Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.mft
File:                     V3zTsjkfRybBqonV7T0ECCMlI1U.mft (raw, json)
Hash identifier:          LOp9cYlj9KkgpKy7qZnKLGZQ+ziuqVi65xHm/q2OhjI=
Subject key identifier:   09:9B:54:80:47:29:5A:1B:C4:7C:A8:EA:EA:AA:35:4C:E4:57:4A:C7
Authority key identifier: 57:7C:D3:B2:39:1F:47:26:C1:AA:89:D5:ED:3D:04:08:23:25:23:55
Certificate issuer:       /CN=577cd3b2391f4726c1aa89d5ed3d040823252355
Certificate serial:       0196A3C0A9DFAFA5E9536FC4C85F955202AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V3zTsjkfRybBqonV7T0ECCMlI1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.mft
Manifest number:          97
Signing time:             Tue 06 May 2025 04:00:34 +0000
Manifest this update:     Tue 06 May 2025 04:00:34 +0000
Manifest next update:     Wed 07 May 2025 04:00:34 +0000
Files and hashes:         1: IwKSwRXA9Ph0qRohZhJ0WEYVgOM.roa (hash: RFNUKmFIpsyvimoGalaE9V72k6NP7c6/ODYYIyEjkmE=)
                          2: V3zTsjkfRybBqonV7T0ECCMlI1U.crl (hash: Im5VKsIjXLjDGranDCSORwnfbDHjrRezv0xkq5bNmEo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V3zTsjkfRybBqonV7T0ECCMlI1U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a3:c0:a9:df:af:a5:e9:53:6f:c4:c8:5f:95:52:02:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=577cd3b2391f4726c1aa89d5ed3d040823252355
        Validity
            Not Before: May  6 04:00:34 2025 GMT
            Not After : May  7 04:00:34 2025 GMT
        Subject: CN=099b548047295a1bc47ca8eaeaaa354ce4574ac7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:07:58:ee:3d:77:d1:05:1d:34:70:7f:38:ba:
                    f2:53:5f:24:4e:4a:04:37:6b:34:e0:e9:88:63:d1:
                    8a:bd:5e:0e:7a:ec:2b:90:26:6b:cc:56:01:06:e3:
                    58:fd:f7:62:79:57:00:00:e9:e0:a9:53:a8:70:b9:
                    94:83:4e:67:85:32:5d:ca:85:90:be:5e:56:29:5b:
                    31:0e:6d:a1:fe:10:3b:49:34:7e:49:98:96:62:99:
                    11:59:c0:9d:7e:82:9b:a3:b7:8f:81:5a:77:9e:7f:
                    f5:41:1c:98:b2:81:79:8b:47:46:b2:84:ac:ea:44:
                    58:aa:3d:76:4a:1a:d4:82:ab:a6:f3:2e:1f:07:f0:
                    67:f9:61:e4:e2:1c:ea:84:b5:c2:62:09:4f:d9:81:
                    ca:20:2b:ce:18:15:43:7a:80:01:32:fd:20:48:a6:
                    c4:ac:b8:b8:5b:18:ec:9c:b3:d0:79:cf:81:92:2c:
                    ea:d5:23:39:d7:aa:8e:79:bf:62:e8:71:73:1c:f8:
                    cc:42:36:e0:43:c1:ad:9e:31:9c:3e:a4:a6:d1:89:
                    da:1b:45:95:4e:be:dc:0f:c0:6f:3c:fe:a0:d1:09:
                    b1:9a:be:b1:03:77:67:3c:50:c3:3c:dd:84:1e:bc:
                    9e:44:61:0a:e1:f6:7a:b6:3d:01:29:f7:7d:9f:f9:
                    23:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:9B:54:80:47:29:5A:1B:C4:7C:A8:EA:EA:AA:35:4C:E4:57:4A:C7
            X509v3 Authority Key Identifier:
                keyid:57:7C:D3:B2:39:1F:47:26:C1:AA:89:D5:ED:3D:04:08:23:25:23:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3zTsjkfRybBqonV7T0ECCMlI1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:ab:90:39:84:fa:b2:50:bb:5e:fc:fb:6a:0b:0d:46:23:ed:
         e9:72:30:70:0f:34:4e:5b:59:47:e1:ab:c2:2d:a5:2c:70:bf:
         57:bb:42:91:33:a0:65:e8:b0:b8:bd:05:32:f5:11:f1:b7:4c:
         02:f5:16:db:f4:e2:0a:69:60:f0:ff:86:a4:df:93:f2:67:06:
         fb:90:3b:55:d1:1f:bc:b6:a5:90:fc:3f:b1:f4:18:93:35:e3:
         f4:24:35:a2:9d:fc:79:06:23:0c:0e:3b:3c:57:e3:c8:2c:03:
         0c:7b:61:2e:fc:3a:b0:b8:5c:6e:f7:9b:f7:0e:b5:75:2b:b0:
         b8:d2:4b:61:17:bd:8a:87:01:22:c1:ad:89:fe:f2:23:01:f5:
         94:f0:e4:7c:61:f7:1a:51:cd:4d:c3:4c:70:2f:31:7f:5e:a4:
         a9:63:b7:97:03:7f:15:7c:0e:c5:3f:5c:15:3c:da:5d:ef:1e:
         27:5b:07:f3:8b:87:16:11:b3:86:1e:a8:88:30:8f:dd:af:4e:
         ac:5d:e6:2a:7b:a0:73:33:05:e4:19:44:2d:ab:81:b4:1c:ac:
         68:c6:11:53:fc:0c:a9:24:52:47:00:9a:b4:92:d2:94:30:6e:
         67:96:41:80:81:c0:92:2e:bb:17:1b:6b:a0:0b:a1:13:97:08:
         8f:2c:80:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 13:09:08 2025 by rpki-client