Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.mft
File:                     zGB34ATojv-PE7d0DfJU2eSN1XQ.mft (raw, json)
Hash identifier:          Kg44g1hYDhCPJc5f45NKw2bf1PqBX0Kp3Xpc6B6Lw5w=
Subject key identifier:   A2:FA:36:5B:67:71:16:91:8D:1A:5E:C2:C6:A5:D5:8F:EB:2E:A5:FB
Authority key identifier: CC:60:77:E0:04:E8:8E:FF:8F:13:B7:74:0D:F2:54:D9:E4:8D:D5:74
Certificate issuer:       /CN=cc6077e004e88eff8f13b7740df254d9e48dd574
Certificate serial:       0196C570B897F82FAC378B4B7CE1050D0710
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.mft
Manifest number:          153C
Signing time:             Mon 12 May 2025 17:00:20 +0000
Manifest this update:     Mon 12 May 2025 17:00:20 +0000
Manifest next update:     Tue 13 May 2025 17:00:20 +0000
Files and hashes:         1: VeyJDEEty7IaphGW3rZRjoHUojg.roa (hash: nlnkQXVcXOy604OjeWWR6cJfH3A2u1gS0XEnkUUPxgU=)
                          2: ZJT0zr7m2y5wt4gW9bKEzmGI1ow.roa (hash: G77N1gA2nJ38QCQzMuuTUjtsbNVh+2EuSfRtrFna6jE=)
                          3: grKIm7Lo2eZE2vteQMGt4oHjtOE.roa (hash: 2kq2MqRQm4HSGsYIQVdRn5p0QWWgpGXBFjPu/GSW7ak=)
                          4: zGB34ATojv-PE7d0DfJU2eSN1XQ.crl (hash: 7DFBCMA5hUPScC4yhEB8yvH6rCBzCgpx9uAWtpXsfz0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 14:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c5:70:b8:97:f8:2f:ac:37:8b:4b:7c:e1:05:0d:07:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc6077e004e88eff8f13b7740df254d9e48dd574
        Validity
            Not Before: May 12 17:00:20 2025 GMT
            Not After : May 13 17:00:20 2025 GMT
        Subject: CN=a2fa365b677116918d1a5ec2c6a5d58feb2ea5fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:43:5f:c2:76:aa:da:2a:34:fa:0f:8e:e3:84:
                    80:a3:1a:37:11:23:5d:a1:03:9a:07:18:4f:00:4f:
                    57:69:21:1c:b4:fb:49:5e:6a:02:ac:85:13:15:63:
                    63:27:f1:23:c2:ee:be:b9:82:05:76:30:97:18:79:
                    1a:b7:15:01:38:b0:5f:58:16:0c:f8:5c:cc:c0:26:
                    59:1e:48:41:dd:32:23:43:7a:1d:29:82:4b:97:77:
                    b5:a9:74:12:b8:5b:03:9c:e5:6a:2c:3d:00:89:c2:
                    d8:ca:f9:82:ec:6d:dd:fa:75:20:0d:7b:5b:f4:76:
                    58:9f:8b:41:b9:8a:92:57:16:23:10:54:ff:1e:59:
                    67:71:d5:95:ca:35:e8:a9:dc:2b:99:91:02:c8:2d:
                    2b:16:a7:6d:ab:2d:36:df:1c:61:81:e1:04:cd:88:
                    9a:ff:e1:56:50:54:dc:d7:13:63:7f:0b:ce:db:c4:
                    69:e6:68:63:15:6c:17:17:ce:f7:81:92:82:cd:ce:
                    b7:c5:9b:a8:f4:d4:b2:87:7e:18:18:4e:26:fd:95:
                    b7:34:01:12:23:b3:ee:26:3b:8f:0e:e5:da:0d:a3:
                    c0:d5:3a:b4:35:a7:d2:f6:fb:be:86:21:24:d9:0b:
                    50:a1:0a:ee:36:6b:d8:1b:43:c2:88:79:ab:aa:dc:
                    af:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:FA:36:5B:67:71:16:91:8D:1A:5E:C2:C6:A5:D5:8F:EB:2E:A5:FB
            X509v3 Authority Key Identifier:
                keyid:CC:60:77:E0:04:E8:8E:FF:8F:13:B7:74:0D:F2:54:D9:E4:8D:D5:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:e0:f9:ab:48:af:fa:6e:97:31:23:2e:85:f3:bc:19:74:8d:
         16:8b:b3:11:2c:ec:4e:0c:26:95:2f:ce:06:f7:9d:4a:a7:0c:
         da:f4:59:e1:64:ec:3c:9a:d6:e2:ca:1a:a2:9e:58:b7:ad:88:
         f0:30:64:16:c1:02:cf:8e:e2:a7:a5:4b:a2:59:82:7f:55:5a:
         ed:13:02:b2:bd:d2:16:5b:e7:be:fb:df:db:20:6f:9d:cf:40:
         ba:30:31:7f:41:52:1d:a3:c3:7d:02:a2:78:5f:c0:63:7e:e7:
         1e:34:c1:3e:7e:6a:96:cf:fb:16:58:cb:a1:a6:ac:fc:34:73:
         2a:da:4a:b4:6c:0f:80:bf:20:92:1d:87:50:93:df:79:c7:a7:
         0f:f9:55:d0:42:31:6e:52:76:d8:f6:c0:20:e6:b1:8e:76:88:
         a0:85:0d:51:19:8c:f2:b7:40:59:ad:1d:3f:0e:e3:a2:2b:6f:
         3d:e4:ea:40:3a:b6:bc:1f:ed:32:41:2d:36:f0:4b:16:11:54:
         19:ff:4f:35:bd:4d:24:1f:c1:b1:ce:42:d6:be:56:a2:17:ce:
         82:66:6b:56:48:02:40:50:38:94:38:4d:8d:02:ce:69:65:6a:
         05:12:2e:b7:65:9b:da:d8:1e:a6:86:19:e5:6c:7e:2f:c8:a7:
         1f:7a:b8:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:21:09 2025 by rpki-client