Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.mft
File:                     MHbphV-byjAXoQE3tEPujFKMqVI.mft (raw, json)
Hash identifier:          Shjqfpe+sp1w/ZV2wzDDH+bW1tQJvD/w2vNnVzX+y0A=
Subject key identifier:   DA:41:A3:0D:2B:88:83:C1:70:0F:31:D6:7F:26:F9:0B:4D:8C:2C:40
Authority key identifier: 30:76:E9:85:5F:9B:CA:30:17:A1:01:37:B4:43:EE:8C:52:8C:A9:52
Certificate issuer:       /CN=3076e9855f9bca3017a10137b443ee8c528ca952
Certificate serial:       01958B84776A880F2FC3CF638026A24C8418
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MHbphV-byjAXoQE3tEPujFKMqVI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.mft
Manifest number:          1497
Signing time:             Wed 12 Mar 2025 18:01:09 +0000
Manifest this update:     Wed 12 Mar 2025 18:01:09 +0000
Manifest next update:     Thu 13 Mar 2025 18:01:09 +0000
Files and hashes:         1: MHbphV-byjAXoQE3tEPujFKMqVI.crl (hash: qWU2STrOMaaR//5M3MycVL99g27Ctru98YKxjw0V6XM=)
                          2: Wrs6edZF_FheJS0JSp4oL-e56WQ.roa (hash: vV9mNOx2NnPdDR1+6XQLcqlbWprm1qsghkqsjFpy7rE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MHbphV-byjAXoQE3tEPujFKMqVI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 18:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8b:84:77:6a:88:0f:2f:c3:cf:63:80:26:a2:4c:84:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3076e9855f9bca3017a10137b443ee8c528ca952
        Validity
            Not Before: Mar 12 18:01:09 2025 GMT
            Not After : Mar 13 18:01:09 2025 GMT
        Subject: CN=da41a30d2b8883c1700f31d67f26f90b4d8c2c40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:94:86:c1:cf:89:8b:05:d0:54:48:40:95:51:
                    2e:b8:9d:3f:a3:37:d6:b2:aa:16:e6:b5:b3:0d:12:
                    a7:33:2f:4a:c0:02:a9:fb:f6:2f:5e:8a:15:f7:2f:
                    23:d2:1c:73:e4:65:93:4b:f7:f6:cb:4e:06:0a:2b:
                    d0:df:c5:82:7b:d5:2f:16:31:69:ca:fa:f6:de:e8:
                    a6:56:8a:84:38:5d:4e:d9:75:45:df:57:e2:8f:9a:
                    0e:1b:4b:b8:50:07:5b:95:03:a6:d2:0b:36:13:68:
                    f4:1b:87:93:67:47:13:85:8a:1b:7e:04:58:aa:17:
                    b3:e0:46:f7:7a:2c:2a:14:b9:bc:6a:6b:07:2b:40:
                    9b:a5:1b:b9:04:f9:6a:cc:5b:06:31:03:65:57:7c:
                    cb:bd:59:16:57:c4:7f:a3:6a:ca:5c:ac:78:68:74:
                    cc:be:ba:63:2d:77:bc:8e:83:64:df:37:b9:d3:85:
                    47:25:27:08:57:0d:52:cc:59:96:24:06:f4:be:21:
                    59:87:b5:cb:3d:7a:c3:a1:4f:79:88:40:a4:a3:f6:
                    55:90:3f:18:0a:b4:8e:cb:ea:16:5c:c7:25:f4:4c:
                    c8:6c:4c:d4:53:4f:3f:9b:a9:72:4b:a7:0e:9b:49:
                    73:d2:de:60:a1:d2:11:38:65:ad:f8:5f:f5:49:95:
                    21:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:41:A3:0D:2B:88:83:C1:70:0F:31:D6:7F:26:F9:0B:4D:8C:2C:40
            X509v3 Authority Key Identifier:
                keyid:30:76:E9:85:5F:9B:CA:30:17:A1:01:37:B4:43:EE:8C:52:8C:A9:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHbphV-byjAXoQE3tEPujFKMqVI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:bd:65:ea:58:0b:63:49:b6:2a:06:43:9a:3b:36:c3:ff:3f:
         f9:e7:a1:b2:cc:11:4d:c2:85:64:1e:df:44:e8:92:fe:22:00:
         88:84:cc:13:08:06:2d:df:1e:50:dc:97:fa:10:82:9a:0e:98:
         2c:b7:03:26:a6:eb:76:7c:13:7f:da:1c:b9:db:69:c6:81:54:
         08:a1:72:d2:40:ba:82:25:ab:d7:be:10:d0:90:55:f9:00:3a:
         c0:db:18:ce:63:82:16:c0:b7:92:55:e4:a2:84:a1:5a:8b:1e:
         de:b3:2d:05:71:6a:c6:b8:33:f3:d8:16:16:ec:a0:d3:45:c7:
         e1:c9:9b:6d:13:62:73:49:8e:09:8a:75:d5:ba:e2:e3:59:03:
         30:00:3b:6c:01:1b:7e:3d:8c:61:c1:bc:96:2b:0e:18:87:7c:
         48:78:c3:94:ec:06:41:6a:b6:10:76:43:14:db:b2:dc:ba:0f:
         d5:af:86:f4:94:d4:17:ae:8c:47:cb:01:bc:aa:4d:db:e0:95:
         fc:6a:3e:84:97:87:28:68:ce:e5:b5:2e:cf:37:2e:b8:27:14:
         02:01:27:d2:86:eb:5c:49:45:84:ab:1e:41:d8:72:09:ad:d9:
         97:42:dd:d7:08:90:e5:2a:9e:13:76:07:27:65:a0:70:79:57:
         fc:4a:62:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:51:27 2025 by rpki-client