Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft
File:                     Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft (raw, json)
Hash identifier:          Xkvd5wdsDjcvLNrQeUnRwYYx1y4wL5gns6d30Lzn9cw=
Subject key identifier:   CB:2E:74:19:D8:4B:98:92:2B:45:A7:C1:43:EF:3B:AB:37:8B:7C:1B
Authority key identifier: 0E:2D:1E:DC:0C:C6:97:74:2C:F4:73:64:BB:1D:11:B8:FF:80:8E:AE
Certificate issuer:       /CN=0e2d1edc0cc697742cf47364bb1d11b8ff808eae
Certificate serial:       0196BFA582A3D7317460F8783885EF6487FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft
Manifest number:          049E
Signing time:             Sun 11 May 2025 14:00:17 +0000
Manifest this update:     Sun 11 May 2025 14:00:17 +0000
Manifest next update:     Mon 12 May 2025 14:00:17 +0000
Files and hashes:         1: C34tazcwNVlNSOFrV60y2M-X8qQ.roa (hash: b9R8fiAJDWhh3NSy/h3YHxxWL9I8BBsmTu4q52FZ+Mo=)
                          2: Di0e3AzGl3Qs9HNkux0RuP-Ajq4.crl (hash: MGsujM2mTdoBB4V7m2UIPqkxRvACeMwqySWHgS8nSkk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bf:a5:82:a3:d7:31:74:60:f8:78:38:85:ef:64:87:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e2d1edc0cc697742cf47364bb1d11b8ff808eae
        Validity
            Not Before: May 11 14:00:17 2025 GMT
            Not After : May 12 14:00:17 2025 GMT
        Subject: CN=cb2e7419d84b98922b45a7c143ef3bab378b7c1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:dd:90:59:89:50:91:60:af:17:98:0d:28:08:
                    13:bd:d3:de:2f:f0:b7:59:64:32:27:7e:07:94:3d:
                    57:f5:27:04:63:fd:4e:9f:96:b9:d2:c8:6d:8f:ec:
                    ac:22:73:a1:81:6c:7e:36:1b:1b:57:79:f4:20:7a:
                    04:68:c9:21:6e:37:c3:a7:3b:04:6e:68:c3:71:5f:
                    ff:8b:e4:b0:e6:b6:3c:34:a5:e8:5c:eb:59:b7:d8:
                    ed:56:4f:eb:40:d2:51:91:37:0e:ff:fd:e8:9d:f0:
                    c1:02:8d:74:15:38:a1:a4:e5:8a:ea:20:5a:62:7b:
                    40:6f:2d:54:e6:70:a7:78:5c:21:3f:82:9c:3d:1b:
                    91:d7:69:e1:83:7f:8e:a3:d5:3f:bb:b7:5b:6c:2d:
                    54:4d:05:3e:87:24:61:31:a9:03:b9:91:46:a8:6f:
                    8a:d9:1a:04:e4:c4:c4:97:73:35:90:82:b9:69:83:
                    46:77:49:1f:a5:fb:4a:06:17:97:a2:1c:51:aa:e7:
                    1c:ce:53:4e:ee:af:0a:16:c4:df:78:58:a2:22:4c:
                    97:02:62:eb:d5:07:6e:3a:45:3f:1b:3b:0d:0a:95:
                    ad:d9:89:cd:37:92:db:eb:e3:ad:6c:c6:b6:eb:97:
                    7e:77:36:7f:5e:ca:8f:2e:47:42:95:2f:0b:91:ad:
                    1f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:2E:74:19:D8:4B:98:92:2B:45:A7:C1:43:EF:3B:AB:37:8B:7C:1B
            X509v3 Authority Key Identifier:
                keyid:0E:2D:1E:DC:0C:C6:97:74:2C:F4:73:64:BB:1D:11:B8:FF:80:8E:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:9e:38:29:a1:5a:c4:b5:f6:5f:ae:41:ac:a5:85:48:6a:cd:
         d5:f9:93:bb:6a:6a:94:2c:44:88:04:b4:4f:5e:7f:50:b4:58:
         31:0f:13:ae:75:18:16:0f:18:54:cf:9b:4e:a1:7d:50:15:de:
         01:43:cc:70:5b:1d:c0:7b:32:98:5e:c9:52:9b:8e:6d:5a:ee:
         5c:8d:68:e4:57:66:b9:2b:de:3c:04:50:89:77:f6:2e:ad:17:
         24:c5:9c:ba:bb:ee:3a:6f:0d:7c:dd:0c:4f:ef:c1:cf:da:5f:
         d6:95:de:ac:db:7c:46:03:52:64:97:e6:3e:96:7a:49:71:7b:
         dd:7b:ab:43:6d:06:3f:26:9a:44:74:c1:45:29:46:55:fb:f6:
         41:34:69:59:91:7e:86:83:65:34:d3:88:fc:46:98:be:66:f5:
         ed:55:bd:9c:a8:d0:29:c4:ff:5d:ea:24:5e:af:71:7d:ae:5f:
         ab:6c:7e:d9:42:fb:d5:48:49:6e:58:a8:68:29:7a:7b:e2:7f:
         b5:7b:c6:d2:3f:98:cd:c0:dd:c9:3d:3c:80:c3:83:ce:b1:f5:
         b2:9f:99:88:d1:c2:d0:c6:13:5f:ef:8e:ec:82:c6:f9:47:70:
         b2:9b:14:8a:3d:6f:c9:da:6c:0b:34:50:73:7b:75:a4:24:77:
         a3:6c:98:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 23:03:37 2025 by rpki-client