Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft
File:                     4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft (raw, json)
Hash identifier:          VjUFNhlbIL+HXAwC/qbUAQGLts2duM8CIsXANIWX9w0=
Subject key identifier:   E1:CC:82:72:47:B2:95:76:09:8A:25:39:77:2B:6B:4C:DE:7E:2E:39
Authority key identifier: E0:4B:28:A1:9D:BF:53:4A:D6:1C:B0:49:98:6E:54:24:C3:28:4D:E2
Certificate issuer:       /CN=e04b28a19dbf534ad61cb049986e5424c3284de2
Certificate serial:       0196AD68EFE5CBAFC2E3C39C6D6A5B945E68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4EsooZ2_U0rWHLBJmG5UJMMoTeI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft
Manifest number:          0354
Signing time:             Thu 08 May 2025 01:00:57 +0000
Manifest this update:     Thu 08 May 2025 01:00:57 +0000
Manifest next update:     Fri 09 May 2025 01:00:57 +0000
Files and hashes:         1: 2G3KAngu1j7cVjl09bHkVR1Q8mU.roa (hash: U0mdK9ze04Jz/Qx2ufdQLy/tw5yhbjVYG2kiEygUxAU=)
                          2: 4EsooZ2_U0rWHLBJmG5UJMMoTeI.crl (hash: ku2BOcqTb1Ydrznha8GQ7PUVPgCkMOTjTDusFow46cc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4EsooZ2_U0rWHLBJmG5UJMMoTeI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 20:38:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ad:68:ef:e5:cb:af:c2:e3:c3:9c:6d:6a:5b:94:5e:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e04b28a19dbf534ad61cb049986e5424c3284de2
        Validity
            Not Before: May  8 01:00:57 2025 GMT
            Not After : May  9 01:00:57 2025 GMT
        Subject: CN=e1cc827247b29576098a2539772b6b4cde7e2e39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:66:80:23:72:39:34:18:ec:72:8e:99:96:ba:
                    c7:83:7b:6d:b2:54:d8:34:84:07:26:ab:fc:8d:2f:
                    87:f7:d8:6e:29:a7:f8:b0:dd:b9:bf:34:90:cf:8b:
                    5c:2a:7f:07:db:b6:69:29:09:79:b4:53:5b:0e:6b:
                    92:db:2b:ad:12:e3:ec:4a:22:4e:10:a1:88:e9:e3:
                    c8:50:70:fa:cf:1a:70:73:75:df:dd:ab:87:c9:f2:
                    72:e0:dd:c7:79:cb:7e:20:33:8a:11:18:f3:35:cd:
                    de:33:95:5f:9f:0e:06:5d:ab:d0:18:5a:ee:da:20:
                    23:e9:aa:8f:b3:e9:16:f0:f7:a5:25:39:09:02:7b:
                    0c:a3:f3:a3:be:4c:7a:60:8b:a7:f1:f7:80:c4:90:
                    3f:1e:a8:da:ed:a2:54:e6:26:f6:81:7e:27:d3:68:
                    09:66:af:81:fb:d2:98:4d:f1:2e:c7:67:1e:ab:51:
                    1e:1d:72:81:a8:4e:c5:8d:ca:5d:d6:a7:57:d1:6b:
                    94:00:d5:18:21:17:42:37:27:86:22:0c:97:0f:a6:
                    da:88:43:29:ec:d7:0a:70:f3:0a:ed:23:cd:4b:c8:
                    73:e9:19:ca:db:4b:0c:cf:2a:97:3d:87:26:b6:84:
                    f2:01:14:ae:08:3d:0a:65:74:dc:79:cc:39:f3:5f:
                    50:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:CC:82:72:47:B2:95:76:09:8A:25:39:77:2B:6B:4C:DE:7E:2E:39
            X509v3 Authority Key Identifier:
                keyid:E0:4B:28:A1:9D:BF:53:4A:D6:1C:B0:49:98:6E:54:24:C3:28:4D:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4EsooZ2_U0rWHLBJmG5UJMMoTeI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:00:f3:39:b4:d3:07:f6:b8:42:61:97:33:08:a3:6b:e9:45:
         d7:4f:ed:6c:ea:48:fd:85:a8:80:7c:7b:23:a3:9c:67:04:bf:
         d7:18:db:6a:3c:02:8c:57:e0:58:6d:c0:82:19:5b:de:38:29:
         ad:21:64:d7:a8:70:d9:90:34:ec:02:f8:96:74:23:a7:94:f1:
         47:e2:36:06:c1:5b:14:e6:7e:d4:43:40:7e:c5:e0:45:e7:86:
         3e:0e:e5:70:85:85:f9:18:7d:40:19:35:d0:c5:de:78:0c:5e:
         89:7f:00:5b:b6:f7:4e:14:88:a3:61:e9:b9:27:8d:7a:dc:1f:
         03:e2:47:c4:57:33:44:9e:51:a9:81:3d:85:cf:1a:72:e8:c5:
         c8:19:b2:74:84:52:10:ff:53:58:cd:18:61:73:98:71:46:90:
         64:05:10:5e:ad:72:68:59:6c:8a:bc:c2:69:db:1a:0d:16:67:
         88:dc:27:d6:e0:0e:ee:68:39:86:34:56:54:3d:7f:04:78:df:
         cc:e1:0b:c8:4a:a3:4b:dd:68:6b:80:a4:72:0b:25:a4:36:ea:
         03:7a:41:43:0a:35:f1:05:cc:ba:b2:7d:b1:a4:fc:89:d9:01:
         df:e4:7a:f6:47:03:88:a6:a0:42:c9:1c:80:a4:7e:4a:ce:05:
         64:2b:da:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 05:54:43 2025 by rpki-client