Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/g103QIoiXxqJZPjXK8mdm75TMjQ.mft
File:                     g103QIoiXxqJZPjXK8mdm75TMjQ.mft (raw, json)
Hash identifier:          GV7uWi/oNftw+EZPF32XueykDf8bN1pMtZEI9qNAtIY=
Subject key identifier:   7D:1D:2C:C5:AE:C2:95:50:8F:D9:B6:5C:76:D5:DF:A0:07:8D:26:12
Authority key identifier: 83:5D:37:40:8A:22:5F:1A:89:64:F8:D7:2B:C9:9D:9B:BE:53:32:34
Certificate issuer:       /CN=835d37408a225f1a8964f8d72bc99d9bbe533234
Certificate serial:       0196C15D41AAB39AF4B775EBDD04B4079172
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g103QIoiXxqJZPjXK8mdm75TMjQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/g103QIoiXxqJZPjXK8mdm75TMjQ.mft
Manifest number:          1506
Signing time:             Sun 11 May 2025 22:00:36 +0000
Manifest this update:     Sun 11 May 2025 22:00:36 +0000
Manifest next update:     Mon 12 May 2025 22:00:36 +0000
Files and hashes:         1: g103QIoiXxqJZPjXK8mdm75TMjQ.crl (hash: CMPJwc3pSNEosLjDKKqUy2ONfhD5Mkb7A30FfvjsMpo=)
                          2: wmXlcNkh_2vesQLMJed5vd6SqTE.roa (hash: yFr4o4FxK8GJrbTrCTeUvkik35biGf8xB3yfWuA7Ue8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/g103QIoiXxqJZPjXK8mdm75TMjQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/g103QIoiXxqJZPjXK8mdm75TMjQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g103QIoiXxqJZPjXK8mdm75TMjQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c1:5d:41:aa:b3:9a:f4:b7:75:eb:dd:04:b4:07:91:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835d37408a225f1a8964f8d72bc99d9bbe533234
        Validity
            Not Before: May 11 22:00:36 2025 GMT
            Not After : May 12 22:00:36 2025 GMT
        Subject: CN=7d1d2cc5aec295508fd9b65c76d5dfa0078d2612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:81:6a:93:4b:5e:5c:73:aa:43:e0:18:10:7f:
                    48:79:48:ec:76:8c:38:b7:6a:e8:1d:05:9b:8a:3a:
                    46:2d:ea:0c:7a:99:2f:56:d9:43:f3:de:5e:55:e0:
                    d3:60:52:98:c4:6a:bb:a0:81:81:f4:f3:bc:db:15:
                    9d:46:df:e7:c0:45:c1:e9:6a:a2:42:15:b3:2d:77:
                    1f:6b:77:d3:b7:b9:17:4e:9e:95:a3:0a:de:1f:9d:
                    a9:a1:6f:50:93:23:20:bb:86:ac:c4:b5:e5:d1:00:
                    8c:15:5f:ca:f2:dd:64:e3:a9:27:7c:df:19:5b:a8:
                    d1:e5:b7:69:71:1e:9f:28:0d:e3:f9:18:ad:88:7e:
                    9f:d1:ec:c7:01:62:f5:2d:a3:ed:91:db:1e:81:e3:
                    0d:ce:07:9f:fc:bf:c7:63:91:35:0b:24:eb:c9:bd:
                    6a:68:f7:16:82:97:de:43:93:62:57:00:db:bb:11:
                    01:f6:b2:27:32:d8:84:8f:10:96:1e:14:33:93:8f:
                    93:0e:a5:6b:e7:53:73:fb:bc:71:83:a9:2a:6d:32:
                    60:ce:f3:99:1c:d3:03:0e:b9:f8:d7:83:67:99:a2:
                    ce:d7:3b:f6:3b:8e:60:3a:ba:0c:f6:42:ba:82:f5:
                    8a:19:ed:83:44:ea:06:29:8e:30:dc:ab:4a:0b:b5:
                    b3:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:1D:2C:C5:AE:C2:95:50:8F:D9:B6:5C:76:D5:DF:A0:07:8D:26:12
            X509v3 Authority Key Identifier:
                keyid:83:5D:37:40:8A:22:5F:1A:89:64:F8:D7:2B:C9:9D:9B:BE:53:32:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g103QIoiXxqJZPjXK8mdm75TMjQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/g103QIoiXxqJZPjXK8mdm75TMjQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/g103QIoiXxqJZPjXK8mdm75TMjQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:1d:cc:43:e8:7c:cb:a9:74:4f:79:29:ad:0c:b0:70:ab:57:
         70:6c:72:9a:e6:04:5e:61:2c:9e:b9:a9:54:6e:db:78:58:02:
         c4:6b:ae:27:94:95:8c:87:99:b9:b9:6e:2e:a0:23:ac:08:6b:
         10:cb:5e:f5:ed:2d:90:41:80:3e:fb:4d:d6:f6:56:a6:35:a4:
         19:07:5d:04:24:4b:79:39:4e:b6:4c:ad:16:1e:d1:be:53:c2:
         03:68:95:70:6e:de:c0:2b:24:32:6e:a1:c8:5c:0a:e2:65:ec:
         8a:13:90:7e:67:2f:9f:e5:ac:f1:de:b2:5f:f2:0a:e4:e3:9b:
         63:2f:7b:ea:1c:e4:fe:cd:ec:d5:59:47:63:6f:a2:bd:29:68:
         f9:9e:95:b9:95:de:17:1d:e1:0c:c9:d8:c4:28:ac:50:4e:93:
         37:a6:8d:4b:85:cf:57:9d:0d:71:54:ed:b0:f9:db:63:ad:21:
         f9:d8:37:d4:43:95:7a:12:6a:b3:35:66:4f:d5:44:64:3e:2e:
         4e:ad:cc:5c:32:e6:90:06:4d:f7:fc:a0:97:f0:9a:eb:cf:09:
         e9:4a:2a:00:3a:25:ef:83:ab:ce:0f:c1:20:c2:ee:8e:d4:f2:
         a1:96:2d:c5:4b:b2:f0:c3:a2:dd:10:ab:de:54:62:ed:79:3e:
         28:d7:f4:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 00:15:47 2025 by rpki-client