Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.mft
File:                     9cNx86NKvxlX0Yld-AY_TWIH7AI.mft (raw, json)
Hash identifier:          +mWKtw8wQY4ZlRoKj5D66qlLYPZCtYYSUG3rK+d7Klw=
Subject key identifier:   67:45:19:E5:2A:AF:D5:E5:6D:19:BE:10:C8:AB:C7:20:67:4D:7B:89
Authority key identifier: F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02
Certificate issuer:       /CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
Certificate serial:       0196B7EC25C9AC8FEC82A908FC66CCE4F65D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.mft
Manifest number:          1572
Signing time:             Sat 10 May 2025 02:00:28 +0000
Manifest this update:     Sat 10 May 2025 02:00:28 +0000
Manifest next update:     Sun 11 May 2025 02:00:28 +0000
Files and hashes:         1: 9cNx86NKvxlX0Yld-AY_TWIH7AI.crl (hash: DOOgP+bewRdTfjNq12gCLDfaKRru8vUszcBRVyu0C08=)
                          2: FZ0KknIhlejaSfjNGQ9RwBcWEtI.roa (hash: EXRrJEXVP7rdDwQuvA0Wxw32aRD+U0gT9dH37IYXXsA=)
                          3: PcLN4OCrAYo7gp9-LrNRS28FuGA.roa (hash: 4PVTYuLNKNpIeRdCU1ysaHpHPoiG6A7KV2YGI8bMc1w=)
                          4: Rowc--7buNg_Ew_zrmynFHimxmQ.roa (hash: tRqjTRWW7K8WV4ruLRwNapxECkPe5ofBmkCYh5TfGtI=)
                          5: dHl1LQzEJUpKi2KNatIsOTvown8.roa (hash: iN9UZITbk8Ct82GnunVun5xdzK17nQf8SgPjAvRak5s=)
                          6: ubO5COeLYEj8EUH84jT31h_xw1g.roa (hash: s3liWR9u5QAr3kzTofUM8+A1nG9imw9GL31c3qivTBw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 02:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b7:ec:25:c9:ac:8f:ec:82:a9:08:fc:66:cc:e4:f6:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
        Validity
            Not Before: May 10 02:00:28 2025 GMT
            Not After : May 11 02:00:28 2025 GMT
        Subject: CN=674519e52aafd5e56d19be10c8abc720674d7b89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a1:7c:b9:88:4a:cf:b5:ce:e9:9f:8d:1a:ac:
                    a0:b2:e7:07:65:f0:c9:17:47:c9:d0:67:4c:e7:a0:
                    6a:83:46:0b:e4:5d:0c:f6:a7:34:e6:31:f8:e7:2e:
                    9f:7e:15:26:8a:a7:a9:ed:da:7a:77:c6:cc:c2:f3:
                    c4:70:e3:b0:db:3b:8c:4a:e5:68:79:9f:1b:6a:f7:
                    44:7c:73:c4:15:33:95:46:96:15:3b:85:22:fe:51:
                    69:a8:f4:84:1c:99:51:22:02:b1:0b:1d:4d:de:82:
                    18:9f:4c:9e:93:bd:ec:2d:c1:aa:61:21:4c:b4:fc:
                    0e:d6:41:8a:d0:c2:ee:6a:0f:48:f7:e9:e8:c4:7b:
                    85:40:a1:f2:4f:2a:ab:31:bc:b8:39:91:0a:19:bf:
                    a7:3e:25:f1:ce:a4:22:91:26:3b:47:41:17:9e:77:
                    93:63:17:53:de:c9:b5:36:f2:93:b6:2b:f8:0c:ee:
                    5a:16:0c:c7:fa:6b:23:07:3f:b7:bc:a2:7d:c6:a0:
                    c8:01:00:c0:21:3d:42:fa:c7:76:54:5c:bb:4a:3f:
                    1a:a1:84:96:f8:3b:1d:29:3e:bc:5c:0e:64:15:4e:
                    e8:d0:d2:cb:16:b4:1f:75:68:8d:ec:27:b7:56:34:
                    79:d9:bd:f5:b2:0a:9c:38:c9:1f:db:7d:8c:b6:27:
                    14:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:45:19:E5:2A:AF:D5:E5:6D:19:BE:10:C8:AB:C7:20:67:4D:7B:89
            X509v3 Authority Key Identifier:
                keyid:F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:5d:43:e1:62:10:09:c6:85:40:d5:5f:1d:32:ab:33:ef:b0:
         d4:0e:a2:0a:20:30:c5:c4:29:16:1e:10:05:47:e7:f5:0c:3a:
         77:f6:8d:c7:d9:2b:12:6e:53:bf:b6:e3:18:f8:47:0f:18:de:
         ad:85:ca:ee:33:a9:e1:70:bd:76:dc:15:ca:18:76:46:b1:14:
         2b:d9:06:f0:5e:92:3d:f7:21:df:6c:13:10:de:b9:c3:7f:fd:
         a8:c4:7f:5f:70:32:7b:b5:64:76:5f:c1:e5:0f:55:36:74:fb:
         b2:95:ad:39:64:fc:9e:a4:56:72:ed:09:62:8a:08:2a:e6:bf:
         48:b6:bb:9c:4b:92:d6:b3:c3:2a:39:d8:88:30:a2:c8:4c:b2:
         4b:a9:96:a5:eb:b6:d9:48:0e:b1:78:a5:8e:40:38:57:c0:8b:
         7f:93:72:9d:6d:2d:60:eb:6e:ba:b1:92:58:f2:d6:58:82:08:
         67:31:12:12:e7:a1:dc:46:15:2d:a0:6c:43:37:d1:81:52:46:
         aa:01:63:9a:b5:cc:b5:21:e3:bd:b1:28:6c:3c:bd:6c:79:8e:
         48:2c:e7:ad:87:b8:aa:83:c7:ce:1b:32:19:b3:2f:e0:77:e2:
         74:c7:8d:6f:46:cd:dd:aa:d5:67:b7:23:b1:49:a6:fe:7f:08:
         76:ab:eb:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 07:34:18 2025 by rpki-client