Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.mft
File:                     elVsGaRVbzb3YAAG2OrNH6P0OfI.mft (raw, json)
Hash identifier:          A6Wb1VfC0F8parFR9xUNuBZyrRlySkUTzV9J2uvuWUs=
Subject key identifier:   62:B7:9D:3C:35:F2:58:9C:26:08:6F:44:A5:07:21:68:AD:92:D5:02
Authority key identifier: 7A:55:6C:19:A4:55:6F:36:F7:60:00:06:D8:EA:CD:1F:A3:F4:39:F2
Certificate issuer:       /CN=7a556c19a4556f36f7600006d8eacd1fa3f439f2
Certificate serial:       0196A3531A1D5B698908916D29AF6F78F920
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/elVsGaRVbzb3YAAG2OrNH6P0OfI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.mft
Manifest number:          04DF
Signing time:             Tue 06 May 2025 02:00:54 +0000
Manifest this update:     Tue 06 May 2025 02:00:54 +0000
Manifest next update:     Wed 07 May 2025 02:00:54 +0000
Files and hashes:         1: Ei-k7RiW07sWpfPP67i23htmomc.roa (hash: NiFmAUaoToM3PE1q94mcr4KCSU+oRmSZyOhAcNpUk0I=)
                          2: elVsGaRVbzb3YAAG2OrNH6P0OfI.crl (hash: qrGWIBLCZD7N6vLD9WoQpG5jnEFHidA2N37N5pfO/fc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/elVsGaRVbzb3YAAG2OrNH6P0OfI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a3:53:1a:1d:5b:69:89:08:91:6d:29:af:6f:78:f9:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a556c19a4556f36f7600006d8eacd1fa3f439f2
        Validity
            Not Before: May  6 02:00:54 2025 GMT
            Not After : May  7 02:00:54 2025 GMT
        Subject: CN=62b79d3c35f2589c26086f44a5072168ad92d502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:50:ef:2a:c4:54:4c:96:f3:f5:31:cc:8d:ee:
                    1b:a6:3d:96:13:5c:68:df:cf:86:f0:cf:46:a0:3e:
                    10:2c:fe:18:a3:47:c2:f8:31:cd:5d:bf:f8:b9:77:
                    cd:4c:7b:1b:24:53:24:2e:12:91:0a:8c:e1:c1:f5:
                    60:bc:e6:cf:eb:b5:e7:c9:29:72:ff:a4:47:ee:f9:
                    13:af:9c:b9:81:ac:2a:5a:62:8c:d8:07:d3:d1:7a:
                    10:1b:74:87:16:9c:a9:42:2d:26:a4:a0:63:ee:46:
                    21:07:2e:8f:d7:34:43:28:3e:99:a4:51:6e:b3:9b:
                    62:36:9b:4f:00:81:c1:5b:e4:ea:07:7e:3c:7f:23:
                    0a:5a:34:7e:ca:2f:37:bc:eb:d3:e1:e3:cd:27:ba:
                    dd:c1:ce:c5:ad:10:02:51:dd:79:25:81:5d:63:f8:
                    00:61:88:30:ea:21:f1:cf:75:28:98:a4:31:6f:19:
                    3e:07:9b:01:6e:aa:86:e6:f1:76:7b:26:15:52:51:
                    ab:95:03:95:8a:9c:08:9f:38:34:aa:80:95:44:e6:
                    db:ad:b4:39:59:12:f9:60:02:66:b2:b1:2e:a2:10:
                    44:93:eb:71:04:3d:89:a7:15:d2:1d:4f:08:6e:aa:
                    c8:a3:f1:a4:35:2c:5e:05:af:66:d4:5b:6a:6f:75:
                    02:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:B7:9D:3C:35:F2:58:9C:26:08:6F:44:A5:07:21:68:AD:92:D5:02
            X509v3 Authority Key Identifier:
                keyid:7A:55:6C:19:A4:55:6F:36:F7:60:00:06:D8:EA:CD:1F:A3:F4:39:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elVsGaRVbzb3YAAG2OrNH6P0OfI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:cd:56:1d:fe:fe:aa:ee:fa:b2:59:20:2a:28:c5:cf:93:0d:
         2b:d9:8b:75:cf:20:ef:8b:c2:fa:ec:ef:cd:01:52:8e:bf:93:
         d5:84:b9:5d:95:25:72:0d:d1:8c:7c:31:67:2b:74:af:b7:e3:
         85:c4:15:e7:0e:3e:89:62:fa:f9:68:de:c8:12:75:de:3a:11:
         e5:7a:8c:d3:6b:c9:cf:0d:28:8e:d8:fb:05:92:61:7f:1d:31:
         b2:4d:87:12:9c:81:09:b9:74:73:bb:0b:d2:a3:99:e8:72:a8:
         e7:61:3d:45:ca:ce:cc:bf:66:15:70:0e:7b:f4:4e:6f:3b:61:
         81:78:a7:d1:af:f3:04:2f:64:52:45:a2:0c:f4:3a:d3:cf:37:
         51:7c:a4:35:20:65:e8:69:9d:13:4a:17:70:3f:be:4d:5d:e3:
         f7:bb:50:71:c8:b2:11:e8:a8:84:8d:8d:1a:17:3b:48:d0:37:
         97:05:e4:97:31:bd:65:76:23:ce:ba:4b:ee:8f:6c:64:15:ec:
         54:f5:57:a0:7e:81:fb:b0:5b:7c:eb:db:f3:70:e7:cb:ec:3f:
         d6:5d:a3:f2:5f:23:da:9d:f6:98:b8:da:ab:cd:ca:85:0e:b2:
         7f:c0:69:7b:42:64:45:5e:55:c2:89:81:1a:b6:58:10:42:40:
         29:7c:db:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 05:14:47 2025 by rpki-client