Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.mft
File:                     RvP5tB9FoPl7KmqBHKZ6BAKgR38.mft (raw, json)
Hash identifier:          CU1rA3vB9APLegbJvWQzrEqi9MTnSdl89q6Ztl59o5E=
Subject key identifier:   84:55:34:60:45:F5:CC:E5:35:46:0C:F6:85:D2:44:FD:68:6C:59:EA
Authority key identifier: 46:F3:F9:B4:1F:45:A0:F9:7B:2A:6A:81:1C:A6:7A:04:02:A0:47:7F
Certificate issuer:       /CN=46f3f9b41f45a0f97b2a6a811ca67a0402a0477f
Certificate serial:       0196AAD59233F0DBCC4F5E6BC22DFA35CB1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RvP5tB9FoPl7KmqBHKZ6BAKgR38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.mft
Manifest number:          0F25
Signing time:             Wed 07 May 2025 13:00:45 +0000
Manifest this update:     Wed 07 May 2025 13:00:45 +0000
Manifest next update:     Thu 08 May 2025 13:00:45 +0000
Files and hashes:         1: RvP5tB9FoPl7KmqBHKZ6BAKgR38.crl (hash: eggHQn/pBlX+xZgIRPzfo4UyC/t60iVX2i6Qt/emhCQ=)
                          2: mbYI3-hNPDwmapQzW6ANq2gKpA4.roa (hash: lOLT23JUefetUmb19vAU2x5VH7+ec+ZaMiJuuVxV7Oc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RvP5tB9FoPl7KmqBHKZ6BAKgR38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 13:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:aa:d5:92:33:f0:db:cc:4f:5e:6b:c2:2d:fa:35:cb:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46f3f9b41f45a0f97b2a6a811ca67a0402a0477f
        Validity
            Not Before: May  7 13:00:45 2025 GMT
            Not After : May  8 13:00:45 2025 GMT
        Subject: CN=8455346045f5cce535460cf685d244fd686c59ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e6:85:0e:bb:69:22:a4:ce:c4:21:cf:52:25:
                    0b:dc:93:45:2c:52:66:db:96:73:a5:63:fa:f0:b1:
                    2e:90:7f:12:fb:2e:5b:ad:b2:7d:11:21:c8:24:77:
                    79:32:d1:01:72:01:cc:06:27:62:5e:dc:9b:42:c1:
                    ec:5d:00:81:4a:85:ce:d8:91:f1:67:52:da:71:b3:
                    cf:2b:b9:60:35:7f:77:a7:43:93:86:2d:5d:a4:8c:
                    f3:41:c9:e0:2c:4e:c6:de:0a:40:f1:69:5d:36:9d:
                    e6:e5:29:f0:d2:4e:4b:b1:24:ee:ba:42:bf:f3:47:
                    b4:71:3a:2c:fa:87:a1:2c:4c:da:95:f8:b6:b5:85:
                    d0:99:61:06:57:07:6d:a4:6c:c6:31:5d:22:3a:2f:
                    e5:4b:8c:7a:ff:2f:dc:98:3e:26:00:06:ca:d0:08:
                    75:b4:cb:1d:a9:69:d8:1c:be:47:c4:6c:61:3a:d0:
                    a9:89:81:f6:74:92:e6:5b:b1:a3:26:b6:1a:e0:22:
                    43:22:91:79:e6:ec:bf:27:1e:ac:c1:f1:26:0d:83:
                    a1:3a:7c:e0:3d:9e:fe:d1:89:d2:e5:dd:be:15:16:
                    7c:bc:de:44:bc:16:2f:0b:c8:d7:39:69:53:a6:e5:
                    0e:9c:a5:37:75:98:f0:60:75:49:04:67:f8:e1:77:
                    8c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:55:34:60:45:F5:CC:E5:35:46:0C:F6:85:D2:44:FD:68:6C:59:EA
            X509v3 Authority Key Identifier:
                keyid:46:F3:F9:B4:1F:45:A0:F9:7B:2A:6A:81:1C:A6:7A:04:02:A0:47:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RvP5tB9FoPl7KmqBHKZ6BAKgR38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:60:17:3e:d9:40:8e:22:bd:1a:01:a6:0a:f5:94:e7:63:98:
         83:5e:62:62:20:be:fb:3d:7d:06:af:b7:2f:01:e7:c6:f1:fa:
         62:36:94:d6:8d:66:4f:94:13:33:0c:82:c6:2b:48:d1:37:f2:
         0c:fb:14:34:06:c5:0e:d6:26:30:fa:fc:b1:5a:60:71:72:d0:
         7c:f5:98:a7:f1:30:8c:6d:8b:1f:31:c4:98:16:e7:b8:73:64:
         4b:f1:d3:53:04:2b:62:80:12:a7:fa:dd:1d:5a:09:9a:85:55:
         4c:9c:f4:e2:25:1e:87:94:a2:d4:3d:b9:24:b2:d7:6b:93:77:
         ee:ec:6f:95:93:35:17:1f:df:69:cd:7b:df:74:38:b3:b3:8d:
         03:34:98:00:3e:d0:b7:ea:3b:39:a5:4f:d1:5f:13:c2:2b:b6:
         0c:a6:49:06:37:a9:46:0f:3d:6a:73:77:93:50:39:3f:a8:41:
         1e:5a:b4:cf:d1:49:85:3e:85:27:19:66:91:7e:62:cc:93:d5:
         80:46:a7:34:c2:71:5d:49:85:6d:a9:c8:b0:4a:49:32:2d:06:
         ac:15:e6:ad:bc:38:77:71:60:87:a5:ad:f1:5a:19:72:91:c7:
         46:36:54:52:d2:ba:3f:91:23:76:88:1d:af:54:6b:3b:ae:37:
         9b:e6:e1:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 22:39:49 2025 by rpki-client