Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/31b8c4-dee7-4eee-a0e0-984e82d4b806/1/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.mft
File:                     wE9_yIPJ1eAjGlhbCuE554ZUO7Y.mft (raw, json)
Hash identifier:          RVHHrPif07JgNke/5dEUz/Qitv6QNtavqUJWFoAJGzQ=
Subject key identifier:   43:24:EA:74:63:6D:7B:8C:0C:CC:0F:32:7E:4C:08:20:41:36:BB:51
Authority key identifier: C0:4F:7F:C8:83:C9:D5:E0:23:1A:58:5B:0A:E1:39:E7:86:54:3B:B6
Certificate issuer:       /CN=c04f7fc883c9d5e0231a585b0ae139e786543bb6
Certificate serial:       01968D38F94C6C6CD9A267B0A7FACC324711
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/31b8c4-dee7-4eee-a0e0-984e82d4b806/1/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.mft
Manifest number:          0740
Signing time:             Thu 01 May 2025 19:00:43 +0000
Manifest this update:     Thu 01 May 2025 19:00:43 +0000
Manifest next update:     Fri 02 May 2025 19:00:43 +0000
Files and hashes:         1: 0iMFk8Lfng7XvalPLjNNFDCKCXk.roa (hash: RGgyt63YX02pCUWXH4nSFvIeyVgvG587fQXMrvVwyd0=)
                          2: wE9_yIPJ1eAjGlhbCuE554ZUO7Y.crl (hash: CHih9AvCyErJMPfn9hf622BQtBdw7JKF+n1Xx+7CkKg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/31b8c4-dee7-4eee-a0e0-984e82d4b806/1/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/31b8c4-dee7-4eee-a0e0-984e82d4b806/1/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 19:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8d:38:f9:4c:6c:6c:d9:a2:67:b0:a7:fa:cc:32:47:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c04f7fc883c9d5e0231a585b0ae139e786543bb6
        Validity
            Not Before: May  1 19:00:43 2025 GMT
            Not After : May  2 19:00:43 2025 GMT
        Subject: CN=4324ea74636d7b8c0ccc0f327e4c08204136bb51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:8c:e5:73:05:af:90:e8:91:9b:1e:75:16:bc:
                    ec:83:0d:62:59:86:31:e3:9e:09:bc:c0:40:61:d7:
                    0c:17:b8:bd:2c:88:76:02:e7:ae:30:41:17:62:d3:
                    4f:a4:30:15:71:8c:9c:36:d9:a8:10:f6:9f:55:7e:
                    c7:c7:13:b4:9a:88:a4:38:c0:98:ef:64:f8:b3:45:
                    35:39:05:ef:83:d0:60:f9:1e:73:78:d7:67:91:4e:
                    5c:54:c8:87:a6:a3:d7:77:62:87:00:71:7c:62:52:
                    d3:c3:d3:61:00:d3:3b:93:d5:8b:0a:3f:23:dd:e9:
                    e8:0b:0c:1c:b4:c6:5a:de:77:3c:ce:f2:f4:9d:a5:
                    ba:20:cf:8d:ab:84:ec:6f:d2:c9:de:84:49:64:5d:
                    f7:56:d7:10:4f:de:4d:b0:ce:03:4c:5d:b6:94:4b:
                    df:bb:31:e0:71:f0:f5:d5:5a:ff:89:b7:85:38:ae:
                    ac:ac:f2:6e:f6:5e:c8:a0:a0:8a:31:c1:79:c3:af:
                    a7:6d:e3:2c:b9:6e:d6:9f:39:5d:c2:93:ab:60:da:
                    a2:9a:60:d1:81:8d:b0:10:1e:61:1d:67:7e:ee:51:
                    e0:1b:a5:fa:52:5c:38:65:cf:4a:83:78:77:70:cc:
                    30:e5:13:a4:9a:ef:a9:09:59:e5:4b:26:95:07:1e:
                    e7:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:24:EA:74:63:6D:7B:8C:0C:CC:0F:32:7E:4C:08:20:41:36:BB:51
            X509v3 Authority Key Identifier:
                keyid:C0:4F:7F:C8:83:C9:D5:E0:23:1A:58:5B:0A:E1:39:E7:86:54:3B:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/31b8c4-dee7-4eee-a0e0-984e82d4b806/1/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/31b8c4-dee7-4eee-a0e0-984e82d4b806/1/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:06:f8:54:74:3d:0d:c2:fa:f3:be:78:09:f4:39:50:cf:f2:
         a8:fe:aa:cc:c9:9f:35:6d:f1:33:02:4f:10:32:b6:58:f2:81:
         a0:fa:9a:d3:56:53:2c:63:ac:bb:43:e2:73:1b:95:da:33:de:
         0f:23:25:6f:47:11:10:0e:f9:10:de:7c:42:bb:73:8d:e5:76:
         d1:5c:1f:c4:ea:8f:d7:90:51:52:fc:13:aa:af:75:5e:44:32:
         0f:f5:ab:3d:63:fe:7a:b2:64:5b:c6:1a:5e:7d:5b:99:7f:60:
         98:f5:1d:0b:26:5a:22:1b:eb:e1:44:bb:b3:1a:dc:35:98:de:
         64:42:cb:a6:58:08:1a:ac:53:20:8e:29:59:e4:d2:6a:ee:cc:
         80:a7:f2:04:35:3b:ee:39:b3:8d:31:aa:cf:89:27:ec:33:5a:
         1d:de:7c:b9:8f:c0:e4:15:aa:60:ea:96:9b:b3:33:6a:f0:97:
         35:a3:b1:f2:be:6b:42:db:6b:49:a9:9e:6d:42:73:72:07:67:
         44:30:c3:b5:b9:28:bb:3a:d6:1f:87:db:38:13:07:48:0b:a7:
         dd:86:6c:50:2d:11:d2:b2:cc:da:ed:93:47:3e:5d:59:36:29:
         33:f3:e3:4e:4b:ce:55:74:df:47:16:78:38:5a:6c:73:40:7b:
         01:40:02:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 03:17:29 2025 by rpki-client