Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
File:                     l4jeG3V-qqtedrGW4Xi2C15sJAw.mft (raw, json)
Hash identifier:          8evYJxS6i2IgL42Me4HWmb68BhwaoPCl3Fga19rpkSA=
Subject key identifier:   57:36:3E:9D:A1:24:A5:9E:C7:1D:2B:D6:1C:1A:45:CD:5A:CB:4D:FF
Authority key identifier: 97:88:DE:1B:75:7E:AA:AB:5E:76:B1:96:E1:78:B6:0B:5E:6C:24:0C
Certificate issuer:       /CN=9788de1b757eaaab5e76b196e178b60b5e6c240c
Certificate serial:       0196C15DF8161342413C35812DB231A6520C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
Manifest number:          040B
Signing time:             Sun 11 May 2025 22:01:23 +0000
Manifest this update:     Sun 11 May 2025 22:01:23 +0000
Manifest next update:     Mon 12 May 2025 22:01:23 +0000
Files and hashes:         1: V2RodRkZh7eC6bXk6s50iKPnz20.roa (hash: flwyJ5HDdlUN6kAnMIhAje5bgLCjv6WkxqxL4dovgJw=)
                          2: l4jeG3V-qqtedrGW4Xi2C15sJAw.crl (hash: nNnCbDgSGuLHqFBgjIb1z4ezWyNFAocccG+ZJrnQyYk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 22:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c1:5d:f8:16:13:42:41:3c:35:81:2d:b2:31:a6:52:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9788de1b757eaaab5e76b196e178b60b5e6c240c
        Validity
            Not Before: May 11 22:01:23 2025 GMT
            Not After : May 12 22:01:23 2025 GMT
        Subject: CN=57363e9da124a59ec71d2bd61c1a45cd5acb4dff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ab:2f:b1:59:00:f8:60:4f:56:85:c3:2c:26:
                    34:5a:b7:f8:73:6d:d0:2e:df:8f:4a:07:9a:73:e8:
                    5a:2b:75:02:d3:cc:e9:f5:df:ac:00:ca:f4:d5:96:
                    f9:ca:26:98:a8:b1:d7:e0:dc:3d:d0:4b:d6:97:f8:
                    26:6e:72:02:fb:a0:ec:b5:09:72:b8:39:6c:cf:a5:
                    81:d3:f4:ea:0d:d7:07:17:fb:1d:5f:35:be:1e:24:
                    ec:6e:4b:2f:4f:3f:1c:9f:9e:60:97:e6:b4:5e:a0:
                    c1:10:9d:8c:1c:67:f6:dd:1e:5c:57:40:d9:40:1d:
                    99:4d:77:58:3f:81:26:0b:74:20:1c:c3:1f:86:e2:
                    17:a3:53:77:86:5a:52:2e:29:90:19:c8:f6:87:b5:
                    19:41:38:1c:3b:67:3e:4b:66:e5:97:8a:c0:1b:dd:
                    a0:7a:21:e9:9d:13:bb:aa:8b:ec:dc:56:b7:1f:98:
                    e3:03:ee:ee:a6:d6:5f:75:84:f0:d0:90:3a:77:a3:
                    30:95:ef:db:43:58:f1:4a:72:95:59:c9:ff:74:51:
                    db:59:38:d6:53:ac:1a:3d:f1:93:89:85:d3:30:16:
                    46:62:79:6b:57:5c:7c:5b:35:e0:e3:04:70:22:88:
                    de:d8:f5:4b:9e:5d:c1:36:6e:54:74:21:cd:82:00:
                    ef:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:36:3E:9D:A1:24:A5:9E:C7:1D:2B:D6:1C:1A:45:CD:5A:CB:4D:FF
            X509v3 Authority Key Identifier:
                keyid:97:88:DE:1B:75:7E:AA:AB:5E:76:B1:96:E1:78:B6:0B:5E:6C:24:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:57:a8:76:58:94:82:f0:41:29:42:6b:7e:06:f6:fa:32:c2:
         5f:b4:ff:db:b9:bc:7f:f9:4e:f1:d1:d0:5c:01:98:ff:31:9c:
         48:8f:22:7f:ce:a4:d6:e6:c6:e5:f5:29:98:be:eb:4f:d2:7f:
         10:d8:0d:41:43:33:af:62:a3:13:f8:02:af:f6:47:3a:d2:50:
         2c:76:0b:ea:88:88:38:57:df:33:cf:25:fc:0a:45:31:95:2b:
         7b:f1:dd:13:dc:2d:64:f5:12:81:2b:61:8f:45:82:a5:46:3e:
         e1:72:df:e5:3f:da:46:eb:0b:95:5b:7f:54:5a:6a:ea:5c:f3:
         05:62:96:ea:9f:f5:b1:63:06:e8:cc:db:73:69:e2:b0:1c:10:
         b6:ec:cf:6c:86:84:5f:97:70:36:6b:29:60:82:70:c1:b8:81:
         f9:b2:77:7c:75:ff:29:1e:45:61:c2:4d:d5:96:5c:e1:e9:43:
         b6:50:30:e2:fd:e7:c8:0a:d2:c1:80:6c:ad:84:9d:a7:a7:0a:
         6e:e5:6b:c8:67:96:f9:8c:52:2c:48:e4:4a:7b:05:eb:02:0b:
         3b:bb:bc:9f:68:2b:2f:8b:21:24:67:f0:ed:8c:e8:3a:3b:f2:
         64:92:35:a9:f7:c5:6c:29:36:d9:08:9a:48:7f:31:60:07:6c:
         4e:0b:55:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 05:29:35 2025 by rpki-client