Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.mft
File:                     ZUdEPmINY8jk9UpnF4R00fkJr2g.mft (raw, json)
Hash identifier:          uZTLeECdPIcOI3gtNM/qPYOrJeuVWls1ebMMrhL4Ckk=
Subject key identifier:   F3:23:2C:D3:D7:98:51:D6:B3:E4:4B:ED:1C:E3:6E:52:F8:AD:50:FC
Authority key identifier: 65:47:44:3E:62:0D:63:C8:E4:F5:4A:67:17:84:74:D1:F9:09:AF:68
Certificate issuer:       /CN=6547443e620d63c8e4f54a67178474d1f909af68
Certificate serial:       01968D6FA1FBDF0836C203C8C5B03243267C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZUdEPmINY8jk9UpnF4R00fkJr2g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.mft
Manifest number:          059B
Signing time:             Thu 01 May 2025 20:00:25 +0000
Manifest this update:     Thu 01 May 2025 20:00:25 +0000
Manifest next update:     Fri 02 May 2025 20:00:25 +0000
Files and hashes:         1: ObZz_0AF61xVwJZ1enhy0gnRgCQ.roa (hash: x882U2h8oBPYNUh4TnbQfiF4AFln2XESGCfJHIw0DG8=)
                          2: ZUdEPmINY8jk9UpnF4R00fkJr2g.crl (hash: CbryXZs8dFKsVYzGgX7w4NGnOdKUxLSLGoCNiToGjs8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZUdEPmINY8jk9UpnF4R00fkJr2g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 20:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8d:6f:a1:fb:df:08:36:c2:03:c8:c5:b0:32:43:26:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6547443e620d63c8e4f54a67178474d1f909af68
        Validity
            Not Before: May  1 20:00:25 2025 GMT
            Not After : May  2 20:00:25 2025 GMT
        Subject: CN=f3232cd3d79851d6b3e44bed1ce36e52f8ad50fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e0:e5:b4:c7:2d:ed:62:c2:8b:24:c9:80:32:
                    d8:88:e4:2a:08:60:60:06:c0:58:1a:55:01:a2:f0:
                    9e:a6:32:00:00:a0:bb:2d:0c:e2:ba:0d:94:ea:3f:
                    e1:15:ad:13:01:62:fd:db:5f:4c:51:76:0f:4a:27:
                    46:fe:c8:3f:e6:64:89:d0:48:57:ab:5e:2c:27:bc:
                    6c:62:0a:b5:06:12:1f:8b:5d:a6:4b:0e:55:be:48:
                    a9:70:ec:95:fe:29:71:36:b4:cc:6f:a0:c3:ea:a4:
                    4f:41:cf:12:b5:11:4b:3d:ed:c7:51:cc:22:9b:e1:
                    34:1a:5d:32:2f:eb:7c:d4:5a:61:89:4a:0e:4b:67:
                    2a:bb:f7:f1:7d:2c:31:da:17:5a:3d:f6:b7:fb:97:
                    43:0c:62:f2:10:79:10:69:d3:f7:20:26:b6:cc:f4:
                    c8:d0:d2:94:75:90:b1:d8:77:ba:01:49:8d:a2:3f:
                    32:ad:99:59:8b:4f:a9:bc:28:ca:f1:1e:03:fd:7d:
                    a8:d3:95:16:0e:58:6c:de:a0:a2:83:1e:c8:1e:58:
                    8f:a5:65:4a:74:32:e3:2f:0d:79:ae:3e:b1:a5:30:
                    29:4a:96:b1:4a:a4:ef:d4:cf:06:8a:36:d5:6e:12:
                    d4:7e:89:73:33:70:22:fb:41:a3:a1:1f:e5:87:96:
                    2b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:23:2C:D3:D7:98:51:D6:B3:E4:4B:ED:1C:E3:6E:52:F8:AD:50:FC
            X509v3 Authority Key Identifier:
                keyid:65:47:44:3E:62:0D:63:C8:E4:F5:4A:67:17:84:74:D1:F9:09:AF:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUdEPmINY8jk9UpnF4R00fkJr2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:2d:c7:48:a6:f1:15:b4:97:b2:e3:06:97:e6:f7:21:c6:09:
         67:b8:07:fa:db:99:64:d4:a3:3e:ba:0d:45:71:f5:0f:4c:40:
         21:14:e9:39:1a:db:fa:cc:a5:b9:75:ab:a3:31:f3:4e:30:47:
         38:41:44:dc:08:37:8b:e0:65:b2:75:c8:2f:66:9d:1c:a2:b5:
         73:92:d9:ec:dd:52:5a:3a:fa:97:d3:43:83:dd:fb:81:c0:09:
         34:75:db:70:d3:06:76:f7:e0:8b:f8:9b:19:5e:63:4b:85:3c:
         92:9c:7d:8f:fe:24:12:28:00:32:44:4f:54:c8:42:45:d8:8a:
         fc:f6:9c:0b:9c:47:d0:fa:7e:36:e6:c5:51:82:be:bc:c8:85:
         70:6b:75:30:a3:b8:99:dd:44:a3:ca:f1:fb:ad:70:0f:db:03:
         25:c2:0f:c7:85:db:14:b2:7e:8f:1c:9d:de:fd:55:cd:1d:f9:
         30:2f:62:e4:de:01:ab:fd:a8:e2:a3:b0:c1:52:ed:b3:bf:99:
         ed:09:d3:5d:1b:82:86:64:4a:79:0f:17:20:76:c0:b1:a2:e2:
         8f:5e:57:47:9a:a0:e0:73:03:35:be:f3:42:7c:8f:f9:4d:da:
         9f:54:e4:40:54:31:3d:ce:dc:d3:6f:17:f0:c1:d9:30:8b:00:
         9a:6b:ba:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 06:22:49 2025 by rpki-client