Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft
File:                     C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft (raw, json)
Hash identifier:          iKe/RBPaH9KyRaMR38HWW/MwNrXusyIJGRlnfCFA4aU=
Subject key identifier:   7D:74:96:11:98:60:D7:8A:40:96:42:20:BD:F1:36:A8:B7:D4:9C:E9
Authority key identifier: 0B:42:FB:48:31:C1:DA:F2:D9:63:C4:76:38:D7:03:08:6E:EC:A8:DE
Certificate issuer:       /CN=0b42fb4831c1daf2d963c47638d703086eeca8de
Certificate serial:       0196A79D7AC0006E212D3588E3B674D37033
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C0L7SDHB2vLZY8R2ONcDCG7sqN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft
Manifest number:          152C
Signing time:             Tue 06 May 2025 22:00:37 +0000
Manifest this update:     Tue 06 May 2025 22:00:37 +0000
Manifest next update:     Wed 07 May 2025 22:00:37 +0000
Files and hashes:         1: C0L7SDHB2vLZY8R2ONcDCG7sqN4.crl (hash: pp4XG4hCj4hij5ga53Qthd9tP7BAfruElZoEAX8vYxE=)
                          2: zmy93HOVaR95SsJ_nMqWvP0tGkI.roa (hash: CpAhgA9BKzHDj13uVF86y4qqslsHctpwgNDLQY2WnPs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C0L7SDHB2vLZY8R2ONcDCG7sqN4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 16:14:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a7:9d:7a:c0:00:6e:21:2d:35:88:e3:b6:74:d3:70:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b42fb4831c1daf2d963c47638d703086eeca8de
        Validity
            Not Before: May  6 22:00:37 2025 GMT
            Not After : May  7 22:00:37 2025 GMT
        Subject: CN=7d7496119860d78a40964220bdf136a8b7d49ce9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2e:73:ea:e3:e0:2c:4b:57:b0:2f:a4:8c:a7:
                    79:11:f8:6e:09:f8:8d:b0:47:1e:6e:64:32:7c:77:
                    00:51:02:4f:0e:f7:09:da:5a:0c:8c:f7:9a:00:4f:
                    6e:96:d2:38:db:2b:04:de:16:24:50:d2:90:76:9c:
                    91:c0:83:29:b7:97:14:29:76:75:01:79:f8:8f:36:
                    e1:48:ec:ac:78:c5:8f:0e:10:c9:6c:35:aa:65:9b:
                    fe:ee:eb:f3:42:8b:7f:ad:df:f9:ba:e5:20:4b:a1:
                    72:4c:ed:28:06:a4:a9:96:c5:98:ff:7e:c0:fe:59:
                    f8:00:4d:a2:43:6e:62:ea:31:bf:ea:4d:8a:90:34:
                    27:8f:90:df:b7:84:76:d1:22:58:c3:42:39:76:3c:
                    ed:cf:e8:8c:d3:54:5f:e3:98:31:96:05:5c:39:b2:
                    d3:d0:cd:66:51:d9:77:d5:1b:5c:7b:c4:e9:10:70:
                    d2:df:71:88:7b:88:4a:38:59:4c:10:4e:e8:98:c5:
                    91:5a:4e:4d:7f:bf:17:c5:cd:b5:af:76:f5:07:44:
                    bf:f2:7a:40:b6:07:ee:30:9b:e8:76:42:c8:57:2e:
                    9f:45:a0:9d:60:2a:83:25:d2:35:28:1c:45:23:db:
                    0b:d7:97:9c:5e:c0:f7:e4:b5:44:92:5c:2f:d3:7f:
                    15:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:74:96:11:98:60:D7:8A:40:96:42:20:BD:F1:36:A8:B7:D4:9C:E9
            X509v3 Authority Key Identifier:
                keyid:0B:42:FB:48:31:C1:DA:F2:D9:63:C4:76:38:D7:03:08:6E:EC:A8:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0L7SDHB2vLZY8R2ONcDCG7sqN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:fc:2a:f4:86:51:17:be:ab:9a:be:1b:7e:79:f0:6b:5c:14:
         52:94:35:58:a6:aa:9f:c7:78:ef:fe:3a:aa:86:c9:f3:81:73:
         7f:f5:8a:cf:76:c6:f3:14:27:db:e7:60:f4:aa:81:d3:80:05:
         71:71:d6:e2:76:5b:cd:dc:5e:47:55:c3:db:f4:c3:78:68:b1:
         2c:d3:cc:18:6b:34:72:6e:6b:23:be:7f:a3:c0:fd:33:d2:e5:
         fe:90:23:71:5a:b6:4c:4f:60:2a:c2:3f:d2:16:1a:f6:5b:9a:
         dd:9f:e9:3b:c0:ff:11:45:9e:3e:05:82:e2:3f:d8:31:0f:fb:
         c0:52:c3:b5:a2:6c:17:45:98:df:c3:57:64:dc:ab:51:13:25:
         cc:47:cd:76:8b:3f:bd:cc:ca:e4:75:69:90:6e:e3:29:54:08:
         4b:52:8c:bd:a3:f9:95:67:e6:33:93:c0:f5:d9:14:fa:fd:f0:
         bd:50:1a:9d:b5:c6:ce:95:33:b7:c6:fb:2d:2c:db:55:ed:3e:
         02:41:e3:a6:98:1a:9c:30:45:0c:6c:3d:d2:4e:04:22:62:ce:
         2a:2c:42:f8:c0:25:ff:74:b7:73:09:23:9a:09:70:4e:15:19:
         be:0c:6c:d1:04:6c:82:92:4e:9a:37:31:25:ae:91:bc:3b:7e:
         21:b9:4b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 01:17:34 2025 by rpki-client