Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.mft
File:                     MZtnnBRoEIny0HeG3wT3eddBwRo.mft (raw, json)
Hash identifier:          pHflzrAYVQ0TPFATCNYZXUbsNA0pPnZTd7BJh8tUfw4=
Subject key identifier:   EF:2C:C5:09:87:CC:50:0E:85:59:B5:BA:CC:B9:D8:46:02:7B:CA:D2
Authority key identifier: 31:9B:67:9C:14:68:10:89:F2:D0:77:86:DF:04:F7:79:D7:41:C1:1A
Certificate issuer:       /CN=319b679c14681089f2d07786df04f779d741c11a
Certificate serial:       0196C0B82BB0F8D0BF830E049B21C292C0E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MZtnnBRoEIny0HeG3wT3eddBwRo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.mft
Manifest number:          0F30
Signing time:             Sun 11 May 2025 19:00:17 +0000
Manifest this update:     Sun 11 May 2025 19:00:17 +0000
Manifest next update:     Mon 12 May 2025 19:00:17 +0000
Files and hashes:         1: MZtnnBRoEIny0HeG3wT3eddBwRo.crl (hash: v9YVfk+mjSoBQzxhYuHsG0QF0XIvNQDg5C0NJXL1pmE=)
                          2: ieLSuIB6mXBKJCQeWp_N4zpRwwc.roa (hash: nbmCndcHBfvvgTeoIuhU4ac4+KNWQuh73nRAwrBR57A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MZtnnBRoEIny0HeG3wT3eddBwRo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c0:b8:2b:b0:f8:d0:bf:83:0e:04:9b:21:c2:92:c0:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319b679c14681089f2d07786df04f779d741c11a
        Validity
            Not Before: May 11 19:00:17 2025 GMT
            Not After : May 12 19:00:17 2025 GMT
        Subject: CN=ef2cc50987cc500e8559b5baccb9d846027bcad2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d2:73:e6:60:b4:dc:d4:f4:44:a4:79:4f:6a:
                    d0:16:2a:2d:88:a8:15:47:35:48:5f:67:76:8b:93:
                    f1:3a:fc:59:65:e5:70:60:96:68:82:82:e5:44:7a:
                    15:de:c2:3f:90:09:e6:42:6d:20:3d:ce:ed:cb:98:
                    3f:fc:71:52:b0:6c:ef:7e:ca:f6:33:89:0d:59:74:
                    6a:08:e7:91:b2:1b:01:62:c8:e2:49:6a:ff:fd:18:
                    c7:5a:87:54:82:42:c3:28:3e:58:bc:e7:b6:91:d8:
                    19:0c:4e:2d:c9:76:53:43:0e:19:a7:14:4b:1f:a7:
                    0c:5f:40:cd:99:22:09:ab:45:55:08:7b:46:22:85:
                    7c:b5:01:9b:3b:a0:5f:b1:1d:f1:9e:6f:f8:37:fe:
                    fb:fc:72:7a:8c:42:a7:a5:cd:f6:f5:ba:ef:80:d0:
                    74:4d:57:fb:5c:ad:4c:fe:a0:45:fb:76:22:83:1d:
                    4b:4e:d4:dd:1e:ed:77:80:20:eb:3d:33:e8:ed:a5:
                    a5:71:ab:fc:f1:32:45:16:5f:67:4a:93:a9:30:6e:
                    d1:f6:5d:51:95:2a:f2:4a:a8:fc:ea:f6:73:89:89:
                    6f:da:66:0f:d2:33:f0:01:22:54:42:73:c4:c3:a8:
                    de:ee:ad:b5:f0:aa:99:74:93:c7:25:cb:3b:1b:44:
                    e2:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:2C:C5:09:87:CC:50:0E:85:59:B5:BA:CC:B9:D8:46:02:7B:CA:D2
            X509v3 Authority Key Identifier:
                keyid:31:9B:67:9C:14:68:10:89:F2:D0:77:86:DF:04:F7:79:D7:41:C1:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZtnnBRoEIny0HeG3wT3eddBwRo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:e8:ac:71:35:58:37:f5:ac:4c:77:dc:4f:8a:79:ce:33:69:
         29:12:6b:80:86:ea:fd:36:e2:a9:f0:33:2e:be:f1:8e:80:d6:
         4f:c6:1d:72:32:a1:15:c8:6c:5a:bb:7e:2f:e5:74:30:55:46:
         df:5c:a4:ac:0a:ee:f0:e3:cf:7d:d5:4e:0e:67:45:ad:fe:0f:
         a0:d8:2f:c1:1f:ff:12:8b:b6:fd:8b:2b:db:a0:3a:64:b9:a1:
         0f:4e:ca:f7:ba:de:ad:99:12:e8:6e:01:42:c5:e4:8e:f9:4b:
         91:cc:4c:45:1b:88:6f:8c:a9:ac:d9:be:a9:f4:60:33:c0:88:
         bd:94:19:25:33:bd:de:8d:9a:d4:0c:96:f4:3b:70:a0:b7:7f:
         d2:8a:bd:c4:10:f8:ba:46:9d:82:d8:e7:b7:2e:5e:cd:cf:2c:
         fb:f7:6b:55:2f:b2:ef:6b:b7:31:f1:c2:fa:b6:4d:a0:e0:74:
         c5:9c:cf:c6:3c:56:a6:2d:9a:0b:c4:01:ce:c9:ca:68:cc:7f:
         27:f2:8c:79:0a:e8:10:30:70:ef:b5:d4:0d:95:8e:e8:f5:fc:
         a2:51:c7:80:90:05:51:e7:07:a2:9e:7e:d1:81:23:62:59:bd:
         3a:9a:4f:bb:7f:1a:de:44:5d:e4:6a:d5:7b:ed:0e:6c:46:d3:
         58:ee:19:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 05:15:00 2025 by rpki-client