Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/557548-d39e-44e0-b7ae-3fb05a0986e7/1/eXvOmMjjpdL3ViPm8jLzz827Uro.mft
File:                     eXvOmMjjpdL3ViPm8jLzz827Uro.mft (raw, json)
Hash identifier:          87LuX2jdxPhqvQGXiudTIR1Bp7lIc1+3bWDqvX5BHFA=
Subject key identifier:   FF:95:67:9B:A6:D2:4F:C2:C8:51:97:38:BC:7F:0B:49:D3:DC:00:13
Authority key identifier: 79:7B:CE:98:C8:E3:A5:D2:F7:56:23:E6:F2:32:F3:CF:CD:BB:52:BA
Certificate issuer:       /CN=797bce98c8e3a5d2f75623e6f232f3cfcdbb52ba
Certificate serial:       01964CD961331560742135A928ECC8305175
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eXvOmMjjpdL3ViPm8jLzz827Uro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/557548-d39e-44e0-b7ae-3fb05a0986e7/1/eXvOmMjjpdL3ViPm8jLzz827Uro.mft
Manifest number:          0920
Signing time:             Sat 19 Apr 2025 07:00:36 +0000
Manifest this update:     Sat 19 Apr 2025 07:00:36 +0000
Manifest next update:     Sun 20 Apr 2025 07:00:36 +0000
Files and hashes:         1: KwgXZqDYcgh4zXYqaxbQknWHXTU.roa (hash: jIwi+9Rze68vMzWY1H0bY4CpBzrr84g1O5yKXA5KfZA=)
                          2: eXvOmMjjpdL3ViPm8jLzz827Uro.crl (hash: nRg+3NzSsWtZP5OsmsYizFjIo+/Wh72sAOJy4yz8AYM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/557548-d39e-44e0-b7ae-3fb05a0986e7/1/eXvOmMjjpdL3ViPm8jLzz827Uro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/557548-d39e-44e0-b7ae-3fb05a0986e7/1/eXvOmMjjpdL3ViPm8jLzz827Uro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eXvOmMjjpdL3ViPm8jLzz827Uro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 07:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4c:d9:61:33:15:60:74:21:35:a9:28:ec:c8:30:51:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797bce98c8e3a5d2f75623e6f232f3cfcdbb52ba
        Validity
            Not Before: Apr 19 07:00:36 2025 GMT
            Not After : Apr 20 07:00:36 2025 GMT
        Subject: CN=ff95679ba6d24fc2c8519738bc7f0b49d3dc0013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0c:92:3e:58:33:d1:70:6f:4e:11:e5:8f:24:
                    c6:6e:c1:6f:bd:6f:cd:56:dc:bd:86:05:e0:8a:80:
                    77:10:60:5d:c3:91:54:1a:0a:b6:1e:16:0d:43:9f:
                    91:95:32:58:82:9d:11:15:c6:23:1c:ca:37:4c:c6:
                    fb:95:09:00:ff:02:c2:34:13:de:b3:46:ae:be:33:
                    12:6a:ec:2c:16:91:7e:4c:7d:03:83:6a:d4:5d:08:
                    7d:ec:e3:6d:70:a1:00:03:6f:4a:a2:13:7a:dd:10:
                    89:40:de:4c:24:66:1d:0f:51:b3:52:47:ba:8f:e9:
                    66:3b:ed:f5:81:91:f6:80:de:47:c1:86:14:f0:7a:
                    4f:92:ce:05:59:b7:ed:42:b3:56:02:1a:f2:94:ae:
                    ab:ed:31:a3:31:8f:ca:27:a5:c6:86:c8:d1:9d:c9:
                    1a:86:f8:68:d9:87:dc:d1:0d:9e:85:a5:ba:f0:28:
                    dd:4d:a3:96:73:6d:18:cd:e9:cf:0b:ae:26:81:5d:
                    72:ec:be:68:90:f0:78:8a:7c:d6:6d:50:fd:e1:1e:
                    bf:6e:e6:30:e7:a2:1a:03:76:b8:03:b6:3a:64:5e:
                    27:c2:13:76:dd:af:3d:66:a2:3d:5b:fb:4e:64:24:
                    f4:58:3f:78:dc:87:a5:7d:1d:37:0c:fd:e9:88:a8:
                    f1:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:95:67:9B:A6:D2:4F:C2:C8:51:97:38:BC:7F:0B:49:D3:DC:00:13
            X509v3 Authority Key Identifier:
                keyid:79:7B:CE:98:C8:E3:A5:D2:F7:56:23:E6:F2:32:F3:CF:CD:BB:52:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXvOmMjjpdL3ViPm8jLzz827Uro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/557548-d39e-44e0-b7ae-3fb05a0986e7/1/eXvOmMjjpdL3ViPm8jLzz827Uro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/557548-d39e-44e0-b7ae-3fb05a0986e7/1/eXvOmMjjpdL3ViPm8jLzz827Uro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:fc:39:47:71:4f:2e:62:14:14:87:87:ee:c5:38:fe:f3:49:
         fe:7e:8a:43:6e:46:f0:32:13:5b:bf:76:23:47:63:02:70:a0:
         a0:2d:c2:47:34:e4:94:16:ed:52:94:bf:2d:f1:40:40:23:f0:
         35:8b:81:d9:e6:68:ff:58:4a:32:53:a5:3f:bd:bd:65:90:ba:
         23:47:ac:e0:05:3e:1c:0d:9a:74:e8:3a:e1:b2:ad:ed:93:8d:
         aa:52:de:82:4e:0a:2a:e0:91:b3:44:88:5f:15:02:01:a7:e6:
         67:0f:a4:55:a9:ed:55:98:84:57:14:d6:50:93:ec:70:7f:72:
         91:3e:4f:36:db:cf:0e:54:6d:89:68:97:c2:9b:17:78:13:32:
         5f:3e:f1:ec:d6:f5:5c:23:15:40:c8:78:80:37:b2:66:9d:b4:
         a6:31:34:f3:47:4a:94:c6:84:6f:3a:94:a3:39:b5:52:d1:c6:
         4d:f6:41:a5:d7:00:07:90:7e:47:f9:52:e9:49:15:22:96:31:
         94:64:24:b8:fc:a7:ac:11:f9:41:6c:9e:92:e1:47:7c:10:a3:
         64:c2:fb:18:a1:40:c0:cf:10:ac:93:6a:c7:39:47:e9:7c:7d:
         ca:6e:e2:11:52:5c:05:29:e8:8b:b6:a6:98:6f:06:17:49:95:
         db:5b:33:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:15:13 2025 by rpki-client