Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft
File:                     0ZMX0nI53HsNVBM74aplydwB9DQ.mft (raw, json)
Hash identifier:          xEpBvasjO6FJhSDiZChaJ6C5VcdJ2WN3CyMDmJSazwE=
Subject key identifier:   25:DD:CD:68:A9:76:0F:D9:44:21:F7:6F:FB:5F:38:3D:44:AF:BD:A2
Authority key identifier: D1:93:17:D2:72:39:DC:7B:0D:54:13:3B:E1:AA:65:C9:DC:01:F4:34
Certificate issuer:       /CN=d19317d27239dc7b0d54133be1aa65c9dc01f434
Certificate serial:       0196C0EF053A781B399738307A213ECBF654
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0ZMX0nI53HsNVBM74aplydwB9DQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft
Manifest number:          1078
Signing time:             Sun 11 May 2025 20:00:11 +0000
Manifest this update:     Sun 11 May 2025 20:00:11 +0000
Manifest next update:     Mon 12 May 2025 20:00:11 +0000
Files and hashes:         1: 0ZMX0nI53HsNVBM74aplydwB9DQ.crl (hash: mRJo8KA+ICJR4fta4oJVzoS3w/XKNwQjpJDJD+OyB/0=)
                          2: dP48VWalcUAAFfcn9eWWeMKf0-w.roa (hash: 1XMmQlTq3rn/vph5sokkv8eSVZlOdVkw7fiia74kGx4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0ZMX0nI53HsNVBM74aplydwB9DQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 20:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c0:ef:05:3a:78:1b:39:97:38:30:7a:21:3e:cb:f6:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d19317d27239dc7b0d54133be1aa65c9dc01f434
        Validity
            Not Before: May 11 20:00:11 2025 GMT
            Not After : May 12 20:00:11 2025 GMT
        Subject: CN=25ddcd68a9760fd94421f76ffb5f383d44afbda2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3a:3b:e8:4b:e9:90:08:2f:f9:2e:91:4a:31:
                    66:d9:9d:04:d1:4c:cf:86:4d:ee:b3:c2:23:e8:04:
                    2a:55:2c:b5:69:98:8f:bf:b0:37:7a:96:c4:60:48:
                    7f:50:67:62:aa:a5:71:f4:a7:21:d8:ff:ca:6d:a0:
                    3e:c1:ee:5c:11:59:7c:88:eb:6e:b5:4f:f8:a0:cf:
                    a1:d9:53:21:96:35:45:3e:5c:bc:49:8c:ed:02:28:
                    53:2a:45:3b:66:f6:16:65:31:ce:fb:c0:8f:44:7d:
                    c3:15:6c:4c:98:a6:c6:ad:55:4d:79:66:49:41:5f:
                    1e:ff:aa:19:66:37:e0:17:9e:cf:36:89:e8:01:cd:
                    c8:be:a5:c5:7b:45:41:14:41:38:ad:8a:38:bf:8b:
                    52:1a:69:2f:49:7e:fd:98:84:e1:17:c6:6f:36:8d:
                    05:df:09:0d:6f:32:2f:99:73:6a:b4:4e:7a:3d:d8:
                    ba:43:57:ff:9e:7a:92:9a:e9:8b:8e:7e:e6:97:f6:
                    0d:38:03:f2:67:1b:42:b2:10:4b:b6:68:17:e7:10:
                    fb:75:08:09:62:5b:72:e8:30:74:7c:fc:5b:4a:88:
                    7c:75:93:53:dc:e5:42:8d:15:fc:9e:c6:2c:15:f6:
                    5f:46:f9:53:f0:8f:08:ca:35:d6:49:60:8e:bb:43:
                    bc:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:DD:CD:68:A9:76:0F:D9:44:21:F7:6F:FB:5F:38:3D:44:AF:BD:A2
            X509v3 Authority Key Identifier:
                keyid:D1:93:17:D2:72:39:DC:7B:0D:54:13:3B:E1:AA:65:C9:DC:01:F4:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZMX0nI53HsNVBM74aplydwB9DQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:58:17:9d:67:de:e6:fe:2f:a4:8d:56:17:6a:83:78:8f:73:
         ca:fb:32:77:9a:fa:a1:b7:6d:54:e9:4c:76:56:4f:55:3c:10:
         27:9a:1c:ae:f4:a3:f6:5c:7d:d0:96:e2:70:59:d3:61:6e:4c:
         76:a5:ab:d0:12:ef:8a:21:ec:b3:9f:cb:8c:b6:05:6a:35:b9:
         8d:4f:18:13:4e:26:18:20:c7:e8:63:eb:e2:ac:00:cd:91:60:
         81:c4:e5:dd:e3:7c:24:ce:07:30:9a:e1:d1:e9:d7:36:17:d9:
         7e:7d:13:0b:d5:0a:06:7f:22:fb:b8:d2:da:ee:7c:ba:3c:e8:
         3a:1c:ef:9b:9b:7c:eb:8b:01:3c:c0:fc:cb:db:31:91:9e:92:
         2b:a8:dd:f5:c5:b8:c6:10:55:1a:22:1a:ba:79:b8:b2:b4:5d:
         68:ff:75:c1:31:84:39:8e:b6:7e:69:20:78:30:2b:c4:86:02:
         ef:d0:16:8e:f7:42:9a:6d:0a:a6:09:b4:2a:fb:df:f9:5f:10:
         79:cd:68:0c:1f:61:f7:05:9e:67:76:54:21:27:91:95:8b:6b:
         38:9e:f3:26:e8:b1:18:88:bc:ec:4f:b1:f6:58:aa:7c:2a:d3:
         07:05:69:6d:91:05:86:43:27:c6:63:f6:98:8e:b9:69:ac:85:
         dd:15:18:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:00:17 2025 by rpki-client