Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
File:                     L89hnM7Pg29WpyAQ6C-33SQEAvk.mft (raw, json)
Hash identifier:          ul23lnBJm7nBjUyWFd08VNY0B7ArR5eUmZ0Kux8zYUY=
Subject key identifier:   39:91:5E:08:95:3D:C9:1F:D3:39:6E:EF:29:0C:E5:90:AC:D6:47:D1
Authority key identifier: 2F:CF:61:9C:CE:CF:83:6F:56:A7:20:10:E8:2F:B7:DD:24:04:02:F9
Certificate issuer:       /CN=2fcf619ccecf836f56a72010e82fb7dd240402f9
Certificate serial:       01968A6E953B72517D49DD12B0BEBECFB20E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
Manifest number:          062E
Signing time:             Thu 01 May 2025 06:00:24 +0000
Manifest this update:     Thu 01 May 2025 06:00:24 +0000
Manifest next update:     Fri 02 May 2025 06:00:24 +0000
Files and hashes:         1: L89hnM7Pg29WpyAQ6C-33SQEAvk.crl (hash: UW0XVDLSQwaQ638RpBDXK/+M9jK5BqyEJklCT3xGMbA=)
                          2: jCfDa1o9-67BNQODivTRRldEbdY.roa (hash: 8Y6qhIf9Ka0kdUNg/SnNbfjipainSlycgW7SSV7AHSU=)
                          3: om141KzkG2-4eMZ-f0PthIkpE80.roa (hash: cw3Iskxz7drppI2oVPr2KEtsT6+wW7KALNNnzpIfPOQ=)
                          4: vA4JTCZBPjorS9CM--5uNxgqUOI.roa (hash: C8BQR0NQXngOUVQVK+k99B0pWs9mjN+aAreX6gH4h2Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 06:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8a:6e:95:3b:72:51:7d:49:dd:12:b0:be:be:cf:b2:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fcf619ccecf836f56a72010e82fb7dd240402f9
        Validity
            Not Before: May  1 06:00:24 2025 GMT
            Not After : May  2 06:00:24 2025 GMT
        Subject: CN=39915e08953dc91fd3396eef290ce590acd647d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e0:b9:6d:41:66:c3:07:2a:77:04:36:5f:0b:
                    cc:8f:6b:e0:d1:db:a5:05:b6:bb:9b:36:21:2d:16:
                    e6:06:9a:fd:b6:8a:d7:5c:ec:10:09:d4:53:79:28:
                    f9:a1:04:17:c7:4d:ae:ec:a9:09:2a:48:63:f6:60:
                    b4:42:6b:1f:8a:0e:d6:eb:31:ba:49:42:38:66:14:
                    54:2a:f6:61:18:2b:31:eb:c0:df:14:5f:f6:c0:cb:
                    48:62:a5:74:29:c2:49:27:87:f7:a7:ce:e5:7b:5c:
                    ab:73:0d:1d:2c:0b:d1:13:ee:ba:c9:4a:57:bf:c1:
                    9a:bd:6d:fb:5b:05:87:eb:06:ff:a1:6e:ac:ae:38:
                    8c:1e:91:82:45:11:a9:7c:60:22:3d:79:16:f5:5d:
                    b5:f1:8f:36:7e:d0:7a:76:95:a0:c0:33:5c:d2:b0:
                    5a:b9:44:ca:27:c9:28:6d:b6:5f:c2:49:fd:a5:11:
                    55:ed:1e:7a:8c:51:2f:0a:39:85:8b:4d:01:b8:14:
                    78:58:3b:8c:a3:37:e5:58:90:12:56:ff:aa:33:7e:
                    97:01:81:88:4d:bf:d7:47:40:56:09:d2:74:18:80:
                    32:3b:43:e8:74:42:b4:90:05:11:3b:ee:cb:f0:cc:
                    1f:a7:a0:28:15:dc:fc:da:de:71:29:58:17:98:35:
                    e2:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:91:5E:08:95:3D:C9:1F:D3:39:6E:EF:29:0C:E5:90:AC:D6:47:D1
            X509v3 Authority Key Identifier:
                keyid:2F:CF:61:9C:CE:CF:83:6F:56:A7:20:10:E8:2F:B7:DD:24:04:02:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:80:dd:a2:cc:a2:bf:7b:eb:cb:ee:61:65:ad:95:d8:58:17:
         ed:fe:0c:2a:04:06:82:c7:87:c7:16:ae:ac:f3:3c:6d:7e:44:
         36:44:84:de:eb:94:8f:4e:71:70:36:93:94:68:ff:e9:05:f1:
         78:c7:1d:90:f5:03:6b:f7:34:51:66:64:48:de:81:83:1d:2f:
         65:f4:27:e0:d6:0d:53:64:ab:36:de:84:13:05:b0:28:ea:a9:
         61:7e:fd:49:96:d2:c0:13:6e:7b:38:01:fa:70:cc:6d:00:11:
         bb:ae:00:6a:82:b6:be:f7:ed:72:53:66:f7:3e:bb:c2:b7:af:
         d4:88:4b:ab:53:26:a2:e0:62:f3:3b:ab:ca:90:1a:75:30:9c:
         3e:71:c0:f3:9c:e8:aa:0d:86:04:31:fa:7a:a3:d4:58:c1:7b:
         f7:66:43:50:4c:51:a7:1b:c7:21:a4:b4:ad:c2:ae:2b:f5:96:
         62:6d:2f:c6:5d:e9:63:3a:7e:22:3c:0f:79:97:a1:38:cc:1b:
         4e:33:e2:7d:e3:43:e7:a7:ca:8f:84:8e:19:45:a4:aa:75:cf:
         ac:34:49:8c:43:70:14:f0:45:bf:ca:f2:0a:a0:3d:f5:c2:e8:
         42:49:94:f0:9f:d0:d3:2a:bb:dd:96:af:5c:50:d0:f2:f7:a4:
         a4:24:18:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 16:58:47 2025 by rpki-client