Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft
File:                     zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft (raw, json)
Hash identifier:          8frJzT9ewzuSDH9yPxEGVLixystkqMCDHAcR1o2qCGo=
Subject key identifier:   09:5E:9A:33:D2:FE:F3:0E:DF:D8:2D:76:21:ED:8E:54:39:54:81:35
Authority key identifier: CE:8E:9B:E2:48:C7:41:BA:6A:26:AC:8C:FE:2C:2B:B7:C2:D7:A3:B1
Certificate issuer:       /CN=ce8e9be248c741ba6a26ac8cfe2c2bb7c2d7a3b1
Certificate serial:       01963FF9CE1C9FE912736003CE6F148FBE43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zo6b4kjHQbpqJqyM_iwrt8LXo7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft
Manifest number:          0E46
Signing time:             Wed 16 Apr 2025 19:00:57 +0000
Manifest this update:     Wed 16 Apr 2025 19:00:57 +0000
Manifest next update:     Thu 17 Apr 2025 19:00:57 +0000
Files and hashes:         1: 393YoA_-TG1rJW7pJiXVZZOcLRE.roa (hash: /h7+NJqveZtwZnIhU53gy4Hhcp46zP11eq1lYDwDpdg=)
                          2: zo6b4kjHQbpqJqyM_iwrt8LXo7E.crl (hash: kgv+De8l0WS090wxbiDshqjf9GdhzXueFE1mDb1awZc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zo6b4kjHQbpqJqyM_iwrt8LXo7E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 13:16:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3f:f9:ce:1c:9f:e9:12:73:60:03:ce:6f:14:8f:be:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce8e9be248c741ba6a26ac8cfe2c2bb7c2d7a3b1
        Validity
            Not Before: Apr 16 19:00:57 2025 GMT
            Not After : Apr 17 19:00:57 2025 GMT
        Subject: CN=095e9a33d2fef30edfd82d7621ed8e5439548135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:88:cd:a5:7f:fa:54:e3:ce:fe:4f:f7:a6:6f:
                    8f:43:38:a7:e7:c5:01:6e:2f:d1:cb:f1:2c:5c:59:
                    66:7c:54:26:9a:f1:36:4a:07:0f:2e:38:b3:8f:2a:
                    8f:5f:ac:b2:82:77:8c:79:9f:5e:f0:cd:c2:5e:94:
                    1e:d7:55:1c:51:09:41:89:1c:eb:a2:43:ca:6e:59:
                    cd:89:7a:3d:04:f4:d1:e1:58:b5:dd:2f:52:b0:a9:
                    35:50:d1:91:bf:9b:b6:f3:f4:20:ce:38:93:2a:1a:
                    44:c7:78:b7:da:98:65:0c:93:25:7e:54:83:9b:1c:
                    03:2a:ee:75:f9:6d:ef:e6:1f:63:31:16:82:59:94:
                    45:57:9a:37:5a:cd:32:c5:8c:e4:64:3d:7a:df:2a:
                    30:87:f9:b0:6d:53:8c:61:57:99:02:3a:4d:a0:5c:
                    ea:3a:33:73:2e:95:0d:d1:7b:70:a0:ed:2f:97:5e:
                    6d:0e:d3:1a:9a:1d:3f:c4:49:e9:2b:51:4d:3d:2b:
                    de:db:5a:0a:c1:0f:8a:69:82:83:27:77:49:43:1b:
                    38:28:c3:9a:50:54:70:72:fb:93:47:04:b5:ed:b3:
                    39:17:bc:e1:5a:28:10:4e:77:df:f9:bf:65:34:9a:
                    b4:10:e5:54:85:a6:a2:de:3f:6c:36:e7:0a:71:17:
                    c2:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:5E:9A:33:D2:FE:F3:0E:DF:D8:2D:76:21:ED:8E:54:39:54:81:35
            X509v3 Authority Key Identifier:
                keyid:CE:8E:9B:E2:48:C7:41:BA:6A:26:AC:8C:FE:2C:2B:B7:C2:D7:A3:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zo6b4kjHQbpqJqyM_iwrt8LXo7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:38:53:94:42:3d:bd:f6:90:8c:30:f3:61:b3:02:2f:75:0a:
         9a:9d:e0:98:e3:d1:60:82:29:6e:03:d4:61:d9:3c:3a:ac:79:
         d7:ab:e5:0f:3c:99:84:24:d6:1d:4d:61:ae:98:a9:ae:27:a9:
         f3:09:07:cd:57:9f:72:8a:53:d2:e1:d0:fd:d3:20:af:16:ab:
         15:41:78:bd:a5:8e:75:33:35:e7:7d:32:3d:59:90:73:0a:fa:
         d8:2e:7a:c9:f7:3a:f2:38:7f:46:0b:af:97:9c:cc:d9:da:91:
         a8:9c:44:a3:de:98:45:49:bc:49:8f:4c:9c:24:61:23:c3:9b:
         95:bc:94:0d:d3:f6:f0:e9:51:3b:0c:09:81:59:a0:3c:4a:80:
         08:ee:f8:e9:dc:33:e5:5d:20:4a:94:9a:76:bc:a2:41:06:b4:
         a3:47:71:21:83:b9:57:85:a0:9e:06:ce:c0:ea:d0:b9:b6:ef:
         8a:c1:b5:fe:6d:17:f8:c8:ec:2d:46:29:65:e3:90:d3:d5:89:
         ec:99:72:09:55:cf:b9:84:ef:18:6d:ad:ba:cb:d5:29:b8:1e:
         8f:f8:a1:34:96:80:29:fb:2a:d1:0b:b9:29:b0:4d:2b:28:65:
         43:67:33:5a:d9:f2:7d:05:11:33:ae:fc:6f:b6:9d:67:9e:2c:
         eb:34:a7:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 21:37:56 2025 by rpki-client