Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft
File:                     cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft (raw, json)
Hash identifier:          5YL9PPdY7iZdF4XB6zVMiZBChEUGd0IeaSDUoEVJdkQ=
Subject key identifier:   11:F4:AF:55:9D:EA:36:54:E8:14:99:63:64:11:A7:3E:88:10:EA:05
Authority key identifier: 72:E1:2A:38:76:FF:7B:D0:0D:9D:9E:BB:97:2A:B1:E6:21:EA:1E:8D
Certificate issuer:       /CN=72e12a3876ff7bd00d9d9ebb972ab1e621ea1e8d
Certificate serial:       01958F610A25E972C343A2A7A563E309ECC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cuEqOHb_e9ANnZ67lyqx5iHqHo0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft
Manifest number:          142A
Signing time:             Thu 13 Mar 2025 12:00:56 +0000
Manifest this update:     Thu 13 Mar 2025 12:00:56 +0000
Manifest next update:     Fri 14 Mar 2025 12:00:56 +0000
Files and hashes:         1: cuEqOHb_e9ANnZ67lyqx5iHqHo0.crl (hash: FDdGycwLQaH8fOAHwWUZB+nod62y1MT9H1OEGpIVEiY=)
                          2: daRkFVsWIwe8tAsklauoDwt6UpA.roa (hash: a6fXOEYxSdy4VfRiyyu63eijEDfNFxmj7t/XlgH/vhk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cuEqOHb_e9ANnZ67lyqx5iHqHo0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Mar 2025 09:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8f:61:0a:25:e9:72:c3:43:a2:a7:a5:63:e3:09:ec:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72e12a3876ff7bd00d9d9ebb972ab1e621ea1e8d
        Validity
            Not Before: Mar 13 12:00:56 2025 GMT
            Not After : Mar 14 12:00:56 2025 GMT
        Subject: CN=11f4af559dea3654e81499636411a73e8810ea05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e2:f7:da:b4:2c:a6:40:f4:c6:72:5e:16:d0:
                    da:b3:21:53:30:49:74:9a:ae:f9:8d:ca:0d:27:52:
                    c0:69:43:10:b7:c6:3f:bc:8d:e9:35:4d:40:d5:6f:
                    7f:4f:24:54:55:0d:2b:7e:3e:43:29:10:80:ec:2b:
                    c1:de:6f:b6:a4:18:3a:8c:08:18:bb:61:e3:59:be:
                    d8:c2:31:2d:c7:22:eb:e2:67:8f:49:f0:aa:41:2e:
                    cc:55:3d:ba:be:59:9e:5c:14:71:1b:76:a7:f2:a5:
                    01:a9:3e:a2:c8:2b:b5:60:fc:92:f6:b0:c1:fc:6a:
                    5c:db:65:de:bc:07:4f:e5:f2:93:dd:8d:72:fd:e9:
                    0f:f9:10:5e:9b:13:97:07:42:28:dc:33:64:cf:70:
                    ab:88:bf:d1:1f:67:18:87:6a:a6:7b:e3:b2:9b:3a:
                    fa:c1:f6:ba:64:95:8a:3d:94:ff:02:86:ef:d1:a6:
                    dd:a9:38:14:03:78:89:cf:ab:af:31:5f:44:dd:96:
                    de:67:02:49:b1:e4:40:a5:cd:cc:d3:18:54:eb:1c:
                    13:00:44:34:3d:de:03:aa:06:a0:90:b2:82:f8:e6:
                    27:66:aa:80:1f:79:7a:f4:68:2b:c6:13:94:17:7a:
                    a5:49:46:02:b9:10:c8:09:04:86:ea:c5:76:2a:63:
                    c2:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:F4:AF:55:9D:EA:36:54:E8:14:99:63:64:11:A7:3E:88:10:EA:05
            X509v3 Authority Key Identifier:
                keyid:72:E1:2A:38:76:FF:7B:D0:0D:9D:9E:BB:97:2A:B1:E6:21:EA:1E:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuEqOHb_e9ANnZ67lyqx5iHqHo0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:3b:a2:2e:5f:a6:0b:6c:17:0e:7a:46:43:81:b0:b7:95:e0:
         f9:8c:71:dd:d4:00:36:30:2f:a0:a1:ba:2e:a9:a0:c7:1d:78:
         6e:85:f9:fd:36:44:50:35:d0:1d:69:15:3d:64:51:e7:30:56:
         de:aa:e0:e9:b2:7a:bb:f1:54:62:64:8f:fa:d9:fe:3b:a1:f5:
         0b:2a:2a:db:28:27:4f:93:c9:76:de:f5:98:60:bf:14:5e:d1:
         c2:02:e4:e3:3b:5b:df:04:54:3d:c3:46:09:93:45:11:47:2c:
         8d:3a:dd:3c:82:b5:13:ba:41:17:5a:5c:88:11:7a:69:3d:49:
         31:4c:0f:df:db:ef:7b:5b:d2:da:22:d3:ac:43:b4:e5:1a:ea:
         f6:b4:4d:44:9a:15:91:86:cc:4c:0e:28:20:61:d0:7d:1f:90:
         4b:ae:14:e2:2b:05:ad:b4:f7:28:b0:62:2d:d1:29:56:e1:4f:
         41:44:9d:65:db:e4:69:21:33:ee:8c:9f:d5:cd:46:f7:f1:49:
         87:58:3f:61:ba:d4:de:b8:b3:97:9d:1a:dc:07:15:4f:e2:fd:
         3d:87:7d:83:ec:97:7e:35:36:c1:b5:27:66:aa:18:e7:d0:f9:
         e1:21:6f:77:00:1b:4f:e8:c7:9c:6e:d4:76:6d:6c:f9:17:5f:
         80:dc:53:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:51:26 2025 by rpki-client