Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/469974-1184-4824-9181-f4a275d6b584/1/p03gktwuTXKqfmqWDSGtTnl1izw.mft
File:                     p03gktwuTXKqfmqWDSGtTnl1izw.mft (raw, json)
Hash identifier:          b2p64HoEbhCefNr0kgomy/dTussY/ZFobv/yFA90m+U=
Subject key identifier:   37:05:B1:1F:A3:38:83:7D:61:66:98:A5:7C:62:AC:08:21:87:DF:F5
Authority key identifier: A7:4D:E0:92:DC:2E:4D:72:AA:7E:6A:96:0D:21:AD:4E:79:75:8B:3C
Certificate issuer:       /CN=a74de092dc2e4d72aa7e6a960d21ad4e79758b3c
Certificate serial:       0196CF1898CF91A141D811CD8D63597AFC2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p03gktwuTXKqfmqWDSGtTnl1izw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/469974-1184-4824-9181-f4a275d6b584/1/p03gktwuTXKqfmqWDSGtTnl1izw.mft
Manifest number:          153D
Signing time:             Wed 14 May 2025 14:00:17 +0000
Manifest this update:     Wed 14 May 2025 14:00:17 +0000
Manifest next update:     Thu 15 May 2025 14:00:17 +0000
Files and hashes:         1: h56nNbes2ivx0npJDLsxR_z62Zo.roa (hash: wxs3EMyvsXJWyJHCo0ZYi2lqFjVWRDaFII6/r1MtHp4=)
                          2: p03gktwuTXKqfmqWDSGtTnl1izw.crl (hash: sOgEd14cwxaeLKLvyEedJp9kjYsOn88zaWkYHdBRbd8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/469974-1184-4824-9181-f4a275d6b584/1/p03gktwuTXKqfmqWDSGtTnl1izw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/469974-1184-4824-9181-f4a275d6b584/1/p03gktwuTXKqfmqWDSGtTnl1izw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p03gktwuTXKqfmqWDSGtTnl1izw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 13:46:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cf:18:98:cf:91:a1:41:d8:11:cd:8d:63:59:7a:fc:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a74de092dc2e4d72aa7e6a960d21ad4e79758b3c
        Validity
            Not Before: May 14 14:00:17 2025 GMT
            Not After : May 15 14:00:17 2025 GMT
        Subject: CN=3705b11fa338837d616698a57c62ac082187dff5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:94:fc:7b:1d:67:19:59:c5:8a:86:ad:0b:b0:
                    fa:af:99:69:3f:03:cc:8d:88:32:e7:d2:96:85:0c:
                    e7:94:e1:41:16:d3:28:cf:fc:dd:8e:d2:c0:3c:23:
                    53:ec:ea:37:99:57:7e:d6:dc:13:1d:0d:28:ca:cd:
                    54:26:6d:5c:56:d3:8c:b9:0a:62:0e:6d:a8:8a:a5:
                    64:0d:0d:d1:a0:cd:de:a1:1e:0b:f2:eb:0a:cf:f5:
                    9f:4d:2a:a9:ad:63:1b:f5:3b:95:cb:cf:40:df:f5:
                    f8:80:49:46:a7:fa:5b:cd:2f:26:9f:06:74:d2:80:
                    2b:ac:69:72:68:ce:8a:5f:14:bf:7c:d0:fd:5a:05:
                    27:91:1a:88:56:af:d8:51:87:17:bf:36:91:92:a1:
                    1d:c7:c3:91:bd:36:be:5b:0c:69:49:1f:ed:8c:73:
                    94:8c:d7:ca:8a:61:61:41:62:6d:f0:6c:7a:37:42:
                    8e:37:a1:7a:ba:72:90:75:ef:e1:e6:4f:ce:2b:1d:
                    a2:8a:28:7a:12:3d:f8:5b:d2:38:2d:88:2f:80:a8:
                    3e:a3:cd:0a:ef:5b:0f:ac:97:ca:cb:c0:34:54:44:
                    d0:3f:87:19:89:37:a9:f9:42:0e:92:b5:8e:fc:c5:
                    a7:c8:43:75:f1:8b:0c:ee:e7:5e:95:44:a1:b2:59:
                    40:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:05:B1:1F:A3:38:83:7D:61:66:98:A5:7C:62:AC:08:21:87:DF:F5
            X509v3 Authority Key Identifier:
                keyid:A7:4D:E0:92:DC:2E:4D:72:AA:7E:6A:96:0D:21:AD:4E:79:75:8B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p03gktwuTXKqfmqWDSGtTnl1izw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/469974-1184-4824-9181-f4a275d6b584/1/p03gktwuTXKqfmqWDSGtTnl1izw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/469974-1184-4824-9181-f4a275d6b584/1/p03gktwuTXKqfmqWDSGtTnl1izw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:e7:91:69:e6:b9:c5:57:e8:72:3f:28:f8:09:cf:89:5b:a6:
         de:72:cb:b5:26:0c:47:2a:7c:1d:a7:c4:b6:d6:b2:b1:58:0c:
         66:3a:b3:b0:80:c8:ce:1e:26:54:89:7b:3e:ed:95:00:23:e9:
         10:81:e0:08:95:67:5d:4f:ed:35:e4:25:35:1c:c1:59:51:e2:
         87:56:3b:ae:02:83:42:23:e3:1a:e8:c2:14:ff:ed:b0:62:a4:
         e8:3d:e1:e2:99:07:31:0a:fb:95:6a:95:a9:ff:f5:6f:e1:bf:
         ae:6f:cf:9c:21:03:d6:ae:fd:d2:a0:1a:ee:a6:d1:23:8f:3c:
         d4:dc:ee:20:a6:21:10:df:0f:0c:98:44:94:43:91:92:5b:24:
         50:55:36:08:a6:36:ce:11:ee:d7:61:37:f5:9e:c0:2b:37:d3:
         fb:cb:7f:0f:b4:b6:b3:d9:96:75:f4:af:99:cf:39:64:97:b1:
         6e:49:4b:fe:8e:24:de:3a:9e:2d:c7:6c:85:49:08:68:e4:74:
         89:af:44:25:4b:73:0f:f4:d3:de:7b:a8:b5:29:bc:68:50:5a:
         b0:8f:d4:41:71:e0:92:5b:54:c3:db:e0:87:e1:15:69:3b:f4:
         ca:0c:a2:a7:b7:f9:57:ac:f6:83:a7:33:2f:c5:a2:84:bb:51:
         c8:5f:01:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 16:55:42 2025 by rpki-client