:5d:
         01:18:f8:ee:1e:eb:ab:40:f1:65:bb:4d:4b:72:64:84:a1:83:
         9a:1a:e9:37:3b:6c:6b:ad:25:69:94:53:5e:d9:70:27:31:3f:
         31:ae:64:cf:c3:8f:b9:69:a7:fb:c3:2d:4b:cf:2d:fa:ff:f3:
         04:ac:7a:2b:2e:11:a3:9c:57:d3:4e:bd:22:20:fd:7c:59:6c:
         a7:f4:cb:92:59:b7:6e:4a:19:72:20:b7:8d:36:6b:bd:dc:ed:
         13:e7:9b:22:11:5a:f8:3d:d0:05:b8:e1:d8:20:59:d0:50:ea:
         67:11:bc:74:63:07:22:a2:6b:02:d0:cf:68:41:cd:5b:50:a6:
         b4:1d:d8:e7:65:04:b2:7b:01:ea:67:d5:e1:0f:f8:c5:ae:58:
         35:d9:59:3b:f3:b6:90:c1:92:99:84:b1:18:2e:df:bc:a1:53:
         2e:f8:3c:ae:27:42:0e:fd:5c:d7:72:ce:a1:9b:c0:47:dd:54:
         5c:37:28:43:f0:44:73:c5:51:20:c3:d2:49:c6:33:36:54:31:
         05:87:be:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 23:24:48 2025 by rpki-client