Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/jO6IBP9wN24q_iGr-T4ijVr91Qk.mft
File:                     jO6IBP9wN24q_iGr-T4ijVr91Qk.mft (raw, json)
Hash identifier:          HQcP5F0IV1863e+e9Fdoz676UpzgxRwIIjc+WivkMQE=
Subject key identifier:   CC:A2:8F:00:6E:1A:E8:48:71:29:4C:04:24:35:37:90:D7:43:B2:57
Authority key identifier: 8C:EE:88:04:FF:70:37:6E:2A:FE:21:AB:F9:3E:22:8D:5A:FD:D5:09
Certificate issuer:       /CN=8cee8804ff70376e2afe21abf93e228d5afdd509
Certificate serial:       0196507F437ACCEF01F709119F3E956FF575
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jO6IBP9wN24q_iGr-T4ijVr91Qk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/jO6IBP9wN24q_iGr-T4ijVr91Qk.mft
Manifest number:          14FB
Signing time:             Sun 20 Apr 2025 00:00:39 +0000
Manifest this update:     Sun 20 Apr 2025 00:00:39 +0000
Manifest next update:     Mon 21 Apr 2025 00:00:39 +0000
Files and hashes:         1: ZW-bLN7mpwXCPTSQ0v5aAVoTu8g.roa (hash: E10KwVeqHj4J7myzFFX6atSdaz21CXH8tahheXJigm0=)
                          2: jO6IBP9wN24q_iGr-T4ijVr91Qk.crl (hash: WiSeXgjFlZ6a4apXCHNQtnuG7ucAgiZpW0GaE7vVSfs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/jO6IBP9wN24q_iGr-T4ijVr91Qk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/jO6IBP9wN24q_iGr-T4ijVr91Qk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jO6IBP9wN24q_iGr-T4ijVr91Qk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 16:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:50:7f:43:7a:cc:ef:01:f7:09:11:9f:3e:95:6f:f5:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cee8804ff70376e2afe21abf93e228d5afdd509
        Validity
            Not Before: Apr 20 00:00:39 2025 GMT
            Not After : Apr 21 00:00:39 2025 GMT
        Subject: CN=cca28f006e1ae84871294c0424353790d743b257
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a5:1e:7a:fa:57:06:45:fb:bf:5d:94:5b:6c:
                    74:77:20:23:2c:1f:ab:3c:4c:99:7f:ba:5c:98:86:
                    f0:d2:9d:78:1b:98:b2:e9:c1:6d:78:fe:2a:e7:40:
                    88:b4:17:5d:8f:30:b7:f9:76:f7:3f:28:0d:65:cf:
                    13:9a:d9:be:49:d9:6e:f6:a8:7b:3d:50:d3:5e:a5:
                    75:ff:88:bf:b8:9b:2f:5c:23:84:83:75:dc:f0:48:
                    01:3b:36:9f:15:27:07:53:9e:08:f4:44:8b:5a:0c:
                    2e:43:45:75:9b:38:66:0d:08:7d:99:2a:38:17:ba:
                    10:21:56:5b:15:04:3c:74:f1:ab:7f:66:81:3a:1b:
                    7a:8f:39:62:a8:75:4d:d8:8c:4f:20:44:c2:6b:a1:
                    d3:b3:f5:01:b6:54:a5:db:b4:e1:a7:eb:5b:cd:72:
                    a8:ac:9e:0f:8c:94:1e:56:ca:ae:eb:96:5c:0e:1b:
                    1c:76:e2:2d:bb:2a:5b:26:c8:fd:1b:a8:88:4c:6b:
                    7b:2b:dc:02:82:b4:c1:28:27:f3:ac:2a:44:50:80:
                    51:74:27:3a:5c:a9:dd:40:d2:81:d2:0c:cc:db:13:
                    95:8b:f1:ed:60:6d:d6:d3:50:83:7f:78:ba:30:ab:
                    18:df:9e:ac:42:e3:c8:ab:84:39:f9:e4:de:ef:51:
                    71:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:A2:8F:00:6E:1A:E8:48:71:29:4C:04:24:35:37:90:D7:43:B2:57
            X509v3 Authority Key Identifier:
                keyid:8C:EE:88:04:FF:70:37:6E:2A:FE:21:AB:F9:3E:22:8D:5A:FD:D5:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jO6IBP9wN24q_iGr-T4ijVr91Qk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/jO6IBP9wN24q_iGr-T4ijVr91Qk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/jO6IBP9wN24q_iGr-T4ijVr91Qk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:3e:15:9b:7c:36:de:a3:67:bb:91:a0:f5:05:aa:e7:a1:88:
         69:f3:8e:11:b3:78:c9:52:37:a2:1d:b1:83:ab:6c:89:a2:c8:
         59:56:ea:3f:4e:99:65:fc:b5:3d:ee:8a:63:36:ad:9b:f5:b7:
         54:e4:7d:51:fa:df:61:c9:f5:e8:0d:7a:09:ba:23:8a:fd:9c:
         34:92:d2:84:68:c5:cd:2e:53:fb:f3:6c:3e:0f:19:ba:bd:e5:
         a8:1a:80:f8:80:b5:4c:ba:8f:93:51:7a:51:a3:fa:86:c9:e9:
         ce:4b:b7:be:90:e8:b8:7a:0e:7f:ff:00:26:2a:62:72:c0:ac:
         ee:b2:e6:de:d2:77:b9:f7:cc:02:bc:d3:16:90:f6:09:a4:73:
         ad:91:50:0b:8d:c9:92:f3:b3:77:da:4e:bb:80:f9:06:41:8e:
         00:29:32:02:c1:a8:0a:29:ce:a3:6e:cf:56:3b:3b:cb:fd:92:
         95:f8:5a:70:20:40:63:a4:37:e9:ad:b3:37:07:6b:11:da:6b:
         7e:3c:37:8c:9e:27:db:de:b1:18:f8:d8:04:11:d9:ec:ad:b1:
         d6:9b:8f:49:19:2e:3a:6f:2e:77:7c:5b:24:01:7e:96:25:2b:
         69:e5:c9:36:72:3d:4e:ad:e0:0f:f7:d9:e0:7b:72:22:8e:b2:
         cd:45:dd:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 01:59:21 2025 by rpki-client