Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.mft
File:                     5sxlwnwjKYsMWg4Lx0ulEDSnBMg.mft (raw, json)
Hash identifier:          rL/VVwW4Lcwd5rg3gUzyn8aR7SdIkCwQJmYsLYSi5Vg=
Subject key identifier:   AE:5E:96:38:41:DB:8C:00:F0:6E:05:F6:EE:7E:A3:9E:69:A3:20:31
Authority key identifier: E6:CC:65:C2:7C:23:29:8B:0C:5A:0E:0B:C7:4B:A5:10:34:A7:04:C8
Certificate issuer:       /CN=e6cc65c27c23298b0c5a0e0bc74ba51034a704c8
Certificate serial:       01959005F27F1E647D8DBEF688F027DC7001
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.mft
Manifest number:          149A
Signing time:             Thu 13 Mar 2025 15:01:03 +0000
Manifest this update:     Thu 13 Mar 2025 15:01:03 +0000
Manifest next update:     Fri 14 Mar 2025 15:01:03 +0000
Files and hashes:         1: 5sxlwnwjKYsMWg4Lx0ulEDSnBMg.crl (hash: zMm80yjkd4xiFNFOcplNMlhhL4To32nWQxoVQ66Tx18=)
                          2: xw1wxyD1fMrJTbgYiyQiF0uQJK0.roa (hash: TVVXOUY13A6nRw+KZkyghJdyM7alOs0fCSWauNlbS0U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Mar 2025 09:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:90:05:f2:7f:1e:64:7d:8d:be:f6:88:f0:27:dc:70:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6cc65c27c23298b0c5a0e0bc74ba51034a704c8
        Validity
            Not Before: Mar 13 15:01:03 2025 GMT
            Not After : Mar 14 15:01:03 2025 GMT
        Subject: CN=ae5e963841db8c00f06e05f6ee7ea39e69a32031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:39:da:c9:e0:55:48:36:4e:be:ef:3a:77:1a:
                    ad:46:84:67:07:69:f6:8b:0e:3e:87:7b:61:84:5d:
                    26:2d:87:ee:16:3e:a6:ce:53:06:ae:fb:9d:cc:f9:
                    b5:02:13:0f:2b:d1:9e:da:8c:1b:13:b4:2d:0a:3f:
                    85:cb:63:0f:2f:6a:61:ef:e7:f4:03:f7:d5:29:8a:
                    5b:0d:62:08:32:83:15:00:fd:e9:3f:20:7f:05:8b:
                    c2:51:38:b5:54:d3:ec:a6:e4:f5:e8:7d:27:df:1b:
                    89:b5:e3:13:6e:f5:98:9b:bc:92:40:9a:0b:2d:2e:
                    df:99:48:41:d4:ca:fd:3a:08:e2:34:e9:14:de:75:
                    2a:11:ce:ab:e9:b5:09:7b:d9:73:7e:ef:5e:00:7f:
                    5b:8f:58:52:61:bb:a8:1c:28:44:29:cd:6d:34:1d:
                    3b:47:67:f4:65:48:59:0b:5e:cd:cb:44:ed:8f:ff:
                    14:cc:68:7a:d5:78:c6:ce:0e:35:fa:d3:a2:8d:2f:
                    78:95:ca:42:50:7e:bf:f8:f3:20:50:4e:83:20:99:
                    db:43:b8:c0:3f:93:53:ec:56:04:be:5d:08:e5:e1:
                    89:cf:ef:27:c2:1b:f0:df:46:34:ab:d2:a0:bd:4a:
                    37:80:a8:1e:ea:71:7d:89:27:75:71:ab:d1:1d:1c:
                    62:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:5E:96:38:41:DB:8C:00:F0:6E:05:F6:EE:7E:A3:9E:69:A3:20:31
            X509v3 Authority Key Identifier:
                keyid:E6:CC:65:C2:7C:23:29:8B:0C:5A:0E:0B:C7:4B:A5:10:34:A7:04:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:3f:4a:5a:ca:84:7e:c1:7f:60:35:92:cf:13:9c:0e:6a:32:
         19:9c:fd:cb:9e:ac:e5:cc:c1:f6:f1:68:eb:5f:6c:86:e4:ca:
         d4:b2:7f:92:87:18:bc:86:63:c0:7a:90:ad:6b:ea:c6:71:58:
         e0:fc:36:1a:63:27:79:8a:cb:db:9e:74:cc:80:ae:df:36:54:
         d2:bf:e2:48:3f:90:1c:6a:9f:0b:7e:ac:88:84:25:67:ce:ed:
         4a:a0:2c:91:8a:a7:f8:8f:21:8d:cb:5b:39:24:e5:c0:18:77:
         03:40:c9:a9:cf:ab:32:37:8a:9e:d1:11:4e:a8:93:e0:0b:80:
         a2:38:f9:9d:a2:11:ba:56:87:38:c6:95:0b:64:e5:62:ab:3f:
         33:68:0a:9e:6c:a2:8c:96:5a:06:63:7c:c4:1e:d1:cc:95:a6:
         55:9e:43:41:c8:86:78:30:d5:6e:6c:80:a9:db:8d:e3:ff:33:
         41:5f:4a:32:99:b4:62:74:61:61:9f:fd:2f:fb:81:0a:0a:9a:
         59:1b:64:73:ca:8f:45:1a:5a:2a:06:5b:4f:fc:7b:5d:67:22:
         98:29:e3:9f:30:dc:c9:8d:4e:ad:e0:95:c5:22:93:d2:17:e1:
         7a:f8:60:27:f3:dd:0d:30:6f:61:5e:c6:20:13:4c:84:a8:35:
         ac:80:3e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:05:26 2025 by rpki-client