Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/91101c-3437-4f3c-b120-752c933639e5/1/ddUf2ReUrgygfzkwcw0Gmqwbku0.mft
File:                     ddUf2ReUrgygfzkwcw0Gmqwbku0.mft (raw, json)
Hash identifier:          NyenTNr4QbUnXFG9zwaVoUQg8nlWcjx4Zxje05F9MKM=
Subject key identifier:   F6:95:5F:F9:50:DB:6D:4F:96:F8:D2:C5:F7:D3:45:01:41:46:2C:5E
Authority key identifier: 75:D5:1F:D9:17:94:AE:0C:A0:7F:39:30:73:0D:06:9A:AC:1B:92:ED
Certificate issuer:       /CN=75d51fd91794ae0ca07f3930730d069aac1b92ed
Certificate serial:       0196CB730EC7ED01520B76E81B5D1F74BC40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ddUf2ReUrgygfzkwcw0Gmqwbku0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/91101c-3437-4f3c-b120-752c933639e5/1/ddUf2ReUrgygfzkwcw0Gmqwbku0.mft
Manifest number:          78
Signing time:             Tue 13 May 2025 21:00:37 +0000
Manifest this update:     Tue 13 May 2025 21:00:37 +0000
Manifest next update:     Wed 14 May 2025 21:00:37 +0000
Files and hashes:         1: ddUf2ReUrgygfzkwcw0Gmqwbku0.crl (hash: Q9/UJ+C+CChKjJrglA3eStuNxqimeWqWT66Ma9yej6A=)
                          2: ggnUuCiiw5KDxP7VC2MuE-m18jg.roa (hash: hCPwze5ka3HW9b6kkZEr86kyUHzmDg3+6W3Ek9YCVgo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/91101c-3437-4f3c-b120-752c933639e5/1/ddUf2ReUrgygfzkwcw0Gmqwbku0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/91101c-3437-4f3c-b120-752c933639e5/1/ddUf2ReUrgygfzkwcw0Gmqwbku0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ddUf2ReUrgygfzkwcw0Gmqwbku0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 14:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cb:73:0e:c7:ed:01:52:0b:76:e8:1b:5d:1f:74:bc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75d51fd91794ae0ca07f3930730d069aac1b92ed
        Validity
            Not Before: May 13 21:00:37 2025 GMT
            Not After : May 14 21:00:37 2025 GMT
        Subject: CN=f6955ff950db6d4f96f8d2c5f7d3450141462c5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:06:9a:3f:48:41:f3:65:d8:1a:ba:ab:ee:88:
                    37:9c:19:f4:51:73:6a:c8:ce:d4:5d:aa:68:ef:d7:
                    e8:c4:f9:9c:20:82:b3:b2:8f:f6:15:82:d4:35:e6:
                    84:c6:6f:5d:6d:52:12:7b:ca:79:3a:f8:83:fe:c7:
                    42:26:24:70:ba:92:e7:91:c5:a4:e0:2c:a1:44:cd:
                    0a:b1:14:69:02:48:b0:c6:54:14:54:d3:bd:54:6c:
                    a0:e9:f7:51:8a:03:4c:85:d1:a7:05:ea:c0:c0:0e:
                    0e:23:01:7e:ca:ed:79:9b:63:bb:c5:6d:af:4c:fb:
                    ee:37:5a:a4:d2:72:ef:96:1c:fe:6c:06:3f:51:dd:
                    b1:48:a8:13:fd:20:dc:b0:c3:e3:71:42:55:ca:60:
                    13:09:fe:af:dc:89:6c:c9:30:cf:d6:a8:bd:9f:eb:
                    23:75:9c:24:b4:9a:74:6e:6d:ee:7c:93:f9:61:14:
                    ed:76:81:7b:d8:78:9f:4c:02:03:50:e3:d1:d1:2f:
                    6d:40:c5:27:65:3e:c0:26:f1:2e:e8:bd:82:a5:2b:
                    35:e0:a5:83:16:b4:d5:8c:f6:89:2a:6f:36:a9:2b:
                    42:35:e3:11:38:6e:11:ee:78:13:4a:9e:f9:35:b4:
                    3a:06:99:c6:4d:cb:14:1b:f2:e9:71:5a:06:8b:52:
                    b2:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:95:5F:F9:50:DB:6D:4F:96:F8:D2:C5:F7:D3:45:01:41:46:2C:5E
            X509v3 Authority Key Identifier:
                keyid:75:D5:1F:D9:17:94:AE:0C:A0:7F:39:30:73:0D:06:9A:AC:1B:92:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddUf2ReUrgygfzkwcw0Gmqwbku0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/91101c-3437-4f3c-b120-752c933639e5/1/ddUf2ReUrgygfzkwcw0Gmqwbku0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/91101c-3437-4f3c-b120-752c933639e5/1/ddUf2ReUrgygfzkwcw0Gmqwbku0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:eb:eb:1f:c3:22:80:dd:69:a1:f7:21:30:03:00:dd:dc:f3:
         02:83:e3:bf:ad:7a:68:f6:88:06:43:5b:51:96:19:83:b6:70:
         77:9e:98:d5:28:6a:81:55:cd:9f:08:1c:56:ca:d5:f6:7f:5e:
         1e:25:eb:a1:21:54:49:41:c3:db:52:fa:d0:74:7c:2d:17:ff:
         8c:e0:5f:03:f9:ef:ea:f1:3d:18:be:cb:2b:62:0c:03:8e:ea:
         e8:a8:f6:f9:d2:7f:05:98:a2:c5:75:4f:b3:c5:c6:93:19:b6:
         93:62:ff:3b:a3:0a:c3:a3:f4:77:11:d0:ed:af:82:9b:be:f7:
         7b:4d:0a:09:2e:33:c4:98:eb:9f:91:9b:72:7b:ec:bb:b9:2e:
         1a:72:2b:43:dd:df:c5:4f:0b:bf:65:6a:a1:b3:5e:58:21:55:
         a6:ae:78:f4:1f:00:bb:97:b2:f8:97:87:d0:be:91:d6:43:91:
         20:00:de:04:d2:e7:26:87:e4:25:2b:12:51:6a:40:29:9f:6c:
         db:0e:95:9f:2e:88:ce:7f:6a:74:8b:47:58:fd:6a:55:0b:de:
         22:87:ed:81:bb:3f:87:e4:b6:d0:45:d4:3a:b9:cd:07:c9:c2:
         66:23:9c:dc:1f:42:cd:ba:d7:58:48:95:05:c4:f0:a5:4c:8e:
         79:62:ad:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 00:01:07 2025 by rpki-client