Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/43f26f-1b4e-4426-bf50-c4ba61e5a210/1/Meu7n8CfN9PdAUG8sKZ-yDt4CB8.mft
File:                     Meu7n8CfN9PdAUG8sKZ-yDt4CB8.mft (raw, json)
Hash identifier:          /M4BOR8R6ZoSLgGTww7qO/gHguxUZ1Vxfr2SMnhOT7c=
Subject key identifier:   BA:37:F8:16:A2:1E:13:5E:DC:3A:33:9B:FF:16:4F:FA:0E:98:81:48
Authority key identifier: 31:EB:BB:9F:C0:9F:37:D3:DD:01:41:BC:B0:A6:7E:C8:3B:78:08:1F
Certificate issuer:       /CN=31ebbb9fc09f37d3dd0141bcb0a67ec83b78081f
Certificate serial:       01969FAD242AFFD188EFB2172B54FC7546C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Meu7n8CfN9PdAUG8sKZ-yDt4CB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/43f26f-1b4e-4426-bf50-c4ba61e5a210/1/Meu7n8CfN9PdAUG8sKZ-yDt4CB8.mft
Manifest number:          0498
Signing time:             Mon 05 May 2025 09:00:46 +0000
Manifest this update:     Mon 05 May 2025 09:00:46 +0000
Manifest next update:     Tue 06 May 2025 09:00:46 +0000
Files and hashes:         1: Meu7n8CfN9PdAUG8sKZ-yDt4CB8.crl (hash: Hb9IQvfos27TdVPF5Eqtqu/cWASRsr6O90idyELiN2U=)
                          2: xhSFftcSHe4vMiLLxv0i7laBOgA.roa (hash: zpNOzm+oNtSw/P+tV0FVybfaNaCxifuqh3XesCNdYM8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/43f26f-1b4e-4426-bf50-c4ba61e5a210/1/Meu7n8CfN9PdAUG8sKZ-yDt4CB8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/43f26f-1b4e-4426-bf50-c4ba61e5a210/1/Meu7n8CfN9PdAUG8sKZ-yDt4CB8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Meu7n8CfN9PdAUG8sKZ-yDt4CB8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 09:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9f:ad:24:2a:ff:d1:88:ef:b2:17:2b:54:fc:75:46:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31ebbb9fc09f37d3dd0141bcb0a67ec83b78081f
        Validity
            Not Before: May  5 09:00:46 2025 GMT
            Not After : May  6 09:00:46 2025 GMT
        Subject: CN=ba37f816a21e135edc3a339bff164ffa0e988148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:07:66:ba:41:51:d9:f0:f8:f3:60:0a:27:44:
                    2f:b8:b8:cc:13:5e:25:75:0b:49:1a:11:65:a0:8e:
                    df:ed:a6:3b:10:a0:14:72:99:fa:c4:12:40:0b:a6:
                    0a:80:11:55:e1:3e:f1:ff:1b:73:57:d5:42:02:2f:
                    e0:4d:23:a1:f3:b8:bc:26:55:22:35:41:cd:a4:73:
                    13:c1:0d:f7:78:c5:f5:e4:99:22:19:d6:a3:e6:76:
                    d0:68:c5:77:63:26:ec:bd:f7:70:95:dd:90:ed:4c:
                    6b:85:d0:12:19:8d:b8:8e:1f:3b:3e:fc:eb:1c:f8:
                    df:e3:ec:09:bb:2a:b0:30:65:73:25:d7:77:e9:42:
                    09:62:2e:9b:c6:0c:de:bc:b5:e3:be:e3:3c:27:06:
                    06:9e:74:7b:08:b0:15:17:33:d7:14:2f:20:89:38:
                    2f:eb:5b:3c:40:40:dd:50:bd:ab:4b:bb:7a:6b:09:
                    68:ef:14:00:bc:b1:e6:cf:3d:28:85:f4:75:b6:b6:
                    52:a1:26:9c:47:02:7a:6e:af:8d:7b:b9:90:3a:0e:
                    77:6c:48:12:d3:c3:0b:68:31:8f:5c:17:1f:10:c0:
                    79:d1:ab:13:44:09:cd:51:9b:b6:88:1c:3f:48:a4:
                    cb:c3:95:29:34:0a:37:58:7f:6c:08:ee:34:ac:66:
                    71:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:37:F8:16:A2:1E:13:5E:DC:3A:33:9B:FF:16:4F:FA:0E:98:81:48
            X509v3 Authority Key Identifier:
                keyid:31:EB:BB:9F:C0:9F:37:D3:DD:01:41:BC:B0:A6:7E:C8:3B:78:08:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Meu7n8CfN9PdAUG8sKZ-yDt4CB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/43f26f-1b4e-4426-bf50-c4ba61e5a210/1/Meu7n8CfN9PdAUG8sKZ-yDt4CB8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/43f26f-1b4e-4426-bf50-c4ba61e5a210/1/Meu7n8CfN9PdAUG8sKZ-yDt4CB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:14:fb:a0:a5:38:31:f1:38:ee:b5:ca:61:60:da:6f:cf:85:
         87:a7:c4:fb:95:81:6d:9e:59:c4:4e:68:71:19:6b:c9:43:32:
         52:22:d2:0d:85:3e:b8:8a:99:9e:bc:95:16:93:14:a7:10:52:
         fa:0c:e2:81:32:c4:08:20:95:ba:23:e2:0b:97:02:ed:9f:45:
         90:1f:d8:0a:31:65:3c:68:4c:1f:20:08:56:ff:17:76:e8:16:
         bd:1d:54:96:f3:ca:cc:eb:2c:64:63:2b:cd:e5:98:a7:71:69:
         36:8f:59:7e:6b:f2:6b:e9:62:60:98:fe:4e:e8:2a:1b:3a:e1:
         fb:cb:7c:28:67:d1:cf:99:fc:6b:9b:d3:eb:c9:98:fc:66:08:
         be:e9:2e:55:fa:f4:41:ff:d2:d8:50:bb:ac:c9:f6:49:01:26:
         a0:81:10:75:38:e7:14:95:2d:72:e5:89:7a:c8:45:1c:82:9d:
         41:f3:0f:86:ca:f7:52:67:1b:11:32:89:b3:98:77:1c:64:1a:
         e4:78:98:a3:6c:97:cc:64:3f:8f:e4:3e:e8:0a:73:7b:cf:07:
         93:f3:5d:06:70:5f:d6:13:2b:ca:84:06:26:01:36:ce:31:e5:
         b0:39:b2:6a:08:79:ed:a1:48:b6:75:c5:2f:c0:3c:38:99:e5:
         3e:c9:44:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 18:42:06 2025 by rpki-client