Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.mft
File:                     0mpECeqR9QbWM4ccbDVUDUYDN9E.mft (raw, json)
Hash identifier:          QYE9f3NS7gEXAxqyUQWFvdQHV/EeSlLQv7Y/aW23qBA=
Subject key identifier:   5F:36:8C:8E:A1:7C:BE:48:54:41:FB:6D:92:6C:03:06:1D:30:C2:F3
Authority key identifier: D2:6A:44:09:EA:91:F5:06:D6:33:87:1C:6C:35:54:0D:46:03:37:D1
Certificate issuer:       /CN=d26a4409ea91f506d633871c6c35540d460337d1
Certificate serial:       0196515AA632F78095B313D77D0FC74CF6E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0mpECeqR9QbWM4ccbDVUDUYDN9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.mft
Manifest number:          0CC8
Signing time:             Sun 20 Apr 2025 04:00:17 +0000
Manifest this update:     Sun 20 Apr 2025 04:00:17 +0000
Manifest next update:     Mon 21 Apr 2025 04:00:17 +0000
Files and hashes:         1: 0mpECeqR9QbWM4ccbDVUDUYDN9E.crl (hash: 4ehTkJl0QhsOwvP0WE5PX8F7ZBVHToGS21dpfqdZ/GU=)
                          2: 3KNWi4PLke2pc0vhx5QOX6ZuOCA.roa (hash: tpM6u4qaCB/SIK4Ynv1MNnqK+07Rhub80n1mFXvkjwo=)
                          3: 8jp9A2yp5Ctl0aMaJZj7S5h9uCE.roa (hash: WHkL8yvON59diJqVD7F/Lsgn1viIvZplizI2VcPWz8c=)
                          4: o0naTY2lU_XCKHCOD4HRfjiAS20.roa (hash: ctUbEkyNdhuq/LnXlhlDp6xaZ2CRNDEI5dgg4y7saV4=)
                          5: q2PhtlxaWPMFB5GcAwVXc_wKZRg.roa (hash: 7exTPbh4OHsbAofG4+Te19GLuWs10iEQg0/XWCeBGJg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0mpECeqR9QbWM4ccbDVUDUYDN9E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 04:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:51:5a:a6:32:f7:80:95:b3:13:d7:7d:0f:c7:4c:f6:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d26a4409ea91f506d633871c6c35540d460337d1
        Validity
            Not Before: Apr 20 04:00:17 2025 GMT
            Not After : Apr 21 04:00:17 2025 GMT
        Subject: CN=5f368c8ea17cbe485441fb6d926c03061d30c2f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:94:db:b0:43:24:9f:e4:cb:da:20:b8:c5:29:
                    dc:a1:4b:09:65:37:37:ae:a4:c4:e7:fd:d0:76:de:
                    a8:28:78:3e:c7:b3:ca:f3:03:bb:65:05:72:e8:cd:
                    39:fd:32:6c:8e:e6:10:4a:63:61:74:54:91:3d:91:
                    5c:f3:6e:4a:8e:8d:64:bb:aa:e7:4c:23:08:c4:b3:
                    35:7a:a9:db:b0:9e:56:e2:ce:6d:4c:17:9a:6e:22:
                    93:8b:92:e4:28:3d:9d:85:5e:89:9a:da:51:6d:fc:
                    97:35:6d:ca:56:ee:28:9e:55:86:aa:eb:67:e8:51:
                    09:d8:09:0b:77:11:52:b3:39:f3:b6:55:ab:49:d8:
                    1c:ac:cf:ed:6b:0c:b2:e7:a0:dd:fa:6b:48:f5:12:
                    9b:66:0a:8a:95:04:93:eb:18:b8:10:20:36:ae:c5:
                    e5:28:cc:f3:b6:a9:f7:e8:77:d2:5e:3e:46:c4:73:
                    3d:f6:4f:b1:3c:9e:0a:41:2b:41:cf:6f:66:06:ae:
                    28:04:ce:21:f4:10:83:3c:6f:73:a6:d0:fb:ce:38:
                    0c:ac:62:ac:e5:8c:0b:7e:78:8d:2f:6c:43:e5:0e:
                    57:a7:12:d8:06:9a:e7:58:c9:83:be:67:ea:47:4a:
                    81:4f:33:f5:8d:6c:74:b8:5b:b7:c8:e3:31:d3:02:
                    18:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:36:8C:8E:A1:7C:BE:48:54:41:FB:6D:92:6C:03:06:1D:30:C2:F3
            X509v3 Authority Key Identifier:
                keyid:D2:6A:44:09:EA:91:F5:06:D6:33:87:1C:6C:35:54:0D:46:03:37:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mpECeqR9QbWM4ccbDVUDUYDN9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:34:c5:be:61:a8:f1:ef:b7:5a:6e:07:a5:38:9e:8d:b0:84:
         06:10:d5:86:ec:ab:ff:4d:94:af:43:66:81:98:a8:87:de:cd:
         38:75:4b:69:32:c5:d6:40:62:ad:fb:c1:c1:02:b9:14:cb:1e:
         82:9a:e1:c9:6c:3c:d1:58:b7:fd:99:1a:f2:fb:c9:6d:d5:f6:
         de:aa:bd:dc:84:c5:0b:7c:06:22:a4:87:6e:4a:85:45:5e:86:
         c7:89:eb:f4:92:e3:d4:f3:33:a0:b6:e6:a8:8c:45:df:5d:00:
         9d:6c:c5:6f:f0:ec:19:dc:3b:a8:81:1f:89:87:1e:2d:f5:be:
         bd:41:64:b1:12:a6:bd:da:c5:5a:8f:5f:1c:37:ac:fd:30:3a:
         cc:97:03:e9:89:78:b2:79:41:df:74:41:5d:cf:3e:83:d4:50:
         9d:aa:c8:8a:1a:eb:45:95:4d:8f:3d:35:a8:a3:ea:39:a4:c4:
         a3:e3:ed:6c:d4:7f:3f:70:2f:39:67:38:2c:72:57:f1:3c:db:
         8e:7f:e5:d4:26:7e:c7:69:58:c5:17:72:bb:10:67:12:51:3d:
         b2:e2:db:4e:47:bc:01:d0:63:0f:5b:ef:6f:17:09:2c:0c:66:
         16:9b:f2:ed:67:a1:d2:8e:bb:d4:2c:3f:ae:26:1f:a1:67:28:
         6b:12:4f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:57:48 2025 by rpki-client