Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/Co59_NIAyF6zysZvhZtxEKuZsQo.mft
File:                     Co59_NIAyF6zysZvhZtxEKuZsQo.mft (raw, json)
Hash identifier:          hmI3ocGLgfytxP97AwG76KSr6gpjXJOEpdP0gv9pSi8=
Subject key identifier:   68:9B:62:F1:0B:A0:24:ED:2C:99:7B:45:1A:5E:9E:DD:D7:EE:16:CE
Authority key identifier: 0A:8E:7D:FC:D2:00:C8:5E:B3:CA:C6:6F:85:9B:71:10:AB:99:B1:0A
Certificate issuer:       /CN=0a8e7dfcd200c85eb3cac66f859b7110ab99b10a
Certificate serial:       0196B36ACAF8075F659D306B458DBEEFD719
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Co59_NIAyF6zysZvhZtxEKuZsQo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/Co59_NIAyF6zysZvhZtxEKuZsQo.mft
Manifest number:          0212
Signing time:             Fri 09 May 2025 05:00:42 +0000
Manifest this update:     Fri 09 May 2025 05:00:42 +0000
Manifest next update:     Sat 10 May 2025 05:00:42 +0000
Files and hashes:         1: Co59_NIAyF6zysZvhZtxEKuZsQo.crl (hash: yViInqJ87txvgqP0MdsTvJM2yHt0j0tG4tQIG4SdKeY=)
                          2: ZnFCz6rKLcZRx4oWRqGX1WP5row.roa (hash: Fg68tw9/QoQIkz8jU0UgngyMGnhnkYCZ0zRagw9xxDc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/Co59_NIAyF6zysZvhZtxEKuZsQo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/Co59_NIAyF6zysZvhZtxEKuZsQo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Co59_NIAyF6zysZvhZtxEKuZsQo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b3:6a:ca:f8:07:5f:65:9d:30:6b:45:8d:be:ef:d7:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a8e7dfcd200c85eb3cac66f859b7110ab99b10a
        Validity
            Not Before: May  9 05:00:42 2025 GMT
            Not After : May 10 05:00:42 2025 GMT
        Subject: CN=689b62f10ba024ed2c997b451a5e9eddd7ee16ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:96:34:df:f5:99:10:a9:3a:c9:58:8d:04:ae:
                    b4:ac:a8:18:f9:f5:03:9a:74:7d:16:99:43:b3:5e:
                    58:34:68:50:01:bd:a2:c9:0e:cb:17:54:3a:e2:7e:
                    ea:5b:87:ae:4f:b2:9e:12:33:55:c7:59:9e:66:e3:
                    80:e9:0d:95:6b:9c:b3:1e:70:8d:71:f5:3d:e3:9e:
                    2d:61:52:16:76:ec:ae:11:70:ff:f0:ae:6e:9e:7c:
                    39:1c:77:cb:ee:62:4d:eb:7a:2d:af:10:19:09:71:
                    93:49:33:53:a3:ec:cf:e1:4c:d8:ad:ad:03:93:06:
                    fe:b5:26:3c:2b:82:f0:e7:b1:5e:3b:7c:1d:dd:16:
                    ab:f0:b4:43:5c:5b:01:aa:1f:63:63:01:a7:3c:80:
                    f8:be:53:3f:f2:10:67:ad:30:9f:e3:81:34:58:18:
                    ef:ad:11:83:a3:c7:7f:5c:ad:f1:19:80:11:88:37:
                    93:6d:ec:1f:98:91:7d:8a:d1:aa:e8:e2:b5:84:45:
                    ca:a0:ad:46:43:d1:36:d6:1c:84:bf:64:cb:17:d4:
                    cc:92:b4:41:e0:61:54:29:90:67:d8:fc:12:30:35:
                    69:69:3e:30:35:3a:a9:ac:17:75:5e:91:39:e3:59:
                    fc:1e:c1:dd:1f:99:89:43:1f:b3:96:ad:ef:ab:f0:
                    d7:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:9B:62:F1:0B:A0:24:ED:2C:99:7B:45:1A:5E:9E:DD:D7:EE:16:CE
            X509v3 Authority Key Identifier:
                keyid:0A:8E:7D:FC:D2:00:C8:5E:B3:CA:C6:6F:85:9B:71:10:AB:99:B1:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Co59_NIAyF6zysZvhZtxEKuZsQo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/Co59_NIAyF6zysZvhZtxEKuZsQo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/Co59_NIAyF6zysZvhZtxEKuZsQo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:02:93:2c:df:21:fe:03:9f:5c:5c:84:58:34:51:a2:37:a9:
         70:8e:36:4f:35:14:15:ef:6e:8e:04:b8:cc:64:bd:0f:ee:e0:
         7a:c8:a7:47:ed:77:7d:29:47:c2:27:c4:5f:31:a8:ca:d5:68:
         a4:42:b4:40:c4:98:58:7e:d7:fe:62:82:87:67:8e:66:c4:16:
         93:bf:67:00:2e:6b:f8:ef:3c:49:e3:c0:d8:27:32:8e:02:64:
         6d:d1:c7:8f:35:0d:22:a4:c3:e9:33:02:95:96:26:71:f1:c4:
         ce:dc:fb:50:34:69:58:6d:6e:d2:8b:8b:2d:8b:21:c2:53:8b:
         fe:95:ba:43:6b:d0:0c:3d:18:6e:80:11:cf:ad:a8:8f:7e:d0:
         72:fe:4f:55:b1:da:a0:94:41:9a:1c:b7:be:19:8f:a5:6a:ce:
         48:7f:e6:c9:7d:40:49:a2:62:29:ea:b1:cb:2f:9a:41:cd:2e:
         5d:db:88:cc:0f:d4:d7:14:7d:06:03:54:2f:df:51:83:5b:d1:
         c1:1a:6e:d0:e4:2c:0d:51:94:bf:5f:64:47:47:81:c5:53:38:
         70:0b:2d:85:cd:56:fd:81:f0:d7:e2:e3:6b:2b:e8:b3:8c:9a:
         db:68:ef:24:c9:51:86:73:27:72:a4:3c:c8:4f:ec:d3:51:d6:
         1e:e7:b6:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 07:58:48 2025 by rpki-client