Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/e5e689-c58a-4e86-bf8b-ac0598ec342f/1/9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.mft
File:                     9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.mft (raw, json)
Hash identifier:          KfbS0cmO80/Smy2CrIMLZz53BInkZD8jIQC5U94KkYc=
Subject key identifier:   3E:56:72:C2:4F:9D:C8:E0:42:4F:51:1A:F2:61:9A:2F:2E:D0:F8:05
Authority key identifier: F5:4B:FB:01:B0:3C:AA:6F:CE:88:7B:43:84:25:3D:B2:0E:59:FA:71
Certificate issuer:       /CN=f54bfb01b03caa6fce887b4384253db20e59fa71
Certificate serial:       019641B0C578D39A453E07DF2EBCF3EFB8A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/e5e689-c58a-4e86-bf8b-ac0598ec342f/1/9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.mft
Manifest number:          14F2
Signing time:             Thu 17 Apr 2025 03:00:26 +0000
Manifest this update:     Thu 17 Apr 2025 03:00:26 +0000
Manifest next update:     Fri 18 Apr 2025 03:00:26 +0000
Files and hashes:         1: 9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.crl (hash: KapUMxjIHYZHeOuqJuxsT8UtGk1Plvgr+sTfp7pmzfA=)
                          2: V341t6lFU17La723o82yJ0OztQk.roa (hash: 5ZnBvoWyakZy583RsB0+KziGW81oXH+bvf5OC8lpqqA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/e5e689-c58a-4e86-bf8b-ac0598ec342f/1/9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/e5e689-c58a-4e86-bf8b-ac0598ec342f/1/9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 21:57:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:41:b0:c5:78:d3:9a:45:3e:07:df:2e:bc:f3:ef:b8:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f54bfb01b03caa6fce887b4384253db20e59fa71
        Validity
            Not Before: Apr 17 03:00:26 2025 GMT
            Not After : Apr 18 03:00:26 2025 GMT
        Subject: CN=3e5672c24f9dc8e0424f511af2619a2f2ed0f805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:79:86:51:34:6e:84:82:81:88:a9:a5:2d:66:
                    d7:bc:2c:f0:3f:4b:06:6d:39:ef:4c:08:6f:98:27:
                    22:d1:da:16:f2:4b:14:c3:0f:ef:48:b2:f7:1d:d4:
                    b4:18:11:5d:77:64:9f:4d:d0:15:45:cc:b4:1a:02:
                    7e:ca:c0:fa:0b:25:9e:6f:f3:17:1e:9f:d3:13:18:
                    42:00:77:31:f4:3a:f9:ff:4a:67:1e:5c:d0:e8:93:
                    39:d6:27:1e:c0:6d:11:c5:2c:e6:d3:d1:27:9b:d4:
                    6c:c6:60:53:6d:26:d0:62:3a:48:37:88:e6:ab:6a:
                    2c:c9:2f:18:a8:c4:df:a7:21:12:a2:cd:7a:31:3c:
                    9b:af:33:e2:b8:a5:6c:c5:7a:4b:a1:ab:07:31:9c:
                    02:2d:dc:41:e9:86:b1:3d:c6:bc:4f:30:0e:df:b4:
                    1d:87:de:ec:30:89:1d:38:3d:8b:10:fe:71:d2:96:
                    d9:95:7e:08:b9:47:81:3f:4b:81:ce:eb:42:9d:e0:
                    6f:5e:af:fa:b9:7f:b5:52:f7:24:9e:2d:f4:ce:6e:
                    4c:a7:3e:77:58:39:cc:5e:95:e7:88:a0:a6:4d:d2:
                    bc:36:bb:80:70:25:55:61:e7:d3:02:a2:c9:b1:02:
                    87:fe:c1:e3:0e:05:b8:dd:21:46:3d:42:0f:5b:59:
                    65:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:56:72:C2:4F:9D:C8:E0:42:4F:51:1A:F2:61:9A:2F:2E:D0:F8:05
            X509v3 Authority Key Identifier:
                keyid:F5:4B:FB:01:B0:3C:AA:6F:CE:88:7B:43:84:25:3D:B2:0E:59:FA:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e5e689-c58a-4e86-bf8b-ac0598ec342f/1/9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e5e689-c58a-4e86-bf8b-ac0598ec342f/1/9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:fc:6d:b5:27:16:71:4d:4f:ee:d1:12:e4:84:7c:be:cf:b5:
         94:f1:6b:b0:cd:a1:70:32:8d:2e:2b:6f:d3:6c:42:f3:9f:23:
         7b:36:c3:05:fb:73:67:fb:e1:81:ea:b9:b5:fe:b0:38:f7:80:
         70:fc:aa:e7:b9:da:54:7a:66:c0:85:bd:f7:eb:6d:07:f2:56:
         cd:cc:fa:5e:2f:6c:6d:d1:f0:e1:85:9b:ef:58:19:aa:9d:74:
         65:ea:dc:07:23:77:f5:07:8e:23:1c:af:3b:d5:be:59:d5:e0:
         bc:1c:4f:bd:eb:76:b7:75:2c:3b:b3:ae:38:15:3d:16:14:42:
         be:f7:55:5b:cc:0f:eb:a3:d4:57:c2:80:ec:d3:34:58:3e:4a:
         21:2d:e7:28:b1:b3:75:31:36:41:f8:c3:d1:2c:12:4d:28:0b:
         7a:f9:77:8c:59:21:75:1e:80:ba:c4:a6:0b:ef:96:f1:b7:37:
         3d:43:6c:19:2c:66:2b:57:fe:90:21:a3:68:28:29:9f:97:81:
         21:dc:64:33:11:1d:77:60:d9:7e:df:25:c1:bc:b6:d7:b7:00:
         ce:be:e9:52:0e:b3:f5:f4:2e:c7:d5:a0:03:15:f4:fc:5e:e7:
         87:a3:bb:87:2e:ba:ef:16:31:42:a7:43:87:f9:64:4d:a3:2e:
         a7:1a:eb:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 07:02:19 2025 by rpki-client