Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.mft
File:                     Zu07pox4v_LEckQAreY0hIL7Q2Q.mft (raw, json)
Hash identifier:          PTFkBFDP2ulNX3PRok1dLVO8VDYKRkRuR+vwZFhHhJU=
Subject key identifier:   11:2F:2E:D3:AE:37:86:1B:BA:28:C9:EC:DC:87:E1:59:2B:F6:42:13
Authority key identifier: 66:ED:3B:A6:8C:78:BF:F2:C4:72:44:00:AD:E6:34:84:82:FB:43:64
Certificate issuer:       /CN=66ed3ba68c78bff2c4724400ade6348482fb4364
Certificate serial:       01967F45F9A4F9C3232A90A12D4283F917DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.mft
Manifest number:          053C
Signing time:             Tue 29 Apr 2025 02:00:14 +0000
Manifest this update:     Tue 29 Apr 2025 02:00:14 +0000
Manifest next update:     Wed 30 Apr 2025 02:00:14 +0000
Files and hashes:         1: Fj8ltGVj4bwSu39N9YoDfu9hSDQ.roa (hash: uLPHDZq9gqVO8ebYrJkyS5eyy5WJ7smXGXrfo42hNSA=)
                          2: MaxzsR0kwMliUpktNGJeA1YTbq8.roa (hash: E2oo5IoDgbAj+TaESsQDHN0WQGIrVE8oADktvNT9aM0=)
                          3: Ur62Nf4a7xdo9YL9reRteLUJLQg.roa (hash: cTYkrEu5Wjkc8LFBNFp03pV3rpo4tl8VZFY9in/a2XI=)
                          4: ZcpFGy9TDPs7L0KOBQ4w8ReDu1U.roa (hash: NM1odmN9ZntGvJU+jyNUGkFBTx9gx9NvZezdCeHEq/E=)
                          5: Zu07pox4v_LEckQAreY0hIL7Q2Q.crl (hash: dgZt2Ej9GA/B8ESq1TOw+Vxqzwz0gx3LcCRSL0fSCfo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 22:36:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7f:45:f9:a4:f9:c3:23:2a:90:a1:2d:42:83:f9:17:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66ed3ba68c78bff2c4724400ade6348482fb4364
        Validity
            Not Before: Apr 29 02:00:14 2025 GMT
            Not After : Apr 30 02:00:14 2025 GMT
        Subject: CN=112f2ed3ae37861bba28c9ecdc87e1592bf64213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a3:d3:f4:d5:a5:27:3c:67:d9:a1:b9:1e:9c:
                    48:33:ef:dd:ca:a5:aa:d0:54:51:a5:c3:2c:5c:3d:
                    79:89:15:ff:d1:24:66:f7:a5:a6:20:1f:4f:8e:56:
                    2a:6b:3a:ec:46:54:04:39:77:e1:ae:a2:61:0f:4b:
                    d2:4c:32:4f:bc:4f:70:bd:88:e3:b9:2e:89:a4:87:
                    d9:df:63:df:ea:90:5b:1b:43:46:f2:84:6c:7a:7d:
                    38:55:3b:9c:87:42:9c:1b:1e:0a:07:62:5a:c1:f0:
                    ee:07:67:61:10:77:c2:ab:95:a6:12:26:af:31:08:
                    87:d9:9f:cc:d2:cb:f1:96:c3:e0:f1:a6:c4:e3:fe:
                    0c:d1:ee:5d:dd:c9:a7:e3:cb:68:39:76:b0:e7:81:
                    ca:f1:31:81:c6:67:70:b8:72:ce:bf:f0:78:62:67:
                    0c:91:bd:63:ec:df:94:83:a0:b5:c2:7b:e2:b9:10:
                    6b:71:38:fb:0b:97:ac:5c:0f:60:31:2f:10:4a:7f:
                    8f:bc:af:2b:04:05:a7:66:3a:bd:fe:ff:38:c5:ee:
                    e6:6f:1b:5d:a6:e4:60:07:5e:da:81:3e:fe:56:b0:
                    d7:3f:40:2b:e8:6a:ea:b1:08:92:c9:86:48:a8:0a:
                    18:0f:33:c7:9c:04:df:da:a8:41:8d:f6:54:35:35:
                    e9:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:2F:2E:D3:AE:37:86:1B:BA:28:C9:EC:DC:87:E1:59:2B:F6:42:13
            X509v3 Authority Key Identifier:
                keyid:66:ED:3B:A6:8C:78:BF:F2:C4:72:44:00:AD:E6:34:84:82:FB:43:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:dd:ed:35:f9:5d:ea:00:ba:19:cc:dd:43:08:1d:0c:a7:ba:
         47:f8:d9:67:3b:49:ae:13:0a:4f:02:5c:0a:80:73:e5:ef:6a:
         1f:dc:d5:c7:a3:50:50:d9:b9:1f:4c:fb:61:0a:60:f8:b4:99:
         30:1f:5d:37:18:8b:66:39:b8:75:db:e9:79:fa:84:4b:95:dd:
         5d:45:81:ef:13:11:c2:1b:ea:85:e7:31:6d:44:c8:44:67:80:
         46:bc:2e:d7:43:c6:53:4b:95:57:55:c2:28:37:1b:1d:53:3a:
         92:03:4d:fa:21:03:fb:a5:8f:cb:47:91:b9:10:09:82:cb:e9:
         42:74:03:c1:8f:db:02:51:d7:48:58:40:bc:c9:a7:5b:c1:a7:
         1d:9b:2d:42:5c:d0:22:9a:6f:72:72:7c:98:82:2b:38:a2:3b:
         62:28:f8:e0:9a:4a:43:ff:3f:c3:56:74:45:29:a1:42:2c:40:
         9c:d6:f8:b7:68:2c:71:df:27:e7:df:f2:d5:25:20:25:5c:22:
         b9:25:06:16:62:02:80:37:a3:16:0a:b5:2a:e2:58:e1:4e:6b:
         5b:9d:de:97:91:d6:07:19:97:a7:e0:3f:29:c7:92:2b:49:f9:
         92:a4:96:d1:3b:9c:e1:03:46:27:3e:84:a2:42:af:72:d5:c0:
         29:99:78:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 05:03:51 2025 by rpki-client