Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
File:                     2P9x8rGo1ir0Rqkror3qM_m2ndw.mft (raw, json)
Hash identifier:          HZMsjQXPMd5+uvPa7/93kiAYv3AO7yofLF56cxgbLXU=
Subject key identifier:   57:77:88:9F:4F:EF:2D:A4:68:F2:77:DF:86:01:0E:46:68:53:86:4E
Authority key identifier: D8:FF:71:F2:B1:A8:D6:2A:F4:46:A9:2B:A2:BD:EA:33:F9:B6:9D:DC
Certificate issuer:       /CN=d8ff71f2b1a8d62af446a92ba2bdea33f9b69ddc
Certificate serial:       0196A12D3BEFC5AC6E5E533BC62923BDC894
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
Manifest number:          0C6A
Signing time:             Mon 05 May 2025 16:00:17 +0000
Manifest this update:     Mon 05 May 2025 16:00:17 +0000
Manifest next update:     Tue 06 May 2025 16:00:17 +0000
Files and hashes:         1: 0BDV4PoV5X4F__dwougvjtVPUss.roa (hash: 5WR5nSOIx+2EG8VqhNW6h1a6KSmwaUeuiPobGGbu1LU=)
                          2: 2P9x8rGo1ir0Rqkror3qM_m2ndw.crl (hash: 8dKonq0xdQoKN7ZtoCV285FtBxnIu/lPtt14rkWypHo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a1:2d:3b:ef:c5:ac:6e:5e:53:3b:c6:29:23:bd:c8:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8ff71f2b1a8d62af446a92ba2bdea33f9b69ddc
        Validity
            Not Before: May  5 16:00:17 2025 GMT
            Not After : May  6 16:00:17 2025 GMT
        Subject: CN=5777889f4fef2da468f277df86010e466853864e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:41:31:17:f3:c0:2a:98:d7:63:01:0e:ac:06:
                    c0:48:fe:ed:5c:d5:42:58:3e:61:c4:5e:b5:40:64:
                    87:ac:37:94:64:1b:4d:cc:a0:49:1d:b7:ae:81:a3:
                    0b:a0:28:9a:cf:2d:1f:ef:fc:cf:87:ed:15:e9:b7:
                    32:f6:57:1e:77:28:47:87:a6:21:8f:04:60:ef:dc:
                    55:cf:92:c3:d5:10:76:e8:b2:37:d9:4e:5b:de:28:
                    82:4d:1f:68:b3:be:0b:86:26:b3:03:5d:b1:a8:df:
                    d3:65:ef:19:e2:2e:e8:d0:01:9c:9b:08:ef:eb:a6:
                    e9:6a:49:b1:31:83:c6:01:9c:3b:45:e0:7c:65:0b:
                    aa:06:9f:53:86:a8:c3:3e:7e:89:0f:9f:71:ca:c3:
                    83:88:b8:9d:46:65:e3:8f:c0:6c:03:50:62:ee:1d:
                    4d:f1:df:1e:c1:a2:27:ff:9e:7c:15:e7:24:f8:4c:
                    bc:1b:41:c8:63:fe:3a:40:b5:fd:eb:af:c6:56:20:
                    de:ef:de:a8:5b:c3:57:55:9d:82:9e:46:ce:21:1b:
                    9d:6d:c3:92:66:72:31:e8:64:f2:e3:31:15:df:0c:
                    40:8b:d6:ae:20:c1:dc:5c:65:5b:7c:94:eb:02:03:
                    02:de:31:ed:9f:0f:e1:e7:a3:64:7e:3e:6e:7b:46:
                    17:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:77:88:9F:4F:EF:2D:A4:68:F2:77:DF:86:01:0E:46:68:53:86:4E
            X509v3 Authority Key Identifier:
                keyid:D8:FF:71:F2:B1:A8:D6:2A:F4:46:A9:2B:A2:BD:EA:33:F9:B6:9D:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:09:76:1a:58:1f:83:0d:08:c2:f0:3b:f3:2e:99:e6:7f:00:
         87:75:6c:44:e3:e2:d5:5c:1b:1f:23:9b:6e:8d:e2:d2:95:a1:
         4a:c6:f9:bc:89:a9:ce:77:e8:08:89:f5:2b:f9:e9:eb:9a:bb:
         97:c4:76:cf:d2:f1:50:54:b3:15:43:3c:a8:92:cc:1f:eb:a8:
         4e:74:1e:19:e8:b3:ed:ab:2c:95:3c:cf:27:06:bc:fa:21:89:
         03:5a:4b:b5:52:fb:8a:aa:92:d3:e7:e6:7b:3b:bb:cc:9b:3e:
         86:fc:49:6e:be:55:d0:1f:5d:50:33:f6:36:99:91:7c:f3:8f:
         5b:0e:7c:67:aa:a3:50:c4:69:dd:b0:a5:e2:29:90:72:5f:96:
         e9:93:ac:ee:3f:59:2b:27:58:52:24:7b:8b:a1:93:6b:75:d5:
         2d:10:a1:06:f7:90:4e:70:01:27:57:1d:85:11:f8:c1:8c:4e:
         98:98:bf:97:89:6e:e6:fa:fe:9e:0c:62:99:5e:67:03:97:bf:
         bc:53:19:53:22:4a:ab:62:67:a0:41:c8:af:08:4e:35:db:ac:
         ed:f9:6d:34:6e:c3:59:20:74:a5:60:70:5a:14:43:9b:ac:5b:
         f5:1a:7d:c4:9b:16:87:ef:83:9c:31:9f:8d:1c:f8:35:b3:ac:
         4c:4a:f6:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 17:50:17 2025 by rpki-client