Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.mft
File:                     4ndTjewu_NLxHMY3GX0dmm_a6dk.mft (raw, json)
Hash identifier:          vz0VhCwN5FG7a6n4yZpdjNL3vQkn3yqqGGNGshUT4vA=
Subject key identifier:   5C:72:DB:D4:ED:2B:74:A8:A7:B1:7A:B5:F6:EA:3E:11:87:33:2D:82
Authority key identifier: E2:77:53:8D:EC:2E:FC:D2:F1:1C:C6:37:19:7D:1D:9A:6F:DA:E9:D9
Certificate issuer:       /CN=e277538dec2efcd2f11cc637197d1d9a6fdae9d9
Certificate serial:       0196AE0D73614DCE7BC02972D88EF7FF8558
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4ndTjewu_NLxHMY3GX0dmm_a6dk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.mft
Manifest number:          11E0
Signing time:             Thu 08 May 2025 04:00:39 +0000
Manifest this update:     Thu 08 May 2025 04:00:39 +0000
Manifest next update:     Fri 09 May 2025 04:00:39 +0000
Files and hashes:         1: 4ndTjewu_NLxHMY3GX0dmm_a6dk.crl (hash: zGURW8rKG/6nDlfow/whwbrNgODioJaVDVMhi8L3tas=)
                          2: Yc_s1uEQU3LAE6G4fkBk8Gok6CI.roa (hash: fdoGqzcyq0doKgpvX55kY45aKOwDTDyxb1UE8P+KUuU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4ndTjewu_NLxHMY3GX0dmm_a6dk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 20:38:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ae:0d:73:61:4d:ce:7b:c0:29:72:d8:8e:f7:ff:85:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e277538dec2efcd2f11cc637197d1d9a6fdae9d9
        Validity
            Not Before: May  8 04:00:39 2025 GMT
            Not After : May  9 04:00:39 2025 GMT
        Subject: CN=5c72dbd4ed2b74a8a7b17ab5f6ea3e1187332d82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:48:6a:72:9b:b0:a3:cf:57:21:d0:ab:2e:8b:
                    d1:0e:02:3b:e0:95:5a:e1:bd:f6:49:50:46:a3:25:
                    29:14:32:bb:82:d6:98:fe:04:2d:a4:07:78:48:1d:
                    f0:2a:fd:bb:6a:ce:57:34:49:69:fd:e2:77:2c:bb:
                    7e:8e:f7:45:95:b8:a4:21:9c:49:26:96:2d:54:10:
                    a9:33:8b:45:ff:85:e8:c7:eb:ef:f2:16:5c:fb:54:
                    ee:a0:d4:9a:f9:61:9d:79:b8:14:3e:49:0c:72:5b:
                    f7:75:6a:8d:c2:da:58:ea:c3:40:3d:e0:b5:ac:49:
                    18:74:af:36:e5:17:be:0b:84:2f:e0:c9:bf:5a:11:
                    c4:c6:13:1e:c0:f6:e7:43:ba:45:9d:f1:7e:7b:0d:
                    10:06:f7:88:b0:17:71:65:49:a3:c7:05:43:97:77:
                    aa:7e:a4:9f:c2:01:5a:51:53:e5:fb:b1:bb:02:52:
                    c7:45:82:a2:27:57:19:a6:4c:1e:93:4d:f0:a9:6e:
                    94:a1:cb:88:af:37:6f:b0:6f:b6:f2:42:9e:39:67:
                    60:be:81:2f:c5:7c:74:46:df:20:27:d8:03:46:6d:
                    b8:5e:e4:30:cb:a7:d1:f6:0d:4e:0a:d0:48:ca:9f:
                    c5:7f:8b:77:38:41:ab:79:22:a7:46:6c:c6:fc:2b:
                    9f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:72:DB:D4:ED:2B:74:A8:A7:B1:7A:B5:F6:EA:3E:11:87:33:2D:82
            X509v3 Authority Key Identifier:
                keyid:E2:77:53:8D:EC:2E:FC:D2:F1:1C:C6:37:19:7D:1D:9A:6F:DA:E9:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ndTjewu_NLxHMY3GX0dmm_a6dk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:f2:60:95:2d:bc:27:9c:e0:cb:60:14:0e:cb:62:0d:07:e8:
         d8:22:77:c1:f9:d0:a9:dc:8a:c8:df:ac:57:bf:0a:4a:5f:be:
         2e:4e:38:2a:a1:f9:b7:8e:b8:5b:02:24:a6:76:41:30:4d:e8:
         e7:36:08:a9:8c:87:dd:38:82:27:53:7c:83:ed:f9:35:02:00:
         b4:d9:1d:1b:ef:d2:47:5c:85:64:5d:d0:fe:c4:5f:61:0a:00:
         8b:d0:08:c8:1d:6c:cc:e6:9b:34:27:b5:c5:f9:1f:98:b1:66:
         2f:8a:eb:3c:b0:0b:67:17:49:d3:26:d3:49:b3:f4:32:55:d4:
         62:a2:ae:69:0c:ae:27:f6:05:35:ef:e1:f7:68:38:00:7c:75:
         67:f7:15:40:97:39:2e:ad:89:41:0a:0c:a4:44:9f:be:6a:fb:
         ef:13:a7:6b:32:0f:1f:d5:cb:07:21:a3:2e:30:df:92:c4:5f:
         f4:b8:79:67:f5:99:d2:b1:33:89:0f:36:99:2a:67:e8:e9:d0:
         0c:a7:c3:0e:6a:e6:17:1c:37:32:b4:2b:34:42:3e:51:24:b8:
         aa:42:19:85:1e:55:6a:d5:8d:d2:6f:50:6b:ca:01:9b:aa:4d:
         26:2e:65:a3:a5:26:81:09:e2:40:31:56:da:be:99:cf:fa:92:
         bb:d5:b7:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 06:39:19 2025 by rpki-client