Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/1e334d-98b5-47b9-b4fd-29f71ee1791d/1/dvLzQc-Yuei0bt04mkgGTHuub5o.mft
File:                     dvLzQc-Yuei0bt04mkgGTHuub5o.mft (raw, json)
Hash identifier:          oiBOqtFauQ/8GD9qzrKh7TcMGM/g9Ywfsz+pglWXMo8=
Subject key identifier:   27:09:43:E2:1E:71:41:D7:B5:CE:BC:D8:FB:2E:FA:C9:E5:D7:65:89
Authority key identifier: 76:F2:F3:41:CF:98:B9:E8:B4:6E:DD:38:9A:48:06:4C:7B:AE:6F:9A
Certificate issuer:       /CN=76f2f341cf98b9e8b46edd389a48064c7bae6f9a
Certificate serial:       01965537E5C6E5C1CDE0870F29942E1B894A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dvLzQc-Yuei0bt04mkgGTHuub5o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/1e334d-98b5-47b9-b4fd-29f71ee1791d/1/dvLzQc-Yuei0bt04mkgGTHuub5o.mft
Manifest number:          0CE1
Signing time:             Sun 20 Apr 2025 22:00:48 +0000
Manifest this update:     Sun 20 Apr 2025 22:00:48 +0000
Manifest next update:     Mon 21 Apr 2025 22:00:48 +0000
Files and hashes:         1: dvLzQc-Yuei0bt04mkgGTHuub5o.crl (hash: MPs6YvQIvFQh8Rx+smS6mYpAn54dJyHiyM/pSK6MiUQ=)
                          2: pLFGIGuwO6p3VXl7848DpqUCykE.roa (hash: cQnY5M6yFrvUehgYlIPw55V4Prm/y9EByLYSiv2JqLY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/1e334d-98b5-47b9-b4fd-29f71ee1791d/1/dvLzQc-Yuei0bt04mkgGTHuub5o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/1e334d-98b5-47b9-b4fd-29f71ee1791d/1/dvLzQc-Yuei0bt04mkgGTHuub5o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dvLzQc-Yuei0bt04mkgGTHuub5o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 22:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:55:37:e5:c6:e5:c1:cd:e0:87:0f:29:94:2e:1b:89:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76f2f341cf98b9e8b46edd389a48064c7bae6f9a
        Validity
            Not Before: Apr 20 22:00:48 2025 GMT
            Not After : Apr 21 22:00:48 2025 GMT
        Subject: CN=270943e21e7141d7b5cebcd8fb2efac9e5d76589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:af:9a:cd:e1:24:15:9d:17:3a:2f:13:99:2d:
                    62:87:0e:9b:b3:8c:85:a8:ac:97:27:74:ae:1d:fc:
                    d5:6a:c6:c5:82:74:ef:d4:8a:b0:5e:1f:c4:ec:98:
                    9a:fe:4b:f7:c7:f8:3d:19:29:51:e0:29:fe:ad:e1:
                    ce:ff:f9:1d:a9:2d:3a:03:b0:00:ef:b6:6b:36:1a:
                    4c:23:7a:71:02:af:2e:01:8b:3f:64:8e:10:ca:26:
                    54:46:76:c4:43:6a:49:a0:2b:be:18:88:92:50:02:
                    86:e1:e0:bd:c6:f1:79:ac:fe:e6:09:ec:24:36:ff:
                    c9:44:8d:37:39:38:1f:28:7f:dc:ba:cf:46:c9:39:
                    f9:90:7b:aa:3e:13:3a:a3:0c:83:99:b2:8f:4e:27:
                    2b:df:61:0d:ba:8b:24:11:6f:0b:70:14:71:ba:4e:
                    aa:be:34:ff:51:15:30:db:63:1b:74:ee:4c:ed:a5:
                    e2:7e:4c:db:66:5c:88:0a:4f:b0:8f:56:dc:99:81:
                    4f:dd:a9:9f:86:7e:1b:9b:16:cb:50:3d:46:21:56:
                    ce:70:47:c8:d9:30:00:fa:25:0b:73:54:c4:ee:ae:
                    ab:f3:b4:4f:d8:b3:44:c6:57:c3:64:d8:11:e7:a8:
                    19:1a:d5:95:07:b5:06:a8:a8:02:46:2b:8a:48:4b:
                    fe:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:09:43:E2:1E:71:41:D7:B5:CE:BC:D8:FB:2E:FA:C9:E5:D7:65:89
            X509v3 Authority Key Identifier:
                keyid:76:F2:F3:41:CF:98:B9:E8:B4:6E:DD:38:9A:48:06:4C:7B:AE:6F:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dvLzQc-Yuei0bt04mkgGTHuub5o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/1e334d-98b5-47b9-b4fd-29f71ee1791d/1/dvLzQc-Yuei0bt04mkgGTHuub5o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/1e334d-98b5-47b9-b4fd-29f71ee1791d/1/dvLzQc-Yuei0bt04mkgGTHuub5o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:ba:ec:7f:e6:a0:99:a2:ac:01:1d:a2:28:d5:bf:7e:c5:53:
         99:6b:6e:71:66:cc:10:f7:66:dd:a8:d3:5d:4d:b6:df:0b:2c:
         b5:ce:72:cf:36:b5:88:02:06:71:8a:17:18:8b:28:4d:21:4d:
         6f:aa:dc:e2:7a:37:2b:c1:56:bd:b8:49:1e:d8:dd:8f:02:b2:
         dd:9e:46:d5:47:5a:49:df:77:0c:e7:c7:f7:bb:09:77:d6:45:
         2b:f3:55:2d:fd:07:7a:f2:93:84:f4:57:6f:24:df:f7:69:61:
         da:c6:0f:f3:1e:f6:e4:d4:b6:78:36:87:25:24:ca:58:1d:71:
         55:19:85:77:8f:36:d4:b1:e6:9b:f9:98:44:15:cf:2d:6a:7c:
         d6:3d:6c:c1:65:45:8d:16:0e:4b:de:ea:ee:4c:47:b6:ba:e7:
         74:92:18:00:60:89:79:66:43:52:9b:f5:9f:41:9e:ce:47:32:
         a8:dc:60:a8:5f:28:11:23:43:d2:b5:a2:09:61:97:53:1e:21:
         80:41:1c:94:f7:34:44:d4:41:1e:53:eb:54:75:a4:eb:03:e4:
         ad:ed:14:ac:ec:31:f0:93:9c:59:3c:a5:37:5a:d0:fb:e0:27:
         c1:96:13:dd:3e:06:dd:dc:3c:3a:fc:8b:31:41:15:67:d3:8c:
         37:d0:fe:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:48:50 2025 by rpki-client