Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft
File:                     Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft (raw, json)
Hash identifier:          e1OO8guBzq1t4vgHLiTgxxauA0vKXJkcJz+GfoDGQ3I=
Subject key identifier:   9B:A6:20:D2:C7:FE:82:A3:0A:21:76:5F:02:4B:43:D3:15:5A:72:4F
Authority key identifier: 66:8D:A9:2F:99:B5:40:7F:28:A2:F3:66:13:E8:49:44:7A:93:F6:B9
Certificate issuer:       /CN=668da92f99b5407f28a2f36613e849447a93f6b9
Certificate serial:       019648C56BA4A20437A4FD1140FB54E930DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zo2pL5m1QH8oovNmE-hJRHqT9rk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft
Manifest number:          14FC
Signing time:             Fri 18 Apr 2025 12:00:19 +0000
Manifest this update:     Fri 18 Apr 2025 12:00:19 +0000
Manifest next update:     Sat 19 Apr 2025 12:00:19 +0000
Files and hashes:         1: Zo2pL5m1QH8oovNmE-hJRHqT9rk.crl (hash: +aPdKBZSHNy+xiEcimXlNbVuvZGB4KuTIHIUOpunRyA=)
                          2: kwXk5lchLSQusIqWIc1_LElpPmw.roa (hash: ruCSMnKApmMujFMc/KrEw7+q84O8Se1YB2oZOAhAAA0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zo2pL5m1QH8oovNmE-hJRHqT9rk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:48:c5:6b:a4:a2:04:37:a4:fd:11:40:fb:54:e9:30:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=668da92f99b5407f28a2f36613e849447a93f6b9
        Validity
            Not Before: Apr 18 12:00:19 2025 GMT
            Not After : Apr 19 12:00:19 2025 GMT
        Subject: CN=9ba620d2c7fe82a30a21765f024b43d3155a724f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7b:cc:a8:c6:a8:0e:24:ce:56:af:b7:7e:3a:
                    03:10:27:34:71:f6:22:7d:0d:e8:22:ee:70:02:2d:
                    e6:89:b3:92:be:bb:29:9d:10:a0:9a:d2:d0:05:05:
                    8c:bf:7e:58:1d:14:12:85:d3:c0:83:c1:c1:87:b0:
                    c3:07:ae:7b:1d:21:46:3f:f5:20:33:a1:8c:1d:d0:
                    b2:b6:1f:15:7c:42:77:5d:2a:6d:c1:b2:92:df:55:
                    1b:b2:0b:7b:38:e1:04:05:04:65:b6:b1:93:dc:ff:
                    f0:f7:a3:cc:a2:c9:e0:13:86:a8:99:2d:c5:a3:e4:
                    1f:80:35:fd:98:aa:1b:1f:15:33:20:2d:bf:7c:3e:
                    08:3d:71:4e:ec:73:b3:a9:23:af:76:14:d4:4f:83:
                    71:0a:36:10:3c:63:95:b6:29:3c:4b:93:29:de:dc:
                    60:1d:cb:33:32:98:91:93:f1:88:a8:fb:4d:2b:17:
                    ee:36:08:f3:ed:b2:22:10:2e:64:0b:bd:1a:13:58:
                    d2:1d:a8:a7:18:44:6c:e3:22:76:21:30:3b:f6:bc:
                    44:d1:09:ec:6d:52:ed:e4:f2:bd:2a:40:e1:0b:ac:
                    2a:a5:2c:fa:4c:be:84:a5:b3:ce:9e:4e:16:5c:8b:
                    ca:f2:30:a6:78:88:3a:07:06:96:c4:89:60:de:e6:
                    d4:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:A6:20:D2:C7:FE:82:A3:0A:21:76:5F:02:4B:43:D3:15:5A:72:4F
            X509v3 Authority Key Identifier:
                keyid:66:8D:A9:2F:99:B5:40:7F:28:A2:F3:66:13:E8:49:44:7A:93:F6:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zo2pL5m1QH8oovNmE-hJRHqT9rk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:da:ff:74:6a:e2:08:8b:d4:57:eb:fb:31:37:f5:ba:3c:90:
         62:12:c6:1e:62:3b:ac:f8:67:22:a2:44:4a:08:52:7b:ec:ff:
         12:af:81:32:94:72:ce:ee:c5:82:c9:59:1b:11:44:26:d8:53:
         ec:83:1c:82:8e:5a:5a:6a:10:c1:73:3e:ea:74:1a:67:67:d5:
         f4:f8:54:06:42:98:ee:91:24:c1:c2:8f:e7:7c:cb:60:53:13:
         6d:26:73:d6:c4:47:74:2a:55:ce:44:c9:d1:30:de:f0:8b:4f:
         79:d1:00:16:cb:cf:38:05:3d:9f:d4:dd:78:14:6e:10:ea:e9:
         51:65:6c:4e:8f:e4:7e:c8:8e:a1:71:0b:84:74:d7:c6:61:8e:
         de:92:ee:e9:4a:bd:60:9c:80:03:77:3e:68:fb:84:b8:00:60:
         b8:f8:19:a6:b5:d3:9c:d1:97:aa:ae:cc:f9:bf:87:6f:45:a0:
         33:0d:1b:b8:36:1a:03:ac:54:0f:8e:7b:55:6c:43:a8:5f:b9:
         e5:9f:eb:b2:6e:96:17:96:d3:c8:6c:62:a3:a7:0d:ec:e0:d0:
         45:7c:cd:15:a2:f2:a4:58:ea:b5:3a:a0:8c:aa:95:58:67:09:
         7c:08:5a:22:d9:fa:43:b3:4d:83:5d:9b:44:fc:d3:ae:41:a3:
         80:fb:b2:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 16:00:09 2025 by rpki-client