Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/7ebdee-a600-4776-8f02-fea92cbe2d2c/1/MEYNc7W7y7Xu6XpKOe61VXLTWoA.mft
File:                     MEYNc7W7y7Xu6XpKOe61VXLTWoA.mft (raw, json)
Hash identifier:          nYTA08wY+WgpVFn3JbZJMN7G2jmz3S+6FuPcsOwwoyg=
Subject key identifier:   6C:FE:51:52:F1:F8:CA:89:29:67:63:EC:4A:EF:ED:28:D0:F3:EF:79
Authority key identifier: 30:46:0D:73:B5:BB:CB:B5:EE:E9:7A:4A:39:EE:B5:55:72:D3:5A:80
Certificate issuer:       /CN=30460d73b5bbcbb5eee97a4a39eeb55572d35a80
Certificate serial:       0196526D5EA10D6A2145F6910BA67AB9F4F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MEYNc7W7y7Xu6XpKOe61VXLTWoA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/7ebdee-a600-4776-8f02-fea92cbe2d2c/1/MEYNc7W7y7Xu6XpKOe61VXLTWoA.mft
Manifest number:          092B
Signing time:             Sun 20 Apr 2025 09:00:21 +0000
Manifest this update:     Sun 20 Apr 2025 09:00:21 +0000
Manifest next update:     Mon 21 Apr 2025 09:00:21 +0000
Files and hashes:         1: MEYNc7W7y7Xu6XpKOe61VXLTWoA.crl (hash: +03A0BSMdkOtZ4ub0pYtcOE2rmiTARJVsX7mATFvtBo=)
                          2: hWRauvdDJQt-oDXnvWA4MwMmCao.roa (hash: XqDB4iBF4pQimyQpMd5E4c4AjMzIAL2t4iD/Z/oy7sk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/7ebdee-a600-4776-8f02-fea92cbe2d2c/1/MEYNc7W7y7Xu6XpKOe61VXLTWoA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/7ebdee-a600-4776-8f02-fea92cbe2d2c/1/MEYNc7W7y7Xu6XpKOe61VXLTWoA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MEYNc7W7y7Xu6XpKOe61VXLTWoA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:52:6d:5e:a1:0d:6a:21:45:f6:91:0b:a6:7a:b9:f4:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30460d73b5bbcbb5eee97a4a39eeb55572d35a80
        Validity
            Not Before: Apr 20 09:00:21 2025 GMT
            Not After : Apr 21 09:00:21 2025 GMT
        Subject: CN=6cfe5152f1f8ca89296763ec4aefed28d0f3ef79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1b:81:b1:85:02:a8:f8:27:63:ea:d6:80:a4:
                    72:cb:b0:13:bb:f8:79:26:0d:84:63:ef:0c:2f:20:
                    00:91:b1:63:e5:14:70:8a:6e:43:e0:23:72:4d:39:
                    90:71:27:20:cb:4c:e8:59:0c:4a:5a:61:67:ff:cd:
                    77:7a:61:72:e3:d7:a4:bc:98:07:52:39:c4:e3:12:
                    f3:35:d2:cd:24:c1:8e:b8:f9:6e:89:1f:85:2d:e1:
                    44:78:05:27:91:e3:49:84:aa:df:64:93:5a:1e:7f:
                    b4:7c:c0:8e:2b:5f:17:c7:68:a7:77:ae:87:86:79:
                    32:7b:5e:98:5d:4d:d0:a1:e7:88:12:13:63:9a:54:
                    24:75:f9:32:f8:4e:4f:be:15:74:8d:fc:c0:c3:24:
                    85:de:0f:d3:24:7c:cb:7d:86:f8:85:20:f7:3b:e9:
                    7f:7c:1b:61:69:a6:63:4e:fe:75:dc:dd:66:02:8c:
                    82:4c:13:01:14:82:7c:71:9a:0a:a1:7e:ea:f4:87:
                    a0:9e:40:26:7d:62:f9:f9:4a:25:c3:08:03:79:be:
                    98:62:d8:82:0a:b2:b1:9f:d5:62:5f:dd:21:c2:b5:
                    46:7b:85:0b:a5:56:8a:5d:36:a2:2e:c7:da:86:49:
                    78:ba:59:8e:51:06:e3:98:32:f1:35:69:61:e9:04:
                    75:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:FE:51:52:F1:F8:CA:89:29:67:63:EC:4A:EF:ED:28:D0:F3:EF:79
            X509v3 Authority Key Identifier:
                keyid:30:46:0D:73:B5:BB:CB:B5:EE:E9:7A:4A:39:EE:B5:55:72:D3:5A:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MEYNc7W7y7Xu6XpKOe61VXLTWoA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7ebdee-a600-4776-8f02-fea92cbe2d2c/1/MEYNc7W7y7Xu6XpKOe61VXLTWoA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7ebdee-a600-4776-8f02-fea92cbe2d2c/1/MEYNc7W7y7Xu6XpKOe61VXLTWoA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:8a:59:90:6a:41:f2:5b:cc:da:aa:c7:eb:53:9f:3e:ce:4c:
         db:0a:80:0a:14:d8:a5:5d:8e:82:96:04:fc:12:38:76:e0:b6:
         e6:43:d3:80:b4:4c:43:92:39:20:3c:9f:f1:a3:fe:8d:c0:a8:
         ea:1d:46:28:1a:55:f1:7b:84:ee:8d:ac:66:72:90:8d:d3:50:
         53:b5:6d:51:1e:89:fc:c7:a4:d9:3a:9d:7e:29:5e:1b:c1:4d:
         b5:1c:67:b1:6c:87:c1:59:1d:62:0e:9e:26:c8:57:8f:9b:51:
         e7:9f:28:f0:b2:a2:14:c0:7b:07:fd:9d:14:21:d9:f9:dd:b8:
         25:68:fe:39:b4:c2:9b:ca:1b:7f:f0:33:dd:61:ec:a3:43:e1:
         d3:df:77:41:55:ad:ba:eb:f8:71:21:ae:52:02:93:3a:b1:5f:
         12:1a:05:ce:d6:6b:4f:63:1b:2a:66:64:40:f7:ff:cc:76:97:
         25:2c:96:a1:22:fd:a6:56:1c:bf:30:79:e1:82:73:17:05:07:
         11:78:c3:97:31:f6:09:56:4e:eb:e7:83:e1:51:49:fe:ef:e1:
         ff:de:44:ab:e2:60:3d:fc:ad:9e:2c:97:a5:1a:67:da:06:b0:
         b9:16:50:8a:d7:55:00:94:69:a2:0e:c7:ee:39:3d:73:c9:39:
         6c:c9:29:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:17:20 2025 by rpki-client