Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/L_vZ3o2JUmxaSadmwfSF8J9akWY.mft
File:                     L_vZ3o2JUmxaSadmwfSF8J9akWY.mft (raw, json)
Hash identifier:          AXFEwYt+KLto//gW6NFjCLED4uW7CCsfq0TT9E2qKzY=
Subject key identifier:   E5:78:25:BB:80:69:DA:84:4D:A2:1D:91:60:BF:AA:71:EB:49:71:03
Authority key identifier: 2F:FB:D9:DE:8D:89:52:6C:5A:49:A7:66:C1:F4:85:F0:9F:5A:91:66
Certificate issuer:       /CN=2ffbd9de8d89526c5a49a766c1f485f09f5a9166
Certificate serial:       01974A0CC900809C8B9B70DBDB5FB1498752
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L_vZ3o2JUmxaSadmwfSF8J9akWY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/L_vZ3o2JUmxaSadmwfSF8J9akWY.mft
Manifest number:          0836
Signing time:             Sat 07 Jun 2025 11:00:41 +0000
Manifest this update:     Sat 07 Jun 2025 11:00:41 +0000
Manifest next update:     Sun 08 Jun 2025 11:00:41 +0000
Files and hashes:         1: L_vZ3o2JUmxaSadmwfSF8J9akWY.crl (hash: TlWE3m2uGkhYF2+d13yRf23Yl3089VnbW/ReIxYPywc=)
                          2: mXwM3P_PQQyVSERAjNUZUTUhWjg.roa (hash: 4+JoMMio3r7vvH6PXd1vvlGKdXZmMUa4KFkXT7FGKzk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/L_vZ3o2JUmxaSadmwfSF8J9akWY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/L_vZ3o2JUmxaSadmwfSF8J9akWY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L_vZ3o2JUmxaSadmwfSF8J9akWY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:0c:c9:00:80:9c:8b:9b:70:db:db:5f:b1:49:87:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ffbd9de8d89526c5a49a766c1f485f09f5a9166
        Validity
            Not Before: Jun  7 11:00:41 2025 GMT
            Not After : Jun  8 11:00:41 2025 GMT
        Subject: CN=e57825bb8069da844da21d9160bfaa71eb497103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:15:8d:5e:9b:9f:d5:c3:d5:be:8c:b1:af:a3:
                    35:b2:8c:c3:61:ce:af:0f:2e:6b:e7:50:5d:75:f4:
                    ad:a2:3e:76:18:52:7d:7a:24:7a:98:a2:7b:3c:e6:
                    a9:9d:54:42:6e:cf:6f:e8:0a:87:2a:d7:7e:f2:4d:
                    34:6e:29:76:f3:f0:9b:21:48:ab:f5:cc:9c:cc:22:
                    c6:2c:6e:23:8c:2b:e7:db:e0:fc:40:8d:0c:f1:ca:
                    94:0c:ee:21:eb:a1:96:cd:70:30:fa:51:ae:7b:2b:
                    b2:e0:f3:05:f3:c2:07:f2:d4:ca:05:0b:ee:74:15:
                    92:06:e6:1d:ce:43:06:14:df:49:95:6c:2a:9e:b6:
                    c4:7b:d6:f6:9d:f4:18:91:ce:08:78:7d:ca:bf:f4:
                    8f:6c:6a:88:26:d8:02:f9:80:9b:7d:f1:ea:6b:96:
                    5f:d2:68:5e:fd:b0:50:0a:8a:29:1b:c1:4a:51:bc:
                    cf:19:8e:b5:08:d6:4f:d9:d4:76:24:3b:3d:fe:4d:
                    f7:2a:fa:be:9b:02:e1:e5:3f:f8:fe:44:c8:db:4c:
                    95:5d:87:10:f7:b0:34:3d:11:8f:b6:a9:be:6c:40:
                    e8:cb:69:ef:e8:86:0a:2d:73:99:ba:5d:d0:e3:30:
                    be:45:27:79:44:92:a4:30:ac:f2:dc:f0:0a:f6:77:
                    ba:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:78:25:BB:80:69:DA:84:4D:A2:1D:91:60:BF:AA:71:EB:49:71:03
            X509v3 Authority Key Identifier:
                keyid:2F:FB:D9:DE:8D:89:52:6C:5A:49:A7:66:C1:F4:85:F0:9F:5A:91:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L_vZ3o2JUmxaSadmwfSF8J9akWY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/L_vZ3o2JUmxaSadmwfSF8J9akWY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/L_vZ3o2JUmxaSadmwfSF8J9akWY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:05:16:a9:b8:2c:fc:a1:c9:c5:6a:0f:42:df:7c:5a:57:d7:
         c2:ed:7b:d6:68:89:24:77:e8:df:31:e5:e3:31:67:ab:e7:18:
         9a:58:c1:ab:db:46:65:76:c5:bf:1b:17:5c:7f:8b:c6:e6:18:
         f2:ba:33:63:e8:e3:40:9a:f6:73:db:69:e9:eb:4c:45:b0:0b:
         39:82:67:0e:54:63:dc:a0:71:71:00:54:2f:79:f6:68:5d:02:
         82:9a:bb:42:54:d1:ea:ce:e0:e5:e3:70:fd:21:57:b3:79:95:
         52:f0:2f:b0:7f:d1:c4:c4:85:a5:91:db:a3:7d:72:09:4f:e9:
         70:86:9f:5a:d5:8a:34:30:66:b7:d3:c1:1a:0e:de:df:e3:fb:
         08:a2:40:f9:de:78:f8:98:e2:0b:1b:fd:24:77:00:32:d5:2e:
         ad:d3:13:da:bb:98:cb:f1:60:63:88:da:59:75:0a:47:fe:e9:
         3f:bc:48:13:60:3d:f5:5b:8d:d5:de:ab:ee:84:15:af:8a:ac:
         be:65:bc:05:09:ac:e5:0e:4c:2e:ac:f2:c7:29:cf:42:b3:97:
         fe:3b:ea:09:8a:20:ce:bb:d6:80:fc:24:c7:38:57:5c:4d:e5:
         a2:19:cc:bc:05:ee:8c:7f:cf:c3:57:84:73:f7:ba:22:e3:ff:
         db:12:ee:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:49:01 2025 by rpki-client