Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft
File:                     DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft (raw, json)
Hash identifier:          oVkouVAn7tWkMRJyVsRMq8uLOwLi00pM+QRBWjTDY74=
Subject key identifier:   3E:88:37:C4:A4:C5:FE:02:FA:02:6D:A0:32:D8:CC:8C:50:71:A9:C0
Authority key identifier: 0C:E1:30:8E:AD:6A:DB:1D:08:5E:7E:59:10:A0:CB:2D:E5:6A:A3:2E
Certificate issuer:       /CN=0ce1308ead6adb1d085e7e5910a0cb2de56aa32e
Certificate serial:       019637D1EAD97A6E6715AAC71550590BC330
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft
Manifest number:          14FB
Signing time:             Tue 15 Apr 2025 05:00:25 +0000
Manifest this update:     Tue 15 Apr 2025 05:00:25 +0000
Manifest next update:     Wed 16 Apr 2025 05:00:25 +0000
Files and hashes:         1: 2IV1bBm-jP-2jVh24cTBD-F_aCY.roa (hash: LoxyFwAORqX/gMob6dkhVaBmKh5ZSU1hWQKi2nkbQgw=)
                          2: DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl (hash: QRg5H/eMsf2bEwfWvWPoogUwAiAqfFhkVot3r/OtiZU=)
                          3: _kjDn_DDtqJjlLfr15JCrlUsBs4.roa (hash: jybSc3mz+ll60aex4A0Ja+eXAtAJqeCFAGm8sC/emcE=)
                          4: hJ65MMDojFDsHhCTcDOo1v7Rf3A.roa (hash: dQwJBW4cKzk1hx9pc72XUta4ephdfERO34h+ezvshhM=)
                          5: uqUylZbw2V7XHMMPlt0smOkdOBE.roa (hash: 3G9ODJS5eJVlImugW9SB7DFrUNhhTxGc7u4YCGLBIF4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 16 Apr 2025 05:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:37:d1:ea:d9:7a:6e:67:15:aa:c7:15:50:59:0b:c3:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce1308ead6adb1d085e7e5910a0cb2de56aa32e
        Validity
            Not Before: Apr 15 05:00:25 2025 GMT
            Not After : Apr 16 05:00:25 2025 GMT
        Subject: CN=3e8837c4a4c5fe02fa026da032d8cc8c5071a9c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:af:77:fe:9f:c8:f2:81:dd:ca:a5:71:31:13:
                    5b:e1:35:53:7e:30:7c:8d:78:60:76:1a:76:3d:7e:
                    ad:7b:68:51:a5:aa:b1:93:78:bf:99:60:38:de:59:
                    93:04:df:1f:d2:71:67:6d:cd:fb:f1:0c:ff:51:af:
                    c8:78:3d:90:33:79:eb:b4:87:1c:f2:52:9c:7e:81:
                    85:ee:13:24:d8:99:bd:52:b2:f0:0f:ac:1a:5a:4c:
                    4b:0e:64:c8:f7:7a:28:52:5f:43:41:9f:8e:c3:12:
                    94:1e:91:22:3c:8c:de:e6:b3:d3:a3:a9:62:7f:df:
                    2f:64:22:f2:22:84:c4:5d:16:87:45:76:b1:b6:72:
                    c1:6f:e4:e9:d9:60:84:90:dc:79:b9:3b:02:c6:55:
                    ed:49:97:0b:b2:f2:2f:d0:97:40:db:69:fb:8a:7e:
                    f9:cb:c2:fe:0f:05:58:41:43:1c:ed:8c:83:5f:21:
                    3c:36:c4:88:5b:fd:94:bb:8b:a2:f4:ba:a4:9b:8f:
                    72:21:5e:41:16:f4:1a:42:b5:34:5a:35:b7:ed:e5:
                    46:11:87:84:03:0c:5c:af:d6:2a:54:f7:46:03:ba:
                    1f:71:c5:ec:58:6b:27:08:9d:7c:ed:3c:c4:f2:ad:
                    de:63:da:6e:83:ef:43:c3:3f:00:65:36:23:3c:23:
                    9b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:88:37:C4:A4:C5:FE:02:FA:02:6D:A0:32:D8:CC:8C:50:71:A9:C0
            X509v3 Authority Key Identifier:
                keyid:0C:E1:30:8E:AD:6A:DB:1D:08:5E:7E:59:10:A0:CB:2D:E5:6A:A3:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:f6:a6:bb:af:67:08:0a:38:5d:f9:eb:93:36:6a:74:5f:b4:
         a8:f7:88:f8:28:0b:a3:b8:8c:44:6e:28:00:61:4f:86:d8:f1:
         96:dd:5a:e9:fd:cb:bc:e6:6f:38:4e:19:e4:93:f0:7c:4b:4a:
         c2:d6:71:9d:25:ef:6b:da:54:f3:18:d5:82:09:dd:8e:b8:7d:
         0c:f5:3f:3a:b8:f1:df:ce:96:d2:ec:a5:87:ab:c8:5f:8b:df:
         c9:2a:72:d0:d7:31:cb:df:d3:ea:7d:c1:b2:5d:f4:12:09:18:
         99:fc:cf:45:4c:30:08:4e:d5:d2:05:d3:63:2f:4d:63:76:41:
         25:35:2d:16:f2:b3:be:f1:67:c1:9a:a6:d4:9d:91:c1:7d:df:
         64:b7:e4:57:98:20:eb:de:79:eb:71:b0:01:d1:f0:d1:1e:ee:
         b3:57:e1:e1:29:78:3c:ee:b8:9c:82:15:7e:96:46:47:55:3c:
         61:e6:a5:01:89:fa:88:2c:63:94:95:3f:94:7c:59:93:f7:83:
         ff:3e:f7:d6:85:a1:cb:ea:19:ae:ac:37:a3:fb:a2:13:4d:2f:
         d3:80:59:2c:f3:d5:d2:d0:09:c3:34:f3:ca:13:6d:54:08:1d:
         fa:54:2d:f8:49:19:6c:3d:7b:05:e3:95:f1:5a:55:22:b5:ab:
         71:d2:d9:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:35:07 2025 by rpki-client