Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.mft
File:                     rSzfJ9neZesk5c_J0xDkyKAwFGA.mft (raw, json)
Hash identifier:          /2v0kgMZQ4O/uhVbA5hM+l92KNkD4kb19aySay3jQjE=
Subject key identifier:   0A:83:45:79:A0:8C:10:EA:07:35:63:F1:72:BD:FC:C9:7F:17:05:75
Authority key identifier: AD:2C:DF:27:D9:DE:65:EB:24:E5:CF:C9:D3:10:E4:C8:A0:30:14:60
Certificate issuer:       /CN=ad2cdf27d9de65eb24e5cfc9d310e4c8a0301460
Certificate serial:       019745C2220D3A5E2C7191D185FD00FEC02C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rSzfJ9neZesk5c_J0xDkyKAwFGA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.mft
Manifest number:          0B83
Signing time:             Fri 06 Jun 2025 15:00:39 +0000
Manifest this update:     Fri 06 Jun 2025 15:00:39 +0000
Manifest next update:     Sat 07 Jun 2025 15:00:39 +0000
Files and hashes:         1: Zp_o_Avy64dimsDN37AJZ_vsvNw.roa (hash: w725AD9grVqnjs1N3X5smX0OnVgWb9b37Wpm1j4UCoQ=)
                          2: rSzfJ9neZesk5c_J0xDkyKAwFGA.crl (hash: kFkPwYBoxh8UCb0/Jp5gHm0+GGi6Vg6+dgVO89hlXC4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rSzfJ9neZesk5c_J0xDkyKAwFGA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:45:c2:22:0d:3a:5e:2c:71:91:d1:85:fd:00:fe:c0:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad2cdf27d9de65eb24e5cfc9d310e4c8a0301460
        Validity
            Not Before: Jun  6 15:00:39 2025 GMT
            Not After : Jun  7 15:00:39 2025 GMT
        Subject: CN=0a834579a08c10ea073563f172bdfcc97f170575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:93:48:82:fd:11:2d:14:33:86:4b:14:e1:f2:
                    49:c5:fb:25:c1:92:2e:05:00:98:e0:a9:fe:d8:4c:
                    77:5c:a2:98:18:e2:f8:22:92:86:ef:5c:12:08:39:
                    a4:93:97:ec:86:f9:a8:4c:bb:1b:c5:da:a4:50:a2:
                    2a:58:d1:a7:a1:18:71:0e:06:79:d3:66:53:e6:69:
                    21:4f:6d:a3:45:cf:d5:8c:19:f8:0c:ca:58:23:af:
                    ac:25:f5:0a:15:05:f4:bb:41:83:cd:f8:74:64:dc:
                    46:93:0f:9d:93:95:f4:a2:5e:0a:58:8b:27:25:59:
                    9a:a7:2a:66:f7:4e:c2:8b:91:5f:fa:c8:cd:96:d8:
                    ea:ad:c1:48:7a:97:ae:ea:c8:03:31:0d:02:eb:44:
                    4d:ee:76:ea:6e:bd:4e:cf:7f:1a:3c:1f:5a:06:1d:
                    fd:68:64:6e:4c:21:de:b5:b1:c9:54:87:1e:40:78:
                    85:23:e3:76:0d:e2:42:c7:f6:59:02:5c:d0:65:fe:
                    9d:e0:4b:38:af:62:42:3b:1b:68:a3:d0:db:97:a9:
                    38:d4:23:73:2f:99:4e:f9:77:67:96:c6:ef:b9:b4:
                    1e:9f:12:77:37:3d:f8:43:bd:33:24:57:12:7c:88:
                    03:a8:e2:77:7e:55:d2:c5:f2:31:2b:6f:51:04:86:
                    1e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:83:45:79:A0:8C:10:EA:07:35:63:F1:72:BD:FC:C9:7F:17:05:75
            X509v3 Authority Key Identifier:
                keyid:AD:2C:DF:27:D9:DE:65:EB:24:E5:CF:C9:D3:10:E4:C8:A0:30:14:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSzfJ9neZesk5c_J0xDkyKAwFGA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:36:d2:bb:3f:a4:12:f9:1f:fa:9f:0d:77:80:75:09:bf:97:
         09:f3:9b:f5:81:ee:52:dd:50:07:d7:e3:cb:53:65:2a:fa:84:
         d5:3a:13:4c:b2:ef:b1:cd:d9:8c:05:cc:d8:fe:61:b5:26:7d:
         55:78:a4:cd:82:0d:ac:36:4f:60:ee:b4:00:5b:89:58:75:15:
         42:f7:d4:08:cd:48:5d:e8:b1:8d:ad:55:44:c2:32:5a:97:29:
         3e:1a:92:45:d9:eb:2f:7a:df:c6:f3:4c:05:4f:19:32:ee:31:
         38:1f:9a:b5:8f:c2:52:bf:c1:a2:28:0d:15:9c:66:c0:49:b6:
         f2:57:3c:16:d5:1c:ce:8c:7f:f0:5a:e8:73:e6:7e:e3:62:b4:
         14:a8:5f:7f:eb:4c:5e:e1:b0:28:19:2d:10:96:2c:be:2e:dd:
         25:95:76:0f:09:c9:05:ed:7c:98:06:37:90:f8:f5:15:ff:3f:
         d0:8d:fd:4c:f5:5a:bc:6b:86:38:9f:52:47:51:0f:7b:5a:1e:
         f9:2c:fe:97:45:c3:a6:9c:75:95:00:67:4d:80:85:d2:99:81:
         bd:12:75:ec:2e:70:d4:c2:65:78:97:fc:b5:7a:58:88:b9:7b:
         4e:6e:ab:a2:b2:26:65:ac:fc:67:bf:4d:44:ba:40:00:09:b6:
         96:38:5a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:55:35 2025 by rpki-client