Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
File:                     pcY3PqsZz0PdL0MRE5g4PuK60DA.mft (raw, json)
Hash identifier:          t16pFB8phgB51IQhyXpuRpHdomvCSm9ZCk9JErs1B2M=
Subject key identifier:   46:7C:74:03:89:56:64:9C:C8:B9:3C:59:11:E0:11:00:03:57:E1:2E
Authority key identifier: A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
Certificate issuer:       /CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Certificate serial:       0196A2ADED90BF80D2D20727D9C806BA8146
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
Manifest number:          0FE1
Signing time:             Mon 05 May 2025 23:00:29 +0000
Manifest this update:     Mon 05 May 2025 23:00:29 +0000
Manifest next update:     Tue 06 May 2025 23:00:29 +0000
Files and hashes:         1: CLeDWh39NdLvyQS_i3NwJ9CDF5A.roa (hash: AodjA/u0IZIHWzW0wUzupROWai2JCPHe4BHHea78Ms0=)
                          2: IVs_hi0L8DU-XvjpZ3j52FBoeuA.roa (hash: gjbii66qiZGzea5anGixtq9DuuHhboIpMcO6QPFsj6s=)
                          3: S3XpEBxlerRtwSFaGLA6G44LRQI.roa (hash: Z/+jFc8Tb7annjDdHUmTXSmFMVDmPYF89/cdJ7u6K/A=)
                          4: VrU7ZjcTG9RIkuIvhPHDcadoKZM.roa (hash: g8P7wwNKLRxTvKsPwE4zpfRuDPifBy4qLKB2zlBcTlw=)
                          5: pcY3PqsZz0PdL0MRE5g4PuK60DA.crl (hash: 7rc9Qj4MmZSDRBANpdH4AfcnPPjLazt59ZleCfByOVA=)
                          6: rwgU2mlTS06e7YPqA2lYPO26aP0.roa (hash: w9oJA8hR7uQfiHK53Tj7B18Tkd/AVTn4HnDtFZKJyRA=)
                          7: zduwkC5PQDOGNkAdIMyn-hz63Ys.roa (hash: dngQzoKRwxwQY6jw/yt5nYtfsqDVjR83fQraMN2FWXk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 18:19:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a2:ad:ed:90:bf:80:d2:d2:07:27:d9:c8:06:ba:81:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5c6373eab19cf43dd2f43111398383ee2bad030
        Validity
            Not Before: May  5 23:00:29 2025 GMT
            Not After : May  6 23:00:29 2025 GMT
        Subject: CN=467c74038956649cc8b93c5911e011000357e12e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ab:33:27:cb:1c:3a:55:49:86:20:3a:44:bb:
                    ff:e5:ee:55:0c:e2:46:56:a2:17:48:eb:0b:a2:2f:
                    56:40:34:78:63:4e:77:83:a4:20:72:d2:af:9f:cb:
                    2b:75:34:f2:94:6a:c2:1e:06:46:f0:ea:c8:ea:cf:
                    7c:3a:01:73:9e:2b:44:26:b3:f9:7f:6a:1e:26:4e:
                    0f:79:9c:88:93:5a:50:60:dc:f3:2f:f2:d9:dd:5f:
                    cd:5c:e8:e3:c2:d0:e5:e1:b2:b9:03:0b:00:4a:46:
                    a8:b3:e6:fe:5a:84:d1:9b:9d:b7:82:64:90:8e:a9:
                    eb:d6:4d:90:8c:4c:85:7e:b6:52:fa:c5:0f:01:ac:
                    72:4a:74:b0:7e:81:e5:4e:f6:c8:f4:5f:12:ae:56:
                    95:dc:47:ba:c5:82:b7:b2:bb:1c:2c:07:62:40:83:
                    42:08:1a:35:ac:87:a2:d4:f2:41:a0:d4:ca:77:0b:
                    56:97:5b:b3:e4:b2:c8:ee:6f:5e:32:7c:a4:d6:66:
                    02:a9:d4:85:4a:61:f1:2f:84:82:0e:85:70:20:b2:
                    11:5b:70:75:70:d8:70:2d:4d:18:4b:e0:11:75:ac:
                    7d:68:48:44:ae:03:72:b6:20:91:d1:63:ff:2b:bf:
                    e8:39:5b:f6:85:a2:48:36:3b:dd:4f:80:78:be:a2:
                    38:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:7C:74:03:89:56:64:9C:C8:B9:3C:59:11:E0:11:00:03:57:E1:2E
            X509v3 Authority Key Identifier:
                keyid:A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:5e:6e:0b:0b:07:24:12:09:92:d7:ba:15:f1:ff:79:e8:3e:
         18:df:f5:48:1f:40:23:cd:3a:89:8d:b6:b4:d6:55:ac:33:32:
         49:0d:9c:e0:aa:99:cf:a5:e0:17:45:56:f2:21:7b:3d:66:06:
         a1:ae:85:47:06:47:05:11:0e:f4:68:dc:f2:83:1e:9d:49:11:
         da:4c:fa:51:d1:45:b0:82:80:42:5c:d1:bc:b6:7c:50:c6:eb:
         37:52:ce:1e:f0:81:ad:b9:3c:4c:93:4f:ea:73:08:55:05:da:
         bd:43:f7:8f:99:1a:2b:0d:70:19:ee:e4:77:14:df:4a:e2:d5:
         6a:ac:44:e6:b2:a8:b3:ec:2f:96:82:c8:81:51:59:eb:e4:6e:
         d1:d1:33:07:ef:74:f6:c5:b4:4e:be:63:a3:4b:53:7c:41:ef:
         e5:1a:11:a0:fa:f7:ae:55:4b:4a:d4:b2:f6:8f:12:c2:fe:7a:
         46:5f:0e:57:de:b0:3a:c3:fb:7c:3d:0c:3a:36:f2:03:62:25:
         01:4c:1e:36:2b:af:e1:54:40:48:e9:ce:ab:b7:4f:79:a6:0e:
         95:43:9a:ce:a1:41:fb:e0:18:c6:26:a2:77:b0:8f:07:2e:bb:
         b2:25:b9:17:1a:78:36:d0:f5:88:53:b4:1d:65:6e:93:b1:16:
         06:24:b1:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 02:38:13 2025 by rpki-client