Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/dFYQDLNjsOFKnzhOeowc-aO4W_M.mft
File:                     dFYQDLNjsOFKnzhOeowc-aO4W_M.mft (raw, json)
Hash identifier:          52+JW7+SAW+YyovZThOVGIurxjmNRDrDkvLki54WVzw=
Subject key identifier:   2A:79:04:67:9B:00:D7:80:9D:62:BB:F7:59:6D:BA:EA:2E:6C:67:70
Authority key identifier: 74:56:10:0C:B3:63:B0:E1:4A:9F:38:4E:7A:8C:1C:F9:A3:B8:5B:F3
Certificate issuer:       /CN=7456100cb363b0e14a9f384e7a8c1cf9a3b85bf3
Certificate serial:       0196A79D90A5CDD96A59EC8DB6568600BC1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dFYQDLNjsOFKnzhOeowc-aO4W_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/dFYQDLNjsOFKnzhOeowc-aO4W_M.mft
Manifest number:          0E48
Signing time:             Tue 06 May 2025 22:00:43 +0000
Manifest this update:     Tue 06 May 2025 22:00:43 +0000
Manifest next update:     Wed 07 May 2025 22:00:43 +0000
Files and hashes:         1: 6APrd79kmuyNwpex626uNLGMIX0.roa (hash: 7Zm/lOFTt+AfdsIxcjvvrXgteW7mXkxvg9D1ZZh9It8=)
                          2: dFYQDLNjsOFKnzhOeowc-aO4W_M.crl (hash: cDqRzHuDZBsIRQ0pXY6+k1AumPUXSuvUmc8RH1vWeWk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/dFYQDLNjsOFKnzhOeowc-aO4W_M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/dFYQDLNjsOFKnzhOeowc-aO4W_M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dFYQDLNjsOFKnzhOeowc-aO4W_M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 22:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a7:9d:90:a5:cd:d9:6a:59:ec:8d:b6:56:86:00:bc:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7456100cb363b0e14a9f384e7a8c1cf9a3b85bf3
        Validity
            Not Before: May  6 22:00:43 2025 GMT
            Not After : May  7 22:00:43 2025 GMT
        Subject: CN=2a7904679b00d7809d62bbf7596dbaea2e6c6770
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:55:56:41:69:17:fa:e8:01:a7:65:c3:d2:2b:
                    46:ea:99:1b:98:ae:a8:1f:0f:80:e5:00:d1:30:79:
                    f3:d1:9a:60:e3:3f:aa:e6:9f:d3:76:db:5b:99:9b:
                    92:a7:0c:09:2a:c7:c5:2e:1d:f2:d8:cb:04:ff:b1:
                    74:4a:13:c7:09:a7:8f:3f:29:36:80:ce:33:36:c0:
                    41:9b:2d:de:70:6d:c8:bf:fa:c4:7a:08:46:17:3f:
                    94:25:92:09:21:47:ce:07:3c:60:50:08:34:51:c5:
                    49:d3:34:fc:27:59:cf:cd:86:fb:62:f0:0b:3a:af:
                    18:f8:09:96:e1:7c:96:e9:a4:87:d0:40:20:8d:90:
                    c6:48:b5:c4:4c:fc:17:dd:0c:30:b6:8a:ed:fa:8a:
                    1d:7b:6b:d8:5a:d9:ef:6e:58:ff:f6:28:af:af:7c:
                    e0:6b:b0:0e:70:94:d7:ad:4f:7f:4f:5c:b5:0d:e3:
                    76:01:76:91:6c:d5:7e:18:c4:23:f3:9f:86:1b:6c:
                    65:54:0b:3e:86:c9:e4:78:68:2f:60:fb:c0:f7:88:
                    78:31:19:9b:7e:a7:92:ff:ad:e3:15:e8:23:57:da:
                    bf:b3:de:cd:3f:02:90:0d:d9:cb:8b:51:3b:2f:cf:
                    0a:9a:93:76:9a:7d:94:64:e1:ef:4f:3c:40:7c:c6:
                    ff:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:79:04:67:9B:00:D7:80:9D:62:BB:F7:59:6D:BA:EA:2E:6C:67:70
            X509v3 Authority Key Identifier:
                keyid:74:56:10:0C:B3:63:B0:E1:4A:9F:38:4E:7A:8C:1C:F9:A3:B8:5B:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFYQDLNjsOFKnzhOeowc-aO4W_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/dFYQDLNjsOFKnzhOeowc-aO4W_M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/dFYQDLNjsOFKnzhOeowc-aO4W_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:b3:99:ad:1e:f2:69:7a:ff:2a:35:c1:9c:d1:de:53:5f:db:
         69:c4:bf:e6:13:50:3e:d4:e9:6f:ab:63:ca:a8:65:c9:dd:59:
         b8:ab:3e:7c:bf:ba:c7:84:fd:5d:eb:92:cd:f7:f0:a0:b6:17:
         b8:ac:f6:f4:6e:0d:30:68:cd:eb:be:99:45:0a:db:7c:e2:25:
         fe:e3:88:8d:01:6b:b7:f9:c8:7e:e5:ec:53:d6:d6:b1:fa:29:
         ad:b3:cf:0c:c1:e3:89:00:68:59:05:4b:10:f8:43:c9:ba:37:
         2f:9c:3c:33:f0:c3:2d:78:39:9b:db:82:6f:df:6f:72:80:c9:
         1e:99:60:c0:90:a8:81:b5:76:fb:64:43:8c:4a:8d:aa:5b:87:
         cd:80:74:5d:ab:5d:43:29:91:c1:a6:24:52:86:56:c8:90:07:
         93:6c:89:e0:2e:4e:d4:96:6f:1b:4d:72:0c:b8:28:d8:d8:24:
         3c:d5:ff:8d:00:47:ac:73:f1:16:c4:00:fb:45:bf:1d:b7:fe:
         db:a8:f5:9b:a2:0b:d5:cc:21:49:35:49:46:ad:56:0d:ed:b3:
         7e:b6:51:b5:44:85:af:76:3f:04:55:b1:df:0b:fc:df:83:94:
         98:cd:2b:66:f3:e1:bc:70:10:0b:5a:f8:88:dc:6b:8b:e3:db:
         9a:d0:6e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 05:18:20 2025 by rpki-client