Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.mft
File:                     2yXQP8GPL0LNpQOGneGU_YzCGqk.mft (raw, json)
Hash identifier:          fljuvAr+P63ieEmZhOpbjAZSMQlgyYcMShLMJbKRpR4=
Subject key identifier:   E9:05:32:63:02:C5:E8:B9:12:EF:E7:06:AD:26:B2:A2:91:62:4C:22
Authority key identifier: DB:25:D0:3F:C1:8F:2F:42:CD:A5:03:86:9D:E1:94:FD:8C:C2:1A:A9
Certificate issuer:       /CN=db25d03fc18f2f42cda503869de194fd8cc21aa9
Certificate serial:       01969D8770C2D4DD6DBD261E79774433039C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2yXQP8GPL0LNpQOGneGU_YzCGqk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.mft
Manifest number:          1524
Signing time:             Sun 04 May 2025 23:00:21 +0000
Manifest this update:     Sun 04 May 2025 23:00:21 +0000
Manifest next update:     Mon 05 May 2025 23:00:21 +0000
Files and hashes:         1: 2yXQP8GPL0LNpQOGneGU_YzCGqk.crl (hash: 8JGoFy3nA00ZqT2kec/gKk1QHuPUXOBolSg1dtiF+r0=)
                          2: p23wwYN_BcdLiJY0vIjxBTg9FfA.roa (hash: BpBe3bEGzQ2vJJNcd5ELYkyQlNL9ofFCJ83jKn6lQFw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2yXQP8GPL0LNpQOGneGU_YzCGqk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9d:87:70:c2:d4:dd:6d:bd:26:1e:79:77:44:33:03:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db25d03fc18f2f42cda503869de194fd8cc21aa9
        Validity
            Not Before: May  4 23:00:21 2025 GMT
            Not After : May  5 23:00:21 2025 GMT
        Subject: CN=e905326302c5e8b912efe706ad26b2a291624c22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:21:2e:84:a9:38:be:38:1e:bf:3c:e7:e0:1a:
                    78:e1:3b:af:99:12:49:28:93:54:7b:5f:f1:b8:32:
                    d2:b7:e8:70:f9:1b:e2:6e:b3:be:d5:62:8a:8a:4d:
                    81:39:37:23:33:8e:c9:b8:dc:4c:a8:0c:ca:28:db:
                    e7:1b:e0:97:59:85:81:9d:22:61:9f:c8:ff:2c:9a:
                    e4:fb:87:44:c5:4e:3d:e4:82:c0:82:8e:e8:ff:53:
                    94:eb:55:8c:16:4e:e1:db:49:b4:8d:02:56:9b:7d:
                    c6:a6:58:9a:f3:df:7a:11:7a:cc:4b:f5:9f:5c:d2:
                    ef:a3:f6:15:3b:41:ea:88:40:d3:05:49:78:3b:ed:
                    82:ee:53:8e:18:9c:6e:3e:b7:ef:ed:ef:74:3f:28:
                    8d:e1:01:09:15:62:7c:0d:77:42:86:f7:cf:02:d3:
                    da:ad:0e:41:d0:44:d5:af:16:64:3a:dd:3c:d6:04:
                    dd:75:d7:c8:7b:b9:86:2e:59:6d:e5:88:08:1e:59:
                    cc:c4:b4:7d:84:0c:5a:21:10:d0:f1:1d:38:b3:dc:
                    12:bb:6e:39:5a:84:68:3e:b9:1d:4a:fd:1e:9d:6e:
                    3d:76:34:ff:74:e3:61:16:79:9e:c7:75:e7:04:04:
                    fd:44:80:08:7a:ee:8f:03:10:da:e0:02:4d:2a:a2:
                    0c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:05:32:63:02:C5:E8:B9:12:EF:E7:06:AD:26:B2:A2:91:62:4C:22
            X509v3 Authority Key Identifier:
                keyid:DB:25:D0:3F:C1:8F:2F:42:CD:A5:03:86:9D:E1:94:FD:8C:C2:1A:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yXQP8GPL0LNpQOGneGU_YzCGqk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:ff:c4:a2:f3:c5:fb:a0:59:41:dd:39:a8:f7:36:ec:da:69:
         a3:00:03:e5:1b:c0:5a:d5:3e:67:6c:01:7c:a4:34:56:3f:35:
         df:fc:bb:ad:e6:61:d4:7b:e0:fc:16:39:73:5d:fc:22:df:ab:
         51:a3:bb:7b:a9:a2:c1:e1:15:f8:dc:68:45:b4:e6:ad:98:b5:
         ec:18:13:b6:4a:94:cc:57:76:15:d0:2e:99:17:ba:b0:39:04:
         7a:89:15:ad:a5:2f:b5:d0:60:43:c9:4e:2e:34:73:e3:3e:ab:
         95:d6:28:9f:5a:01:43:41:53:b2:1f:46:9b:84:78:52:f4:38:
         8b:5e:75:b5:98:6d:4d:f1:3f:62:77:e5:d8:81:7a:14:21:96:
         0b:5f:21:f5:93:1f:1b:d8:e6:64:5a:c2:6e:f0:5f:2a:fd:33:
         2c:d7:fd:71:bc:dd:a6:48:30:f3:6c:a1:28:46:65:86:d6:f2:
         3b:c4:a6:a3:ee:b6:bf:86:35:a4:8b:e5:3f:d3:73:ba:3b:0c:
         73:cb:14:76:c7:fe:ff:e8:3c:bf:f8:8a:69:0b:16:a0:8c:c4:
         d1:18:1c:9b:0f:f4:03:d3:c5:ba:7b:89:5f:2b:a8:fd:f5:35:
         18:99:52:67:82:c7:df:44:33:6e:fb:82:d5:c4:b6:93:0a:ed:
         e8:08:99:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 04:17:16 2025 by rpki-client