Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft
File:                     7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft (raw, json)
Hash identifier:          /oYX9IUCt7Dr9Gn2fMTtolYh3jAPM/nSjcXFkiLmxOo=
Subject key identifier:   BA:03:EC:69:4B:4C:73:EE:AD:C6:AF:06:DE:25:63:69:DD:C5:B5:2D
Authority key identifier: EF:2A:98:B2:21:AB:E4:DD:95:99:9E:EF:29:2F:F0:BE:A4:12:18:AC
Certificate issuer:       /CN=ef2a98b221abe4dd95999eef292ff0bea41218ac
Certificate serial:       01958C97641E29805FA855C057DF317ACC5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft
Manifest number:          1300
Signing time:             Wed 12 Mar 2025 23:01:26 +0000
Manifest this update:     Wed 12 Mar 2025 23:01:26 +0000
Manifest next update:     Thu 13 Mar 2025 23:01:26 +0000
Files and hashes:         1: 7yqYsiGr5N2VmZ7vKS_wvqQSGKw.crl (hash: mC7cT3vNYvTs2VFmKFxn2RYHdD51QZVtjiGN6LIZxtY=)
                          2: UXcHNRDTyy3PiUqS2xFpW1tKLYo.roa (hash: BltR1oVh4LzI1B9mL1LTvil5PzPzPEDEKGPAhFkqH3c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 19:14:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8c:97:64:1e:29:80:5f:a8:55:c0:57:df:31:7a:cc:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef2a98b221abe4dd95999eef292ff0bea41218ac
        Validity
            Not Before: Mar 12 23:01:26 2025 GMT
            Not After : Mar 13 23:01:26 2025 GMT
        Subject: CN=ba03ec694b4c73eeadc6af06de256369ddc5b52d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b5:75:83:47:92:30:e6:62:ab:15:4a:d3:e0:
                    38:ca:e7:6d:dd:6c:48:3d:7a:5a:f1:1d:09:46:f9:
                    47:b9:58:9b:20:38:6c:59:09:8d:a4:34:d3:12:18:
                    7e:d0:55:7a:9b:df:bb:60:01:a5:ea:e2:4d:97:71:
                    ed:bf:4a:74:ab:ec:8b:2c:1e:a0:e6:5d:4b:e2:82:
                    89:01:65:27:be:14:5f:63:6f:6d:5e:15:9b:b9:ec:
                    e3:5a:2c:4f:00:0c:74:a3:eb:5a:e1:99:48:4a:ba:
                    13:54:0c:85:18:db:40:cb:11:3c:0b:60:95:a8:4a:
                    b8:bb:59:20:20:08:4c:c2:69:58:9b:86:9c:a0:30:
                    b2:45:e0:c1:57:69:e9:37:8f:fa:43:38:67:e3:f3:
                    b9:64:52:1b:34:0a:41:e6:83:f6:41:c9:0a:94:20:
                    58:91:63:4e:7d:76:ba:f6:8e:bf:18:14:5b:c1:01:
                    2e:a0:b9:00:e8:8b:4d:d0:17:b7:2f:3c:dc:dc:fd:
                    5c:d0:a2:1d:8b:45:93:3f:81:8b:55:20:34:bf:85:
                    83:3a:01:de:e9:7b:52:a0:b1:1d:55:83:b9:33:b8:
                    ca:dd:0a:9b:f6:ea:3f:d1:c0:a1:12:de:e0:c3:66:
                    db:6d:2b:16:e9:c7:b1:aa:a2:6d:c3:30:2c:57:b8:
                    0a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:03:EC:69:4B:4C:73:EE:AD:C6:AF:06:DE:25:63:69:DD:C5:B5:2D
            X509v3 Authority Key Identifier:
                keyid:EF:2A:98:B2:21:AB:E4:DD:95:99:9E:EF:29:2F:F0:BE:A4:12:18:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:ef:4e:91:74:d0:21:b9:1d:d2:d7:77:d3:23:1b:3e:22:fc:
         f0:50:1e:df:2b:a3:9c:9c:22:dd:31:3b:df:af:ec:35:d0:17:
         9d:fd:49:56:4d:f1:01:78:1e:b6:ed:19:31:99:6b:a9:02:a0:
         1a:30:34:8b:a8:ab:3a:a2:b3:a0:57:9c:18:bb:bc:62:e2:b6:
         49:2a:12:53:6c:30:fc:ca:13:3a:c6:74:4d:52:83:a3:c1:08:
         21:fc:76:0b:ea:7c:6a:d4:63:10:be:64:d3:2a:ac:f5:78:97:
         69:47:41:ca:3c:15:af:30:f3:a0:67:9f:a2:c6:ed:11:d8:9a:
         5e:aa:88:bb:ac:e5:ca:4d:46:b3:98:8d:1d:0e:ab:26:cb:56:
         94:18:31:1e:8c:30:2a:4f:cf:06:23:eb:22:0e:ce:39:03:fd:
         33:58:e5:ed:a0:af:a9:aa:aa:85:b4:0b:d1:ea:bb:bc:6b:d4:
         f7:92:62:72:97:a9:a4:a4:9a:42:6e:09:bd:b2:be:23:76:02:
         b1:e4:1d:4a:b8:26:5f:d7:ec:46:8d:8b:a6:16:8a:7b:bf:ec:
         ec:36:d0:0b:7a:eb:5d:54:80:50:04:90:c5:4e:6e:11:4e:19:
         b4:65:b3:2f:f6:95:06:47:09:22:da:6e:cc:90:c2:bf:ac:53:
         8f:7a:25:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:25:11 2025 by rpki-client