Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.mft
File:                     2vCjnPrfkQ9rEyrSKOYGVhiHoGw.mft (raw, json)
Hash identifier:          4B/yW+REyUX6K84OsyjIEpY20ejDxIUPaUFg0S4dhT4=
Subject key identifier:   6B:8A:33:C2:14:65:5D:5A:80:7F:37:05:F3:AE:07:8C:6E:46:5E:13
Authority key identifier: DA:F0:A3:9C:FA:DF:91:0F:6B:13:2A:D2:28:E6:06:56:18:87:A0:6C
Certificate issuer:       /CN=daf0a39cfadf910f6b132ad228e606561887a06c
Certificate serial:       0196A6F8536CC1A972D3E955CCFA89E14C24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.mft
Manifest number:          152F
Signing time:             Tue 06 May 2025 19:00:14 +0000
Manifest this update:     Tue 06 May 2025 19:00:14 +0000
Manifest next update:     Wed 07 May 2025 19:00:14 +0000
Files and hashes:         1: 2vCjnPrfkQ9rEyrSKOYGVhiHoGw.crl (hash: dRVaKkrVfS5UrDSfCcHrM3orV9NBDp+8lCZsEPja6Aw=)
                          2: bdqrLURz5G694Fm80xmKAo0IogU.roa (hash: hG0r7jG1QmA/uFg4gCQdR2alotLJA0SQybpT8Ey91vY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 14:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a6:f8:53:6c:c1:a9:72:d3:e9:55:cc:fa:89:e1:4c:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daf0a39cfadf910f6b132ad228e606561887a06c
        Validity
            Not Before: May  6 19:00:14 2025 GMT
            Not After : May  7 19:00:14 2025 GMT
        Subject: CN=6b8a33c214655d5a807f3705f3ae078c6e465e13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b1:cd:5f:2d:70:93:cb:7a:f4:a7:a8:74:34:
                    74:b2:bb:f8:eb:14:ae:cf:0f:70:91:c0:5e:95:07:
                    8c:be:8a:19:36:25:48:ef:4c:fa:c0:de:08:a4:eb:
                    75:a0:ea:dc:49:90:fd:f7:e8:16:b7:4f:91:12:c7:
                    a2:c4:f2:dc:53:fb:fb:ea:c9:d2:0f:5b:90:c4:14:
                    49:73:57:84:4c:30:cf:59:5f:3a:30:3f:0d:02:2f:
                    19:0d:08:cc:09:04:64:1f:46:15:b6:51:ae:7d:f2:
                    3d:07:97:de:92:a1:c8:06:84:bc:25:a8:2e:5b:30:
                    9e:ca:0d:7c:53:29:0c:b9:9e:2d:37:fd:6c:8b:56:
                    af:e4:f7:b2:10:a8:82:3c:fe:bf:8f:74:76:83:93:
                    0c:ff:3a:a9:10:96:5f:31:e2:e6:6c:94:48:ac:61:
                    4a:84:cd:bd:63:6d:8f:b2:7a:28:a0:af:d4:c1:d4:
                    d7:c4:2f:1a:db:77:f3:54:76:5c:f2:d2:8c:f8:a5:
                    bb:3e:3a:07:19:9c:ff:6f:7e:16:23:fa:89:22:4d:
                    88:2c:d4:87:a1:09:d4:0f:2f:1b:97:4d:a6:76:82:
                    81:82:78:fc:29:94:1a:50:36:ab:cb:90:0b:07:0d:
                    0f:e7:b0:03:60:06:8d:a9:9c:34:0c:2f:c3:d2:b0:
                    65:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:8A:33:C2:14:65:5D:5A:80:7F:37:05:F3:AE:07:8C:6E:46:5E:13
            X509v3 Authority Key Identifier:
                keyid:DA:F0:A3:9C:FA:DF:91:0F:6B:13:2A:D2:28:E6:06:56:18:87:A0:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:24:1e:5d:7d:b1:e8:24:52:9c:97:29:2f:e9:45:65:85:ce:
         86:8d:84:55:57:56:02:cd:11:7c:67:11:48:e9:45:b6:aa:18:
         28:b7:95:94:1a:c8:ee:2c:bb:c2:13:53:96:dc:1f:ab:05:dc:
         6a:61:27:00:2a:86:6d:6e:6c:e2:78:97:40:2a:7f:2e:b2:3b:
         83:44:a3:58:2c:ce:36:27:fa:8a:15:49:c6:97:f0:ab:33:ab:
         8f:e2:08:8d:04:a2:d0:59:40:bd:ca:b7:41:f4:36:0b:3c:7e:
         0e:80:b2:95:ff:19:d7:ee:a0:0a:f4:a3:fd:e9:60:7a:a3:f0:
         a4:c6:95:cf:69:1c:2c:70:21:dc:03:75:c0:41:0d:df:51:2d:
         85:ee:ed:ec:dd:90:a7:ff:3f:2c:36:33:89:aa:31:0f:42:db:
         39:f5:9c:0c:22:37:f3:92:02:f7:64:37:95:e0:94:11:4c:77:
         50:7b:e3:a7:13:39:80:b1:57:73:48:df:8c:0f:fa:60:e9:bd:
         02:76:dd:af:ba:ef:32:7b:16:de:bd:a1:58:7d:79:60:97:67:
         e6:39:28:b5:ed:3a:da:63:78:7a:fc:29:bb:23:67:cf:ef:93:
         76:be:c7:43:1a:9a:3b:5c:e8:55:32:a4:c7:15:11:2c:cc:ef:
         06:a7:41:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 00:13:26 2025 by rpki-client