Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
File:                     9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft (raw, json)
Hash identifier:          YE6HpuFH3jjMQYWcL2xxupZfCbVkGiEND6iPXxMqP20=
Subject key identifier:   45:6B:FA:FB:54:A1:1D:A5:10:90:FE:B4:99:89:6B:4B:C2:2C:27:A0
Authority key identifier: F5:2E:9A:04:3F:31:28:33:6E:3C:97:C2:54:25:74:C8:AD:92:9A:C9
Certificate issuer:       /CN=f52e9a043f3128336e3c97c2542574c8ad929ac9
Certificate serial:       0196B3D84997936AFFCEF01F27AA61EC56E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
Manifest number:          0593
Signing time:             Fri 09 May 2025 07:00:18 +0000
Manifest this update:     Fri 09 May 2025 07:00:18 +0000
Manifest next update:     Sat 10 May 2025 07:00:18 +0000
Files and hashes:         1: 9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl (hash: ZUHqHLkIDSgwmm/MjYxIk5vvNmT4MJjez6zZJOHL8Ps=)
                          2: OCedJE5LkoowQn54mjjrBJCuPJI.roa (hash: nw4YWjZiCna7KJhUNUrep5sUi3EwU231+kVKK+38ws8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 07:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b3:d8:49:97:93:6a:ff:ce:f0:1f:27:aa:61:ec:56:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f52e9a043f3128336e3c97c2542574c8ad929ac9
        Validity
            Not Before: May  9 07:00:18 2025 GMT
            Not After : May 10 07:00:18 2025 GMT
        Subject: CN=456bfafb54a11da51090feb499896b4bc22c27a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:be:9e:d8:82:26:cd:8c:95:a7:37:19:68:af:
                    b9:49:05:53:a5:01:18:f9:0b:40:53:71:52:ae:27:
                    2b:bb:35:ba:ba:8c:7f:18:bf:68:fa:27:52:27:32:
                    b2:a1:4f:a3:4e:1b:1b:69:a8:24:bf:f3:e2:5e:9f:
                    ee:e3:24:1e:e6:a2:8e:7e:31:41:bf:7d:be:34:24:
                    63:2d:d9:b0:68:0d:cc:5a:e6:92:00:b7:8f:f2:61:
                    27:24:0a:2a:e7:fe:d9:62:6a:1d:ac:d2:d9:ae:94:
                    c5:d6:49:69:3b:04:b5:d1:f7:c6:a2:01:fd:08:5f:
                    a1:e4:bc:0f:90:8f:89:b6:c1:fe:43:af:7f:96:6c:
                    b3:46:70:31:d0:6d:86:06:04:12:b4:ea:10:62:d3:
                    a7:7b:9c:f6:df:b1:66:8e:25:90:1b:fd:4b:e0:ec:
                    d8:4d:16:37:b3:f7:23:0f:b0:6b:6b:3d:72:e6:87:
                    d4:f2:6e:d0:04:ef:3d:1a:b1:93:c8:93:46:15:b8:
                    c1:fa:52:bf:d2:fc:c8:df:45:55:a3:49:a3:47:15:
                    b0:41:f1:42:0c:eb:f6:8f:e9:bc:40:ed:1d:21:4a:
                    2a:71:6b:8e:b1:63:38:47:98:c8:1d:70:5a:a6:b1:
                    50:e4:da:16:39:01:e9:f1:25:58:38:70:24:04:4f:
                    0c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:6B:FA:FB:54:A1:1D:A5:10:90:FE:B4:99:89:6B:4B:C2:2C:27:A0
            X509v3 Authority Key Identifier:
                keyid:F5:2E:9A:04:3F:31:28:33:6E:3C:97:C2:54:25:74:C8:AD:92:9A:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:3e:4d:fc:2e:2f:19:ab:bf:b2:5c:70:cd:87:5a:62:86:85:
         25:b1:2a:fd:a0:8f:5c:4c:cc:2b:e3:d9:87:78:54:a6:94:f5:
         28:9b:11:a7:ce:c6:08:2a:be:80:6e:07:8e:6e:2e:49:6e:93:
         c2:61:68:5d:c9:e2:75:0d:19:2c:7a:b6:ec:1b:6c:9e:f6:28:
         62:8c:cc:aa:8b:b5:93:f6:2f:53:40:81:69:36:b1:bf:ba:68:
         5c:6d:30:39:4b:80:32:5a:33:f5:79:be:1c:06:b8:27:92:00:
         fe:0c:c4:b5:d8:e8:0c:33:55:32:c5:fe:e0:4a:05:26:99:58:
         dc:ea:55:fc:50:8f:a3:23:29:2c:6a:58:08:85:9e:37:b5:b8:
         81:35:d7:50:28:a8:84:93:2d:e4:d0:1b:16:8c:23:ce:1c:6f:
         41:96:ae:c3:2a:c8:76:76:06:36:73:20:01:58:17:49:52:3f:
         5f:b9:8c:65:0f:ac:85:36:a2:5c:a4:a6:bb:10:59:07:ba:15:
         6d:2f:97:58:81:3d:a6:f5:e7:c0:d3:83:f5:08:8f:7c:9e:d6:
         bb:3a:72:72:46:84:60:47:bc:8a:24:05:14:97:25:d5:da:b6:
         82:61:3d:51:89:f7:10:9b:66:66:1c:57:9d:dc:9f:41:76:60:
         27:26:2a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 16:33:04 2025 by rpki-client