Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5G6atHypH6EyVlhgvN2aEHugMuQ.mft
File:                     5G6atHypH6EyVlhgvN2aEHugMuQ.mft (raw, json)
Hash identifier:          C00NBNqZ7ddcfwfB5qhfiubJ8tt2ckERimzvpGtmkDY=
Subject key identifier:   42:D8:46:CB:32:1B:98:FF:5E:D9:49:11:4D:46:3A:D6:C0:D2:DB:E8
Authority key identifier: E4:6E:9A:B4:7C:A9:1F:A1:32:56:58:60:BC:DD:9A:10:7B:A0:32:E4
Certificate issuer:       /CN=e46e9ab47ca91fa132565860bcdd9a107ba032e4
Certificate serial:       01965348F56B8E887FF38D2E2607BB246EE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5G6atHypH6EyVlhgvN2aEHugMuQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5G6atHypH6EyVlhgvN2aEHugMuQ.mft
Manifest number:          08E5
Signing time:             Sun 20 Apr 2025 13:00:12 +0000
Manifest this update:     Sun 20 Apr 2025 13:00:12 +0000
Manifest next update:     Mon 21 Apr 2025 13:00:12 +0000
Files and hashes:         1: 5G6atHypH6EyVlhgvN2aEHugMuQ.crl (hash: lUhc4iO+X/YqE+VkAJ7C0e/Iv1jqGEHB622eov1DjXY=)
                          2: ZMyt0wlwwtfEVeBGSMwWH5LMwOs.roa (hash: ZRcLJw84jWUkZxRHh71cpWt8gGeiHiTOOmsOGRDFxnY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5G6atHypH6EyVlhgvN2aEHugMuQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5G6atHypH6EyVlhgvN2aEHugMuQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5G6atHypH6EyVlhgvN2aEHugMuQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 13:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:53:48:f5:6b:8e:88:7f:f3:8d:2e:26:07:bb:24:6e:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e46e9ab47ca91fa132565860bcdd9a107ba032e4
        Validity
            Not Before: Apr 20 13:00:12 2025 GMT
            Not After : Apr 21 13:00:12 2025 GMT
        Subject: CN=42d846cb321b98ff5ed949114d463ad6c0d2dbe8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:66:f6:dc:a7:fb:36:49:e5:84:4b:96:fa:ef:
                    46:f9:25:d5:36:fb:38:b5:8c:5a:c3:ac:49:8d:d6:
                    80:86:16:8a:77:97:7b:ff:dd:37:bc:d6:77:8b:30:
                    e8:ad:3f:61:b0:4b:7a:42:91:04:37:bd:cd:14:0a:
                    d2:1b:d4:ec:f6:b6:c1:c7:76:0e:1b:e2:4a:70:b8:
                    32:23:35:e5:d2:9c:df:fe:a4:16:49:ed:5d:86:7b:
                    1b:8c:0d:3e:cc:68:18:ac:68:da:c5:e7:63:80:df:
                    e0:a7:2d:86:f0:5f:e9:7c:33:34:72:01:9c:ce:72:
                    78:f0:7d:14:40:dc:db:87:70:3c:a5:19:66:25:cc:
                    50:8f:bb:22:2f:32:3e:26:aa:49:57:07:6a:91:3a:
                    59:9d:23:b5:0f:5b:58:d7:95:04:fc:d4:fd:00:26:
                    32:f6:c1:11:39:86:38:2a:fd:96:a9:6b:6c:ea:28:
                    33:ad:c2:e0:69:9f:de:47:6f:34:0a:bd:c0:eb:dd:
                    53:53:a3:ac:c1:9d:9a:d6:1c:35:39:3d:0c:9e:76:
                    be:1e:69:9b:56:b6:b4:50:2b:3c:5f:65:4c:34:51:
                    21:a2:e8:65:06:bd:7a:e2:fd:c9:7b:8a:79:21:c3:
                    6b:cc:53:aa:58:e7:b4:d6:8a:ed:5a:e7:36:67:ae:
                    e3:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:D8:46:CB:32:1B:98:FF:5E:D9:49:11:4D:46:3A:D6:C0:D2:DB:E8
            X509v3 Authority Key Identifier:
                keyid:E4:6E:9A:B4:7C:A9:1F:A1:32:56:58:60:BC:DD:9A:10:7B:A0:32:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5G6atHypH6EyVlhgvN2aEHugMuQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5G6atHypH6EyVlhgvN2aEHugMuQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5G6atHypH6EyVlhgvN2aEHugMuQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:00:17:42:0c:6f:5b:42:db:8d:90:74:b2:97:8d:90:81:18:
         2e:2d:59:8d:6d:1a:21:24:24:ea:45:2c:e6:9e:fa:e5:79:08:
         f7:df:aa:44:95:7c:bd:10:25:ad:35:18:eb:cc:ea:ab:38:a1:
         c3:1f:77:e8:79:83:6e:47:20:ef:84:68:73:9c:1e:5c:5e:0c:
         23:4a:68:ac:40:ac:a2:54:90:1a:e4:0f:db:9f:bf:20:41:d3:
         77:9c:ce:76:43:6e:84:a3:a5:b9:68:71:1f:42:32:84:14:5a:
         7c:ba:75:9c:33:80:8d:86:21:51:f9:9e:c0:6f:67:ea:25:1c:
         1e:a1:ea:05:c2:44:6c:71:c7:04:df:6d:23:65:01:65:bf:cd:
         e8:90:57:5c:18:9f:80:cb:b9:30:5b:b9:7d:92:e8:32:06:a2:
         8d:86:62:74:dc:0a:1c:b0:a5:01:12:07:67:ce:ba:28:0d:ca:
         68:4c:19:ab:b1:8c:5c:d4:b6:46:4f:3f:e8:db:d5:34:8f:75:
         1f:ed:3f:dc:52:e6:32:e5:1e:9a:df:62:37:c7:2f:50:7d:b1:
         8d:77:7a:61:00:3b:38:a7:08:c9:e5:b9:df:fb:ea:42:ef:95:
         87:c5:0e:2a:da:b8:5f:10:be:cf:57:2f:21:76:51:6b:9d:82:
         6b:13:1a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 19:35:08 2025 by rpki-client