Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/496bba-a6a3-4dd3-8f86-3cbb5e877791/1/4LVOM0Iq091sqToY7dguC2jIWlw.mft
File:                     4LVOM0Iq091sqToY7dguC2jIWlw.mft (raw, json)
Hash identifier:          POP9ZxlxoPYHjz0v+ojqdpmK215WkEaYygFuj3AZ9rk=
Subject key identifier:   67:58:5C:B1:32:1D:99:88:29:55:B1:4B:F6:F6:A6:56:B1:DD:F1:92
Authority key identifier: E0:B5:4E:33:42:2A:D3:DD:6C:A9:3A:18:ED:D8:2E:0B:68:C8:5A:5C
Certificate issuer:       /CN=e0b54e33422ad3dd6ca93a18edd82e0b68c85a5c
Certificate serial:       01967679CE0A3D26C4A4907316A891C9DACA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4LVOM0Iq091sqToY7dguC2jIWlw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/496bba-a6a3-4dd3-8f86-3cbb5e877791/1/4LVOM0Iq091sqToY7dguC2jIWlw.mft
Manifest number:          081C
Signing time:             Sun 27 Apr 2025 09:00:16 +0000
Manifest this update:     Sun 27 Apr 2025 09:00:16 +0000
Manifest next update:     Mon 28 Apr 2025 09:00:16 +0000
Files and hashes:         1: 4LVOM0Iq091sqToY7dguC2jIWlw.crl (hash: 3c8daYj+RQ+W9jRcmMKR0gJ2z6/3a7bcqZ1V6cahY7c=)
                          2: 93WDpe_nqig4pm6_Z5KqoXM-m-I.roa (hash: +05qP5tX3rvyytgRGZx+7tHz5to109QDlCt0+rv4I4M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/496bba-a6a3-4dd3-8f86-3cbb5e877791/1/4LVOM0Iq091sqToY7dguC2jIWlw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/496bba-a6a3-4dd3-8f86-3cbb5e877791/1/4LVOM0Iq091sqToY7dguC2jIWlw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4LVOM0Iq091sqToY7dguC2jIWlw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 07:29:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:79:ce:0a:3d:26:c4:a4:90:73:16:a8:91:c9:da:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0b54e33422ad3dd6ca93a18edd82e0b68c85a5c
        Validity
            Not Before: Apr 27 09:00:16 2025 GMT
            Not After : Apr 28 09:00:16 2025 GMT
        Subject: CN=67585cb1321d99882955b14bf6f6a656b1ddf192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d2:64:9e:bd:a3:dd:6c:d0:9f:f9:91:29:80:
                    b5:fc:4e:c9:dc:ec:29:59:be:80:ef:41:ff:1e:1f:
                    1c:b1:b4:9d:ec:ae:db:e3:8c:b3:68:57:91:dc:6b:
                    1b:12:f1:44:14:4c:38:31:5e:40:95:b2:a3:e2:77:
                    81:8a:97:33:e1:1e:48:20:9a:da:2a:57:b2:f1:29:
                    2c:f4:96:c9:09:13:7d:63:19:34:b6:0e:23:2c:d4:
                    f7:a9:14:ab:a4:1b:d1:e2:98:d6:6d:2d:64:e8:fd:
                    8a:53:92:e8:56:2b:b1:8c:34:15:ba:5c:fb:2e:d8:
                    2b:62:be:a9:1f:f1:43:65:92:15:9f:95:72:f6:ad:
                    af:39:8e:81:db:e6:a7:62:51:6d:36:b8:ac:0c:70:
                    53:d8:9b:b1:d2:06:2b:20:a0:27:68:1d:c4:80:64:
                    0d:fb:3a:d4:c0:d5:37:f3:35:46:fb:53:f3:db:e9:
                    61:c4:40:a7:be:9a:82:57:ea:ef:3c:eb:aa:a8:b2:
                    38:f7:52:24:8d:6f:c5:f8:fa:5a:86:67:6f:ba:70:
                    0b:d1:d0:28:af:4c:60:80:c3:dd:7f:32:4f:1b:58:
                    bb:80:b1:11:cc:f2:74:8b:da:22:15:79:ef:c4:19:
                    26:58:b7:c7:e3:e9:9a:f9:b0:4f:1b:d4:f9:74:e3:
                    db:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:58:5C:B1:32:1D:99:88:29:55:B1:4B:F6:F6:A6:56:B1:DD:F1:92
            X509v3 Authority Key Identifier:
                keyid:E0:B5:4E:33:42:2A:D3:DD:6C:A9:3A:18:ED:D8:2E:0B:68:C8:5A:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4LVOM0Iq091sqToY7dguC2jIWlw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/496bba-a6a3-4dd3-8f86-3cbb5e877791/1/4LVOM0Iq091sqToY7dguC2jIWlw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/496bba-a6a3-4dd3-8f86-3cbb5e877791/1/4LVOM0Iq091sqToY7dguC2jIWlw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:e7:b5:64:ad:a5:99:26:8f:b7:88:df:17:1a:8f:6a:d2:b9:
         2a:ac:b3:09:63:6b:9e:7e:b9:25:f0:84:3f:39:2c:b0:18:89:
         ad:fc:99:71:41:65:b5:3b:40:36:34:cf:b8:51:fc:f5:3e:22:
         52:c1:ec:1d:99:2a:90:de:46:4b:c7:c7:86:2f:71:44:ba:4f:
         94:90:24:44:e0:0b:23:36:66:eb:7b:14:c9:da:f4:fa:13:4a:
         c9:0e:30:ed:66:f4:4f:4c:5b:a1:25:ab:af:e7:e3:8b:fa:c0:
         bc:12:90:c4:31:0a:ac:35:b6:33:25:64:59:17:df:c6:cb:25:
         bd:02:91:78:82:e8:ce:1b:e9:da:c6:d0:62:90:64:b1:b1:88:
         44:12:21:8e:71:12:59:e1:05:24:01:04:2b:21:bf:d0:53:f8:
         81:33:74:c2:97:c7:95:c7:91:39:a6:bb:4f:2a:51:f3:7a:53:
         eb:70:99:bf:42:2b:e0:71:d7:94:4d:0c:65:17:f9:c9:0e:61:
         09:8b:0a:cb:a5:5f:ba:95:e7:5e:35:44:20:da:b0:cf:fc:67:
         a0:83:ff:c5:25:ad:a5:bf:50:9e:ac:0f:e1:99:77:7b:5a:57:
         0a:6c:cb:bd:20:e2:6f:68:ac:47:57:56:b7:cb:d2:28:df:a3:
         97:ea:00:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:27:52 2025 by rpki-client