Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/_RGW2Y3s046wP18GtI5VbHTyMfQ.mft
File:                     _RGW2Y3s046wP18GtI5VbHTyMfQ.mft (raw, json)
Hash identifier:          hVQukfPBFXM7HQZlcNVJ7FrKaXhF+LVo0AhnWa+T7Zs=
Subject key identifier:   E3:53:E5:B8:7B:1A:FE:A6:DA:86:E1:69:B6:98:46:D3:4B:95:7A:62
Authority key identifier: FD:11:96:D9:8D:EC:D3:8E:B0:3F:5F:06:B4:8E:55:6C:74:F2:31:F4
Certificate issuer:       /CN=fd1196d98decd38eb03f5f06b48e556c74f231f4
Certificate serial:       0196BD80C0AFD98F0B4B8B6384A761752BE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_RGW2Y3s046wP18GtI5VbHTyMfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/_RGW2Y3s046wP18GtI5VbHTyMfQ.mft
Manifest number:          1132
Signing time:             Sun 11 May 2025 04:00:53 +0000
Manifest this update:     Sun 11 May 2025 04:00:53 +0000
Manifest next update:     Mon 12 May 2025 04:00:53 +0000
Files and hashes:         1: 27FHmyzi6Se6krMAx8iyaZkkui4.roa (hash: hxU0+n4GJmSaVALTik02VPB85RwSKnzwnJh1oS8Qx2Y=)
                          2: Vt65vwu21Gw3Ig_WCeQCArrV49M.roa (hash: JhPPfXj32nubKkCUS1s8L7cjVu7ayJ+kkjBpXd9CNao=)
                          3: _RGW2Y3s046wP18GtI5VbHTyMfQ.crl (hash: 1plcouba+qhlmYr/SDJMsBWlfra7pIUoQuJ3iYp3ggw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/_RGW2Y3s046wP18GtI5VbHTyMfQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/_RGW2Y3s046wP18GtI5VbHTyMfQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_RGW2Y3s046wP18GtI5VbHTyMfQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 04:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bd:80:c0:af:d9:8f:0b:4b:8b:63:84:a7:61:75:2b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd1196d98decd38eb03f5f06b48e556c74f231f4
        Validity
            Not Before: May 11 04:00:53 2025 GMT
            Not After : May 12 04:00:53 2025 GMT
        Subject: CN=e353e5b87b1afea6da86e169b69846d34b957a62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:4c:e2:9b:68:f7:a2:c9:c8:91:c8:9e:4e:cf:
                    d4:fa:94:fe:03:4d:25:55:d7:1c:a1:0d:2d:9c:6d:
                    06:80:1f:5a:94:9c:93:aa:87:91:50:7d:fe:f0:f5:
                    60:ae:46:42:78:05:c2:63:61:81:03:24:fd:da:1d:
                    06:a4:9c:36:de:0b:8f:9c:8c:59:75:75:11:61:a0:
                    c9:38:07:ff:1a:c4:f2:da:99:6f:35:3b:7b:3d:5d:
                    f0:ed:08:f6:c5:b5:ad:79:85:25:71:53:b0:14:29:
                    25:d7:99:3e:a3:66:fc:61:2a:15:03:68:bb:6b:cd:
                    e8:fe:3d:2a:ce:8a:e0:e5:5f:cd:b9:b5:3b:05:68:
                    12:46:34:15:97:bd:db:d2:0a:51:c5:50:99:c3:e9:
                    99:ff:30:87:99:6d:b8:30:e4:b1:29:58:64:0d:03:
                    90:97:90:c5:7a:3e:8e:6d:62:d5:5d:fc:f1:6a:f6:
                    22:65:c0:28:99:47:71:18:18:7b:9f:00:cd:27:f1:
                    6d:ce:f3:35:54:1e:7a:d3:19:89:6e:09:c2:2c:b5:
                    82:dd:b5:d3:dd:97:ce:fc:73:df:44:9a:92:a2:3d:
                    d4:65:b6:5b:31:4a:05:21:21:c6:d3:f9:ec:5c:3a:
                    5a:ac:fb:48:2c:dd:b2:1c:88:35:a7:59:75:cb:64:
                    1c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:53:E5:B8:7B:1A:FE:A6:DA:86:E1:69:B6:98:46:D3:4B:95:7A:62
            X509v3 Authority Key Identifier:
                keyid:FD:11:96:D9:8D:EC:D3:8E:B0:3F:5F:06:B4:8E:55:6C:74:F2:31:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_RGW2Y3s046wP18GtI5VbHTyMfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/_RGW2Y3s046wP18GtI5VbHTyMfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/_RGW2Y3s046wP18GtI5VbHTyMfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:3f:43:6a:07:d4:86:11:49:e5:29:b2:54:c9:92:f7:78:4c:
         0d:01:5f:b5:5e:78:01:9d:20:f5:d5:7e:89:8e:52:26:de:b8:
         80:12:d3:c2:06:08:0b:17:ad:45:09:33:64:83:81:16:4c:f2:
         19:91:0a:6f:77:ea:08:bc:f8:52:50:44:96:55:fb:db:53:b0:
         66:27:f1:ba:57:c0:7e:b0:0d:7d:db:50:07:51:83:18:f2:01:
         40:4c:b7:82:1f:99:5f:29:ce:c3:4b:18:8b:07:74:db:5e:95:
         9a:a0:63:33:eb:e6:60:6b:c5:dc:92:ea:03:99:a3:e3:c0:ec:
         7e:b2:55:fe:27:fe:d1:63:4a:19:23:d0:65:c3:3a:8a:24:ce:
         29:6e:0c:0d:d6:e3:e4:63:ca:a5:d8:1a:0f:f9:82:d0:5f:f4:
         69:8f:71:f9:97:05:c2:79:2d:2a:2e:5a:6f:ad:06:0a:2a:64:
         75:dd:a2:78:cf:c4:87:ed:43:6d:93:bf:17:c2:a8:01:cc:c0:
         be:ce:d9:ca:a9:76:cf:fe:30:17:ff:86:0a:ae:cf:90:61:fc:
         ee:5b:52:ac:0a:de:86:eb:f2:49:a8:b5:cc:ed:0f:48:1d:8f:
         18:ee:49:5f:f7:27:bd:6c:38:df:52:5c:43:6f:af:e7:bc:0c:
         f9:7a:9f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:29:20 2025 by rpki-client