Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft
File:                     M-hVC8yfs7FAJgwp1p94mXjcwJo.mft (raw, json)
Hash identifier:          x+GuaGmqGOWPOEsk6D65hURUtD+lsN4srKHNTaXiwrU=
Subject key identifier:   1E:6A:91:D5:A5:CC:95:77:FF:D3:A4:50:82:8B:1A:7D:E0:9A:3C:9B
Authority key identifier: 33:E8:55:0B:CC:9F:B3:B1:40:26:0C:29:D6:9F:78:99:78:DC:C0:9A
Certificate issuer:       /CN=33e8550bcc9fb3b140260c29d69f789978dcc09a
Certificate serial:       01964CD964AB2349192CA9909EC6F5E3C468
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M-hVC8yfs7FAJgwp1p94mXjcwJo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft
Manifest number:          14F9
Signing time:             Sat 19 Apr 2025 07:00:37 +0000
Manifest this update:     Sat 19 Apr 2025 07:00:37 +0000
Manifest next update:     Sun 20 Apr 2025 07:00:37 +0000
Files and hashes:         1: M-hVC8yfs7FAJgwp1p94mXjcwJo.crl (hash: A5sSuYiAop1GzV6yBbz3VcF/UexumWayTO/jThWRi+g=)
                          2: ReM4HS5dXIm1BINFYm_Edq9MxBI.roa (hash: ChJsWIxFI+FaET5RTWvveeFgIxBAP+n5s4jzz5FmLi4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M-hVC8yfs7FAJgwp1p94mXjcwJo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4c:d9:64:ab:23:49:19:2c:a9:90:9e:c6:f5:e3:c4:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33e8550bcc9fb3b140260c29d69f789978dcc09a
        Validity
            Not Before: Apr 19 07:00:37 2025 GMT
            Not After : Apr 20 07:00:37 2025 GMT
        Subject: CN=1e6a91d5a5cc9577ffd3a450828b1a7de09a3c9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:db:26:c6:ee:0b:c6:3e:d9:6e:9d:43:41:3e:
                    a7:e4:f6:12:37:33:bd:7d:f0:f2:c9:17:a5:71:e0:
                    94:f3:a2:0a:05:d5:8b:4f:e7:53:ae:a9:5d:98:5a:
                    76:ef:a6:8f:cf:65:d6:77:6a:ca:9a:ca:42:21:74:
                    be:2b:08:c1:bb:0a:10:71:ce:4d:0b:4f:a2:0b:4f:
                    46:83:ac:88:bc:0a:be:2d:70:50:d2:61:87:1d:12:
                    88:da:63:6a:36:c9:ac:af:03:38:9a:22:42:44:d6:
                    af:51:53:f1:f9:2f:b7:31:f8:87:ba:a0:8d:7c:42:
                    b7:4d:f2:34:eb:d9:e7:3d:2d:a0:1b:68:3e:46:62:
                    92:f0:be:3e:58:e7:b5:20:1b:fa:bf:3b:96:b7:e1:
                    02:ad:d4:c7:4d:44:e7:c8:11:b1:09:30:c4:d0:a3:
                    4e:a7:40:a3:80:f0:ef:5d:57:80:86:39:aa:6f:76:
                    f2:cd:34:2b:46:1f:85:42:dd:6d:78:97:55:38:0a:
                    c9:aa:ac:52:7e:8e:4f:3e:e2:55:fb:15:62:7f:7c:
                    28:11:c8:29:61:9b:46:81:a9:19:7e:ac:2c:e1:94:
                    6a:5c:26:be:49:ed:fe:e2:e0:aa:d7:95:39:89:50:
                    9a:11:9c:e0:ec:6a:e0:ed:82:84:18:b1:b3:ec:94:
                    ed:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:6A:91:D5:A5:CC:95:77:FF:D3:A4:50:82:8B:1A:7D:E0:9A:3C:9B
            X509v3 Authority Key Identifier:
                keyid:33:E8:55:0B:CC:9F:B3:B1:40:26:0C:29:D6:9F:78:99:78:DC:C0:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-hVC8yfs7FAJgwp1p94mXjcwJo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:c2:a5:5a:d8:a9:e4:39:91:b4:3c:a4:03:d8:5f:8f:1c:ce:
         dc:12:c6:fd:85:6a:4f:76:57:66:e3:8f:43:7e:02:d6:c4:7e:
         fc:93:32:10:76:12:c7:c8:22:12:2d:38:4f:06:76:39:42:6b:
         7e:2f:c0:28:d8:3d:a3:a3:29:50:f5:17:98:1f:23:13:01:fe:
         14:04:66:4c:37:dd:c8:47:26:6e:9d:de:84:46:2f:4b:30:ce:
         de:fd:1c:f1:64:2e:9f:ea:07:da:f0:74:80:af:74:30:29:a1:
         cb:c4:ac:e1:92:ea:4a:1f:e1:5b:99:6f:11:3f:4c:26:0c:db:
         56:44:7d:99:69:ca:67:ea:42:f1:a6:10:d8:b7:93:a1:92:40:
         27:77:cb:c3:1c:99:85:5d:42:c7:17:8f:aa:b9:e0:20:e3:ec:
         89:29:df:92:0f:85:70:b0:dc:55:36:8c:98:07:ca:d0:e7:f3:
         a2:2f:34:22:2b:12:5a:91:64:72:a2:d6:a5:20:60:79:4c:21:
         4d:a3:e6:60:ed:39:3b:22:2e:a1:d2:4e:d9:f1:af:05:22:9c:
         7f:2a:33:8c:7f:ce:6c:54:75:e2:75:6a:77:b7:9a:ce:e1:dc:
         e4:b1:e1:af:84:e5:f7:0a:60:a7:0e:2b:f4:70:54:a5:f1:cd:
         20:25:ac:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:28:13 2025 by rpki-client