Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft
File:                     zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft (raw, json)
Hash identifier:          h/jeeDUTMUwNXLlAGEuUeo425abPjVFWYuL5nXTaps8=
Subject key identifier:   BB:86:F2:99:3B:45:90:10:A9:81:A3:DA:47:A4:FE:39:B5:0D:65:45
Authority key identifier: CE:56:49:DB:BA:59:2F:1C:9F:3F:28:89:BC:F8:1F:D2:25:98:93:67
Certificate issuer:       /CN=ce5649dbba592f1c9f3f2889bcf81fd225989367
Certificate serial:       019644448C14AF47C7662123C82BB76C2CCC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zlZJ27pZLxyfPyiJvPgf0iWYk2c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft
Manifest number:          14F5
Signing time:             Thu 17 Apr 2025 15:01:05 +0000
Manifest this update:     Thu 17 Apr 2025 15:01:05 +0000
Manifest next update:     Fri 18 Apr 2025 15:01:05 +0000
Files and hashes:         1: uYFh_VUWIelVXy_oDiQCWPM5ZAg.roa (hash: HgH2Bf6YxOfhcnv4hc8+KBaYB6o6R1j3iFpA4UR/vJs=)
                          2: zlZJ27pZLxyfPyiJvPgf0iWYk2c.crl (hash: IVRzWJ41Q39Q4+8737IPWdaJel48FGC3cS/fulSQj2M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zlZJ27pZLxyfPyiJvPgf0iWYk2c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 15:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:44:44:8c:14:af:47:c7:66:21:23:c8:2b:b7:6c:2c:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce5649dbba592f1c9f3f2889bcf81fd225989367
        Validity
            Not Before: Apr 17 15:01:05 2025 GMT
            Not After : Apr 18 15:01:05 2025 GMT
        Subject: CN=bb86f2993b459010a981a3da47a4fe39b50d6545
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:56:ba:ac:49:98:36:2b:d0:59:ef:cc:4c:2b:
                    5f:0a:ef:28:ad:aa:d6:0d:7a:f4:4c:da:9c:b9:40:
                    f6:8b:b1:21:dd:0a:00:fa:e8:15:68:2c:f7:67:91:
                    5e:e5:f4:6f:dd:4a:b8:b7:00:4f:15:5f:ab:d5:12:
                    b6:9d:1c:ab:6b:6e:dd:a2:b6:55:c2:a9:ce:6c:ab:
                    ae:18:de:87:6d:15:fb:ad:64:a5:78:2f:f9:26:73:
                    17:37:b8:74:0b:56:5a:bb:ad:50:ee:e2:21:10:18:
                    d8:19:e7:99:29:5a:d9:c5:3b:fd:aa:6f:6f:21:7e:
                    e2:da:a6:09:60:7b:2f:41:18:49:13:0c:bd:26:8b:
                    01:6b:18:66:db:d7:88:7e:7b:5f:c8:b5:78:f9:e8:
                    99:5b:9e:1e:64:d3:7b:93:d2:cc:3a:3b:96:98:87:
                    e1:99:87:9f:50:05:36:68:56:9d:56:52:ff:1a:e2:
                    24:0c:f9:dc:46:35:40:85:37:ef:5c:fc:eb:6e:9e:
                    35:6c:73:07:85:cf:48:f7:b2:db:9c:f1:fc:4d:e9:
                    f1:c3:23:f6:de:fa:5e:a1:b4:c3:b2:ae:46:7f:67:
                    81:30:ba:e7:a5:d8:7c:94:96:f3:da:0f:61:08:0b:
                    6f:cb:c0:49:c8:b6:93:8b:87:f6:35:f4:07:bf:f7:
                    0b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:86:F2:99:3B:45:90:10:A9:81:A3:DA:47:A4:FE:39:B5:0D:65:45
            X509v3 Authority Key Identifier:
                keyid:CE:56:49:DB:BA:59:2F:1C:9F:3F:28:89:BC:F8:1F:D2:25:98:93:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlZJ27pZLxyfPyiJvPgf0iWYk2c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:ff:4e:fe:c6:28:f0:8c:a4:e2:ad:75:04:55:7b:46:3d:12:
         5f:71:58:8c:a9:45:56:db:93:34:3a:0e:48:63:ee:46:e8:b1:
         ab:03:03:d1:eb:58:f4:8e:6a:2a:d6:f0:dc:a0:9d:ad:fb:0e:
         35:19:5e:da:ed:d8:d0:a1:55:39:ee:15:b4:d1:15:8b:9c:44:
         cb:72:75:65:90:a7:58:b2:03:3e:e0:f2:a3:0a:04:31:fb:b6:
         96:a5:f3:81:cf:f7:7e:a9:02:00:85:80:e2:34:d2:fe:40:41:
         c2:bc:e6:a3:ce:a8:8d:15:16:68:70:cb:f6:04:ee:42:92:09:
         4b:68:d1:04:78:22:f9:88:bf:55:02:94:b6:7f:1a:80:89:f9:
         99:aa:2f:32:d0:b1:6d:24:37:8b:19:4f:33:55:89:7a:47:e5:
         26:3c:69:e5:02:0c:c0:b7:88:16:0f:fa:3c:71:c7:fb:77:1a:
         4f:c2:09:f7:82:7b:5a:ef:3e:21:86:e4:f4:08:a8:29:df:9e:
         bb:9b:55:08:5a:11:f4:7d:89:ea:e5:af:aa:a7:23:11:94:f3:
         85:63:01:e9:53:4e:e1:ff:c8:d8:f2:98:3c:a5:3f:ac:97:9b:
         d0:3c:ae:dd:43:26:cb:f8:ca:85:66:a5:58:14:2c:bb:21:4f:
         e6:cf:58:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:20:06 2025 by rpki-client