Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.mft
File:                     85SkZHKLgoVtwrlVzK6atbplOcg.mft (raw, json)
Hash identifier:          9IPYFVKTQfISuN4ltrqqZrB7gHS1yjPDq9Q/SOWojH4=
Subject key identifier:   D3:3D:11:AA:30:52:7F:A0:85:C6:80:FC:BF:BA:C4:7F:A4:7C:F1:DE
Authority key identifier: F3:94:A4:64:72:8B:82:85:6D:C2:B9:55:CC:AE:9A:B5:BA:65:39:C8
Certificate issuer:       /CN=f394a464728b82856dc2b955ccae9ab5ba6539c8
Certificate serial:       0196B6354D8BBE4F8D3E3FC2D3F143F47E2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/85SkZHKLgoVtwrlVzK6atbplOcg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.mft
Manifest number:          152F
Signing time:             Fri 09 May 2025 18:01:08 +0000
Manifest this update:     Fri 09 May 2025 18:01:08 +0000
Manifest next update:     Sat 10 May 2025 18:01:08 +0000
Files and hashes:         1: 85SkZHKLgoVtwrlVzK6atbplOcg.crl (hash: P4vl6c4WmclIrqt4zDRwZfvHYi/hTGYO4ND44/+ynCM=)
                          2: DgSG9NAY-GeZhhQF_9nz_5bnH4g.roa (hash: HVd5RwrEtlWn4VmR//6rMsJVil50z8bOvrCZBZiqbC0=)
                          3: KW9AN_X4Hh4VKuAnb6bJtRrKymg.roa (hash: J21F/I0zRgekIus74H7I/v2eoj4Bzdqg85T8XsMU8eI=)
                          4: KaCCbIDfk6xPLr8lzeQM2ayQkYY.roa (hash: stYyC3DZ280ukMQVQAStdzjvt9KMG36guiRh8dH8BRQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/85SkZHKLgoVtwrlVzK6atbplOcg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b6:35:4d:8b:be:4f:8d:3e:3f:c2:d3:f1:43:f4:7e:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f394a464728b82856dc2b955ccae9ab5ba6539c8
        Validity
            Not Before: May  9 18:01:08 2025 GMT
            Not After : May 10 18:01:08 2025 GMT
        Subject: CN=d33d11aa30527fa085c680fcbfbac47fa47cf1de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:47:df:af:bf:5f:a3:a2:de:2c:9f:9a:88:3c:
                    b9:34:66:0b:ae:b5:fb:93:86:88:ce:a5:83:24:47:
                    f5:e1:b8:0c:5d:ae:be:13:c3:4b:db:90:e8:7c:c9:
                    02:b8:9c:df:8f:2a:b1:d5:61:20:1f:5c:70:7a:4a:
                    a3:8a:60:c6:79:fa:66:4a:9e:e9:fd:48:46:71:bd:
                    aa:59:d2:d8:f5:79:9c:19:34:2e:58:da:4d:96:bf:
                    9a:ac:44:97:3d:e9:d1:61:a5:14:8f:62:67:39:81:
                    20:e9:f2:b1:73:a4:25:1f:3b:bc:37:0c:95:a7:c0:
                    8b:d7:55:df:d5:a5:48:93:06:d8:dc:69:c8:a0:4e:
                    e8:27:5d:73:32:34:e9:25:8e:8b:20:98:ef:95:c4:
                    86:7b:f6:de:2c:8b:46:b8:f6:f1:0f:a6:a6:d7:ce:
                    6e:ab:d7:dd:85:f2:02:5d:5f:78:33:3a:1e:11:56:
                    a4:5e:8f:dd:7d:cb:1f:47:12:b1:5e:3c:a7:0a:c2:
                    e1:30:83:8e:bd:70:fb:77:fb:51:c4:33:63:de:47:
                    47:f0:2b:85:3c:76:3f:c8:25:bf:66:40:ca:a9:3a:
                    f6:da:75:44:18:44:a2:14:13:bf:23:9a:fd:b2:15:
                    c3:0b:be:93:05:c5:f8:88:27:24:fb:24:a4:2e:0b:
                    32:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:3D:11:AA:30:52:7F:A0:85:C6:80:FC:BF:BA:C4:7F:A4:7C:F1:DE
            X509v3 Authority Key Identifier:
                keyid:F3:94:A4:64:72:8B:82:85:6D:C2:B9:55:CC:AE:9A:B5:BA:65:39:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/85SkZHKLgoVtwrlVzK6atbplOcg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:0c:51:25:05:cb:33:48:af:e7:11:e8:3f:a6:38:e9:15:fd:
         3c:30:0a:e1:d1:fd:d8:b9:84:c8:0c:61:b7:13:04:a0:59:70:
         ac:ae:7b:13:8d:06:db:d8:ca:ee:5d:2d:d6:f2:b4:1b:ec:95:
         e2:c7:eb:0e:0a:98:40:ba:8d:bc:f9:03:de:bb:5c:b9:c9:4b:
         6b:38:b2:a6:9b:2d:16:4f:ec:ce:b9:32:da:56:80:89:fe:6e:
         d2:27:a9:7e:81:1e:19:ca:52:60:0e:5b:80:33:e0:7d:2e:c0:
         c2:37:a6:a9:1e:f0:6b:58:a6:b4:d4:9c:6e:3e:20:d1:82:83:
         c7:80:6f:f7:e9:26:e2:ec:c1:02:53:cf:7c:9c:fb:23:d1:4f:
         b1:7d:86:48:ff:46:d7:51:21:b4:96:5b:87:91:a9:06:c4:d2:
         53:82:82:96:9d:41:a8:a1:4b:5a:b5:11:09:9f:22:1a:15:84:
         81:e2:62:c2:f5:f1:37:7d:ff:f3:cb:72:8d:a3:b8:19:c6:02:
         91:d0:4c:07:a7:d8:2c:5b:7a:17:09:f5:1d:5b:be:81:a8:86:
         63:69:b5:be:c4:f7:aa:9e:55:f3:c4:37:10:ea:9f:94:84:40:
         f0:56:36:2a:26:51:8a:1e:fa:3f:51:a3:68:37:ab:8b:13:0f:
         d6:ec:28:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 19:33:15 2025 by rpki-client