Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.mft
File:                     cC9OAJQ3AMCJfeetvPztXRC_LgE.mft (raw, json)
Hash identifier:          mj8Y+lPl7GkO3c/gvgPev7stsNsC5loLvvyV1J2S9uk=
Subject key identifier:   26:C3:3F:C8:F5:A0:5D:97:40:68:B4:A0:75:F9:29:05:1B:9E:39:DD
Authority key identifier: 70:2F:4E:00:94:37:00:C0:89:7D:E7:AD:BC:FC:ED:5D:10:BF:2E:01
Certificate issuer:       /CN=702f4e00943700c0897de7adbcfced5d10bf2e01
Certificate serial:       0196CB05864AC10A30834022F28D5DA5BFFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cC9OAJQ3AMCJfeetvPztXRC_LgE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.mft
Manifest number:          153B
Signing time:             Tue 13 May 2025 19:00:58 +0000
Manifest this update:     Tue 13 May 2025 19:00:58 +0000
Manifest next update:     Wed 14 May 2025 19:00:58 +0000
Files and hashes:         1: RHNggBb1TucAzNCR_Nr4pg_wiTI.roa (hash: gVu159ZiRDG0Y/9P6fbJjRdg/qCz0CZogXW7oBMzxmM=)
                          2: cC9OAJQ3AMCJfeetvPztXRC_LgE.crl (hash: 5560GVsEvA87dg5FOdPrkLhoGhoLll0vw8UwTG3Bsb4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cC9OAJQ3AMCJfeetvPztXRC_LgE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 19:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cb:05:86:4a:c1:0a:30:83:40:22:f2:8d:5d:a5:bf:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=702f4e00943700c0897de7adbcfced5d10bf2e01
        Validity
            Not Before: May 13 19:00:58 2025 GMT
            Not After : May 14 19:00:58 2025 GMT
        Subject: CN=26c33fc8f5a05d974068b4a075f929051b9e39dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:5c:d1:5c:6d:73:99:97:b6:a5:c3:2c:f4:87:
                    c5:45:1f:b5:8a:84:70:97:ab:71:96:a3:0a:c9:65:
                    f9:36:7c:b3:2f:97:80:b1:45:80:48:a9:db:37:ec:
                    f5:f6:89:44:b0:21:53:e6:01:4a:47:4b:94:70:2a:
                    b5:df:ec:64:60:59:16:52:8e:30:30:ab:b0:9a:ac:
                    dd:b1:0a:a5:02:15:02:d4:b4:78:aa:7c:7a:b2:14:
                    f0:a8:b8:0f:2b:19:43:07:62:2b:b3:58:8e:64:4e:
                    84:3f:82:65:29:c3:f6:e5:21:da:6a:e0:00:1c:54:
                    30:68:19:55:ee:e8:06:a2:3a:95:8a:1d:b5:86:b1:
                    2f:5a:ae:3a:d1:27:1d:d6:d3:75:da:14:40:e5:e6:
                    76:09:f6:f0:af:74:8d:ed:b5:96:f5:c0:0c:f2:ff:
                    a9:80:fe:e6:af:f5:99:1e:16:79:3c:7e:1c:f2:0f:
                    b6:a6:63:99:3c:75:d8:05:28:fa:5c:24:7b:c4:36:
                    d7:4a:9b:5e:3b:c2:8d:6e:a3:0a:e9:b1:69:c1:d9:
                    b9:e2:16:84:7b:d7:b2:01:37:56:0a:1c:a8:52:1c:
                    e0:be:73:b8:da:be:66:70:c3:28:d0:71:0e:b1:d7:
                    3e:00:3f:32:8a:c7:af:2e:3f:87:51:69:d0:a3:1c:
                    79:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:C3:3F:C8:F5:A0:5D:97:40:68:B4:A0:75:F9:29:05:1B:9E:39:DD
            X509v3 Authority Key Identifier:
                keyid:70:2F:4E:00:94:37:00:C0:89:7D:E7:AD:BC:FC:ED:5D:10:BF:2E:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cC9OAJQ3AMCJfeetvPztXRC_LgE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:67:ff:84:cb:90:07:45:76:fe:91:f7:95:11:3e:68:cb:37:
         f6:b7:58:30:56:87:55:fc:ef:40:4c:6e:85:c0:61:8d:f9:9c:
         b1:91:ee:e7:c7:86:9f:92:06:48:02:68:6f:1f:18:bf:fe:e5:
         31:59:6d:05:b7:30:7e:6a:d7:b9:1b:03:f3:cd:64:8d:ae:de:
         5e:65:ff:e4:f3:34:5d:a9:a8:d1:56:07:da:14:ab:52:8a:b7:
         a6:43:06:9b:c4:28:23:49:6b:64:dc:22:cc:d9:ca:56:fb:f8:
         fd:74:97:3c:c5:4f:7f:55:c9:c7:30:8e:e6:b7:ea:c3:f0:6a:
         10:68:23:c2:db:6e:f5:d2:28:d4:96:af:33:aa:6b:ed:98:44:
         09:29:66:59:fe:5a:4c:f8:e5:47:24:75:9e:8c:2d:57:3a:16:
         4f:e8:22:ff:90:b0:02:00:a8:96:d7:76:29:71:c0:06:38:42:
         f3:70:a0:2d:1f:bd:22:21:09:8a:ee:1b:ba:06:64:c1:ed:5d:
         09:69:1d:2d:0f:87:21:9f:cf:9d:10:db:71:29:1d:bb:db:36:
         8e:b4:e3:00:58:63:b9:be:3e:d6:59:e4:96:7f:70:28:44:85:
         82:31:cd:dc:f3:7a:6a:3f:56:0d:7a:d8:e5:c8:bf:db:fa:92:
         48:b3:65:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 02:22:08 2025 by rpki-client