Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.mft
File:                     sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.mft (raw, json)
Hash identifier:          csnVIvOHJTsc04OWJsNC0G9LTJYZiUcFxj2GJ7BnbvA=
Subject key identifier:   72:6C:CD:75:B8:78:F6:F1:53:84:F2:EB:A0:C4:ED:E1:2E:AD:78:41
Authority key identifier: B0:80:F8:00:1D:59:93:33:73:FE:8E:58:84:9E:4B:91:DE:AA:2B:B2
Certificate issuer:       /CN=b080f8001d59933373fe8e58849e4b91deaa2bb2
Certificate serial:       01958C61360CD606D2AEED574B1978F92DC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.mft
Manifest number:          02DB
Signing time:             Wed 12 Mar 2025 22:02:15 +0000
Manifest this update:     Wed 12 Mar 2025 22:02:15 +0000
Manifest next update:     Thu 13 Mar 2025 22:02:15 +0000
Files and hashes:         1: f-wF0yIlDOHaFqLViWnFWeP4B9o.roa (hash: 8olsSb6V441J0mOtJjve8qF0Z7IUWgXwJVtuxOxK2Bg=)
                          2: sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.crl (hash: a4mTm+ue72xoYoU7ZiOovNnu9TF/k4y5pos7kVrceP8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 19:14:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8c:61:36:0c:d6:06:d2:ae:ed:57:4b:19:78:f9:2d:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b080f8001d59933373fe8e58849e4b91deaa2bb2
        Validity
            Not Before: Mar 12 22:02:15 2025 GMT
            Not After : Mar 13 22:02:15 2025 GMT
        Subject: CN=726ccd75b878f6f15384f2eba0c4ede12ead7841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:55:f5:cf:4a:b9:c3:fe:8c:37:6d:5f:7f:e4:
                    07:a1:ca:f9:c0:cd:51:6c:0d:5b:24:03:84:d6:32:
                    24:d4:b2:f7:7f:95:b7:a9:11:df:9a:fe:f3:7d:00:
                    7d:d8:a5:58:28:78:0f:bb:a4:3a:25:1e:c4:89:19:
                    9c:1e:08:27:f7:13:22:d0:a0:2b:f2:7e:42:06:9f:
                    00:92:a1:81:70:ab:44:41:ad:a8:af:6d:ab:a9:2e:
                    3f:65:42:95:db:69:b7:cb:b1:ee:25:d9:6e:66:a4:
                    e7:ae:18:7c:70:e8:97:d9:14:2a:d2:93:d9:b2:63:
                    31:5a:a4:0f:9d:b1:9c:49:7f:82:cd:48:d6:1a:07:
                    e4:4b:e8:3c:9f:42:53:3e:ca:75:a0:44:d5:df:77:
                    0f:e2:e3:57:6a:53:ac:e6:58:b4:31:4e:62:a7:9d:
                    10:20:41:43:14:5c:17:04:0d:97:96:00:9f:fd:6f:
                    a6:97:d5:ac:72:a4:50:fe:80:ba:33:5a:d0:80:de:
                    f0:6a:28:a9:9d:9b:a5:81:72:e7:40:22:41:3a:48:
                    71:9a:d6:0f:d3:fd:02:94:bd:ac:fd:33:eb:48:dd:
                    af:7a:04:87:aa:56:26:6a:6d:b2:73:00:37:bc:31:
                    02:d7:b6:7f:03:c1:57:58:b5:14:a0:1a:88:3d:a7:
                    99:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:6C:CD:75:B8:78:F6:F1:53:84:F2:EB:A0:C4:ED:E1:2E:AD:78:41
            X509v3 Authority Key Identifier:
                keyid:B0:80:F8:00:1D:59:93:33:73:FE:8E:58:84:9E:4B:91:DE:AA:2B:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:1c:c4:45:16:06:c9:07:a5:f3:d7:0b:a4:4f:31:40:65:ce:
         b1:58:35:67:c6:59:91:92:37:8c:dc:1b:c8:89:b9:17:13:6e:
         d5:bb:b4:4a:5a:b3:c1:92:00:77:50:e7:cf:e3:16:4e:06:a2:
         ac:80:24:3d:73:b2:8f:3e:a9:e4:53:1f:2c:29:b3:61:80:1f:
         9e:b2:ac:ba:10:3a:eb:d1:95:21:f1:0e:26:4e:ab:92:a2:77:
         0f:a3:bb:16:35:30:72:36:05:8d:b0:10:d4:34:65:52:7d:3c:
         18:65:07:a9:8f:f6:37:cc:10:c6:69:fe:a3:4f:9e:ff:fa:24:
         97:18:fb:1e:a9:56:30:71:9f:26:e4:f7:08:3d:f1:1f:82:ef:
         78:78:75:99:84:3c:8d:f1:06:32:38:0f:17:b2:58:50:9a:40:
         4f:e4:1d:1d:61:96:5c:99:e9:e5:3a:f1:46:9a:58:c5:28:e1:
         26:5c:44:a4:e8:79:25:27:c5:3a:2e:c9:d4:b1:ad:5e:fa:3b:
         42:dd:7d:50:67:3a:c1:95:ed:f4:ad:e1:ee:00:ae:0b:a4:83:
         7f:b7:92:29:db:f8:a1:0d:ff:bc:24:5f:81:d1:4e:c7:f5:f4:
         d5:b6:94:d8:7c:bd:91:c5:b1:e8:3f:25:19:b0:b2:79:dc:bb:
         7e:87:4c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:41:22 2025 by rpki-client