Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.mft
File:                     giSLXgiFiWS6K1RzFSAV_VmR_fg.mft (raw, json)
Hash identifier:          p8EbOz73F+9m/IPjobCwUikAcxHznOpArbfFKjMGIfU=
Subject key identifier:   6E:F6:F8:44:F4:63:8C:84:14:D2:A5:6D:D5:46:52:64:F7:8B:3F:41
Authority key identifier: 82:24:8B:5E:08:85:89:64:BA:2B:54:73:15:20:15:FD:59:91:FD:F8
Certificate issuer:       /CN=82248b5e08858964ba2b5473152015fd5991fdf8
Certificate serial:       0196BAEDA362F959EFA4D51D50E83EEAD9DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/giSLXgiFiWS6K1RzFSAV_VmR_fg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.mft
Manifest number:          14C3
Signing time:             Sat 10 May 2025 16:00:58 +0000
Manifest this update:     Sat 10 May 2025 16:00:58 +0000
Manifest next update:     Sun 11 May 2025 16:00:58 +0000
Files and hashes:         1: GpgJajGCbSNl3e4aO7PdAchg1ng.roa (hash: JjeUV08MlhBjZNwlusZZDt6ugsqaNAcVm8lYJFEKoLw=)
                          2: giSLXgiFiWS6K1RzFSAV_VmR_fg.crl (hash: 7NsbLiLrX5aezOhN/epGYzh/NxVUAqFSDFAfdpxNeWo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/giSLXgiFiWS6K1RzFSAV_VmR_fg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ba:ed:a3:62:f9:59:ef:a4:d5:1d:50:e8:3e:ea:d9:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82248b5e08858964ba2b5473152015fd5991fdf8
        Validity
            Not Before: May 10 16:00:58 2025 GMT
            Not After : May 11 16:00:58 2025 GMT
        Subject: CN=6ef6f844f4638c8414d2a56dd5465264f78b3f41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:61:d1:d9:92:c9:c5:37:8d:41:b4:56:03:63:
                    39:31:09:d0:53:db:b8:f3:dc:14:6d:50:85:1d:2a:
                    22:42:59:da:c2:2d:e1:82:f7:4d:e1:5d:d0:74:20:
                    b0:89:cb:42:f6:67:ad:19:48:56:32:0f:71:2f:38:
                    58:95:c0:f1:61:86:f7:9c:09:43:52:8a:3d:fa:7b:
                    87:4a:bc:0d:bf:25:f1:c6:a3:c7:5c:fe:9f:ed:3b:
                    37:f7:67:3c:07:f0:c1:91:55:c5:24:78:79:7b:f1:
                    fd:b7:fa:3f:18:cd:f3:34:7a:d9:8c:fc:6c:52:94:
                    33:24:b6:42:7c:6b:06:54:7e:cd:fd:e3:9c:c1:d0:
                    81:54:b6:7a:fa:f5:d3:5b:9c:a7:e3:c1:aa:ef:1c:
                    64:a0:0f:16:7d:92:dd:5b:97:15:55:5a:7f:76:3e:
                    4d:7e:fe:3c:96:bf:c4:09:59:b5:41:8c:17:b7:61:
                    75:22:36:1b:10:69:1b:5d:48:01:d0:06:e2:4f:e0:
                    45:de:9d:3c:3a:be:1e:01:df:a8:c2:7a:c0:38:7a:
                    2d:8d:d6:4d:92:2b:9f:d0:c3:3b:94:f8:ad:27:1d:
                    ab:98:a7:35:e7:19:75:be:f3:68:22:6c:5a:fa:73:
                    2e:dd:6b:b2:09:cf:b2:25:85:72:99:ce:ba:13:fc:
                    46:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:F6:F8:44:F4:63:8C:84:14:D2:A5:6D:D5:46:52:64:F7:8B:3F:41
            X509v3 Authority Key Identifier:
                keyid:82:24:8B:5E:08:85:89:64:BA:2B:54:73:15:20:15:FD:59:91:FD:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/giSLXgiFiWS6K1RzFSAV_VmR_fg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:3f:2d:4a:08:1c:ce:89:5b:74:a7:57:cd:1e:6d:21:b1:49:
         fa:b1:7e:a6:2d:9f:bb:a5:b1:ea:04:d2:c3:72:db:0d:1a:e6:
         c8:68:ee:41:3b:c8:73:f5:96:15:97:24:9c:c3:cd:cc:97:66:
         5b:ad:b3:02:cf:00:6c:e5:ce:91:61:2d:49:4d:29:97:44:ba:
         07:c1:79:14:fe:97:56:13:0a:5a:0f:fa:81:19:3a:96:9f:5c:
         16:f9:10:2e:e5:21:b5:bb:3e:fb:0e:2f:e4:f4:c0:80:7e:c4:
         b6:43:7b:8c:5e:ae:02:58:38:08:f8:b2:8d:7e:9a:6f:37:49:
         4b:b3:ca:ec:5b:8c:8c:2c:42:1b:2f:8b:d0:36:a5:02:3f:e8:
         f8:95:e7:af:c1:a6:de:d8:5d:36:29:3a:92:2b:3d:73:22:80:
         a1:6a:12:6b:94:e1:89:ae:9c:10:08:f6:8b:11:1c:aa:11:75:
         d8:3d:9e:72:75:f7:c1:06:f7:1b:b2:a2:45:1d:6b:af:03:6d:
         2a:a5:c0:fa:c4:b8:cc:62:e1:88:65:14:b0:1a:0b:c6:8a:d3:
         d5:9b:9a:03:0b:67:aa:1f:85:08:56:36:03:c7:32:c3:b9:e7:
         73:fe:5b:3e:50:7a:1d:63:c5:61:d2:61:46:7c:5c:ac:c0:44:
         f3:9b:2a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:21:52 2025 by rpki-client