Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/8c7cc9-c095-42f5-9bb6-946c0f7e8f78/1/Ezm5qJRtJr4tj__mwePCLLk-BIY.mft
File:                     Ezm5qJRtJr4tj__mwePCLLk-BIY.mft (raw, json)
Hash identifier:          3h+BpMZDNd20khY+rmzrUnrCBxsEb2WHjYgNJehi1MU=
Subject key identifier:   55:B4:5C:C4:72:E1:46:A6:98:CF:50:0F:DD:BC:67:05:4B:95:14:06
Authority key identifier: 13:39:B9:A8:94:6D:26:BE:2D:8F:FF:E6:C1:E3:C2:2C:B9:3E:04:86
Certificate issuer:       /CN=1339b9a8946d26be2d8fffe6c1e3c22cb93e0486
Certificate serial:       01958B4DF0AC1F8191DFCF2B60B8EAFA8AB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ezm5qJRtJr4tj__mwePCLLk-BIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/8c7cc9-c095-42f5-9bb6-946c0f7e8f78/1/Ezm5qJRtJr4tj__mwePCLLk-BIY.mft
Manifest number:          0B5E
Signing time:             Wed 12 Mar 2025 17:01:35 +0000
Manifest this update:     Wed 12 Mar 2025 17:01:35 +0000
Manifest next update:     Thu 13 Mar 2025 17:01:35 +0000
Files and hashes:         1: Ezm5qJRtJr4tj__mwePCLLk-BIY.crl (hash: ZY2fNtIAaHId70d0ZC51B6Etu7izti1O/uwLq3tfBl0=)
                          2: Pd_TRMzeLXmR4l_ISjIRf3kfJG8.roa (hash: eMT9U1JgE9Qp7ruvpzaw9x/RY238h1ceOul754xPuwk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/8c7cc9-c095-42f5-9bb6-946c0f7e8f78/1/Ezm5qJRtJr4tj__mwePCLLk-BIY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/8c7cc9-c095-42f5-9bb6-946c0f7e8f78/1/Ezm5qJRtJr4tj__mwePCLLk-BIY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ezm5qJRtJr4tj__mwePCLLk-BIY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 17:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8b:4d:f0:ac:1f:81:91:df:cf:2b:60:b8:ea:fa:8a:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1339b9a8946d26be2d8fffe6c1e3c22cb93e0486
        Validity
            Not Before: Mar 12 17:01:35 2025 GMT
            Not After : Mar 13 17:01:35 2025 GMT
        Subject: CN=55b45cc472e146a698cf500fddbc67054b951406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1c:75:aa:a8:42:ec:b1:d1:20:d2:ab:f2:6f:
                    d7:88:af:23:92:79:15:e8:b2:ae:5a:b3:eb:6c:0f:
                    52:1f:b9:e7:73:a0:af:32:d7:18:3c:fb:3d:d1:07:
                    3f:8a:93:11:92:8f:f3:18:68:f6:50:41:b1:00:27:
                    f5:80:20:93:9b:18:2e:72:e3:bd:38:3b:ff:a7:6f:
                    4e:e8:ba:d6:43:39:41:e6:96:dd:3b:7f:1e:88:56:
                    a5:e5:30:31:f2:b1:e1:b1:e7:94:a4:81:20:64:78:
                    1e:ea:e8:6e:52:11:48:45:b5:48:9b:02:44:7e:10:
                    fa:10:77:2f:89:36:0d:12:87:b9:f0:42:8e:f9:c0:
                    81:7b:92:7a:40:1c:85:3b:5c:1e:60:2a:ed:a5:16:
                    2f:9e:88:89:6b:28:2a:4b:ed:fa:86:39:de:a8:e2:
                    08:36:04:5d:7c:cb:46:64:6d:26:63:d6:df:08:5f:
                    ae:11:a8:33:74:b2:e4:bc:24:1f:15:59:2d:35:29:
                    44:51:f5:a1:dc:97:1f:96:bf:da:ca:b8:4b:a6:8c:
                    0d:ff:c5:e6:a7:cc:6a:8f:25:34:5c:56:e0:b6:f4:
                    a9:a6:b2:1a:9c:e2:f4:7b:ef:29:bb:04:ef:c3:bd:
                    b6:d3:17:24:8f:b8:60:63:58:15:5e:e6:1f:89:9b:
                    24:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:B4:5C:C4:72:E1:46:A6:98:CF:50:0F:DD:BC:67:05:4B:95:14:06
            X509v3 Authority Key Identifier:
                keyid:13:39:B9:A8:94:6D:26:BE:2D:8F:FF:E6:C1:E3:C2:2C:B9:3E:04:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ezm5qJRtJr4tj__mwePCLLk-BIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c7cc9-c095-42f5-9bb6-946c0f7e8f78/1/Ezm5qJRtJr4tj__mwePCLLk-BIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c7cc9-c095-42f5-9bb6-946c0f7e8f78/1/Ezm5qJRtJr4tj__mwePCLLk-BIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:3a:4e:8a:15:10:34:65:9d:9a:db:56:53:5c:68:56:29:65:
         6f:13:53:27:0d:ae:2d:00:e3:47:bb:d1:df:c0:ca:16:60:d1:
         66:ad:c9:56:5e:fe:c5:3d:13:37:0e:f1:a2:fa:32:72:0b:0a:
         98:df:4f:d9:5a:56:76:0c:87:ce:90:f4:88:3e:ce:a9:c4:1a:
         f6:f0:3a:47:21:d2:ab:f7:f5:bb:95:8f:aa:b6:65:4a:70:f8:
         19:a3:bf:35:db:41:3c:de:51:d8:85:d1:f0:12:d2:69:fd:be:
         1e:c1:3a:7f:fe:ac:15:3d:25:4b:a2:9d:6b:76:a5:73:c9:49:
         65:25:47:f5:f3:62:01:14:78:e4:3e:b4:4e:4a:0e:d8:90:4d:
         40:06:83:83:e4:fe:1c:27:48:8e:8b:45:ba:4d:00:53:9b:0a:
         ef:57:5f:54:79:5a:9e:14:85:81:dc:73:5a:79:ba:90:b0:e3:
         ef:71:df:81:b7:a7:73:27:05:f9:b5:ae:0e:9f:d3:c2:b0:f3:
         18:c4:5e:95:51:e1:02:11:65:38:d4:76:c9:8c:6a:fc:0f:b3:
         75:87:b3:5d:86:32:72:49:94:74:d4:d3:86:20:1f:81:a3:5f:
         73:56:81:5a:36:9f:80:f0:30:08:8a:27:64:c4:f7:de:24:34:
         70:db:04:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:16:47 2025 by rpki-client