Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.mft
File:                     ME5ZoiP0vLgjSS-xCWw6gjEMA9o.mft (raw, json)
Hash identifier:          YIDc6CxSLjgwFvmGa/qE0aRbJA9iaC1cBfhSkJ1shHo=
Subject key identifier:   A0:27:A8:2D:E9:08:4A:17:81:66:D2:5C:A1:E5:65:6A:B7:6B:15:E6
Authority key identifier: 30:4E:59:A2:23:F4:BC:B8:23:49:2F:B1:09:6C:3A:82:31:0C:03:DA
Certificate issuer:       /CN=304e59a223f4bcb823492fb1096c3a82310c03da
Certificate serial:       0194BC3C9AE4A56C6FB006A1D703FB28C303
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.mft
Manifest number:          142D
Signing time:             Fri 31 Jan 2025 12:01:15 +0000
Manifest this update:     Fri 31 Jan 2025 12:01:15 +0000
Manifest next update:     Sat 01 Feb 2025 12:01:15 +0000
Files and hashes:         1: 5l7niHnSzFawKg-6eXVddr5nW40.roa (hash: fnthIPYyIns5UnUMVS3MzUFUL59q+jV5tt0gne5luRs=)
                          2: CNh_5j_R_gJpT50KvKASnm2ddQQ.roa (hash: sz6v/CsZnD6nQK+LURUo6p2F2VafhVQMBGjcdFGL5T4=)
                          3: ME5ZoiP0vLgjSS-xCWw6gjEMA9o.crl (hash: RCTb45vjUHuqbVL4lAimE7U4LFrcwV0cPtFDXLmE5hk=)
                          4: UmWol24Z1jCTfjEp_MvTPtb1tBk.roa (hash: COPfsyux35Sm2Dilg0uBivAQ4UwahKUGIAKYrH4YhiQ=)
                          5: ho7hCbw9Z3TdltQdvoKRemY2BZQ.roa (hash: 1oNnxxsmF38W2k7eLcfUs5CR/Cu2kC+IeFK+jVllmvU=)
                          6: kYtgnJnEt9bvUzwgi6iwlE4BUrM.roa (hash: pzKsFa+87OlMRbV5hLa6zqcUD6c0LVukdW7piQ2lbUw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 11:23:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:9a:e4:a5:6c:6f:b0:06:a1:d7:03:fb:28:c3:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=304e59a223f4bcb823492fb1096c3a82310c03da
        Validity
            Not Before: Jan 31 12:01:15 2025 GMT
            Not After : Feb  1 12:01:15 2025 GMT
        Subject: CN=a027a82de9084a178166d25ca1e5656ab76b15e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:e6:4b:1c:7a:56:a2:9e:26:50:9f:a7:cf:7b:
                    19:36:84:45:d3:3e:60:8e:ec:18:a2:6a:84:6b:6a:
                    79:6d:37:e7:54:c0:82:f7:5a:81:4a:08:16:06:f0:
                    f2:cd:c6:17:01:fa:5d:63:7a:d0:54:46:0f:e3:a3:
                    fa:48:c6:9c:19:11:bc:b0:6d:5d:13:52:6c:da:58:
                    45:d7:a9:5f:13:97:7f:65:52:2b:bd:19:00:ad:a1:
                    79:2f:2b:6e:b3:e2:63:c2:3a:bf:4f:8f:d4:9c:97:
                    6a:d5:8b:74:dd:75:d9:50:41:3e:51:9e:46:b7:5e:
                    a0:56:9d:d6:91:da:4e:eb:fb:3d:66:f9:45:49:b3:
                    ac:ef:c4:74:5a:7f:f9:07:cd:ed:6b:b4:7c:45:b0:
                    e3:34:bf:59:06:f4:3b:f6:46:6e:e2:4a:de:a4:c2:
                    fd:54:08:24:17:ce:67:7d:28:23:68:44:03:c3:99:
                    5d:af:ad:ca:97:cd:2b:3a:8e:a1:6b:97:8e:e1:26:
                    68:08:90:56:25:80:36:ad:4a:f2:6a:57:0d:e0:67:
                    e9:ae:08:63:64:4c:10:39:2b:d6:66:21:58:6d:7a:
                    e4:f3:16:31:00:0b:f4:3e:9a:eb:ea:69:5e:f2:d1:
                    17:d6:d6:4a:a2:a6:c5:61:c2:cf:fa:28:c8:55:61:
                    fa:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:27:A8:2D:E9:08:4A:17:81:66:D2:5C:A1:E5:65:6A:B7:6B:15:E6
            X509v3 Authority Key Identifier:
                keyid:30:4E:59:A2:23:F4:BC:B8:23:49:2F:B1:09:6C:3A:82:31:0C:03:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:b6:b4:06:1f:68:2e:cd:26:e1:76:cb:b8:f3:38:32:ec:f7:
         3a:dd:b2:ef:82:41:01:b0:1f:20:62:a2:d4:f2:c4:64:fa:20:
         68:f5:09:25:cf:6c:3e:c8:dc:2c:d1:3a:f6:74:55:a0:d0:f4:
         97:83:dc:80:93:99:90:e8:06:ce:8f:ac:13:d0:08:b9:ce:dc:
         b9:b3:a2:a3:50:a9:42:f3:aa:8b:d7:fa:18:57:47:df:0b:fa:
         2a:bb:f1:4c:b8:fb:f3:52:1e:4b:15:3b:7d:79:8a:0a:5c:a5:
         08:1e:b0:95:61:5d:70:1d:ea:0f:f8:0a:5c:b5:60:d4:ab:f4:
         d3:50:34:50:fa:5b:c2:5a:d8:57:87:ee:21:ce:97:e2:9d:4e:
         3b:99:b0:eb:db:39:df:89:2f:02:8c:eb:98:f4:e0:49:94:ff:
         22:1e:07:37:92:bd:ec:77:70:b4:d4:07:9a:42:b6:21:b5:d8:
         05:7e:a1:da:71:9a:8b:1c:60:52:9e:00:b5:25:9b:0a:de:57:
         d5:b6:45:2a:be:b8:e0:15:4a:b8:2a:64:a4:0c:75:81:4f:2e:
         4f:2b:a4:a8:d4:99:70:df:88:13:e5:26:57:5c:2c:bd:bf:f7:
         6d:1a:fd:af:c1:b0:c3:33:90:5e:2e:23:c6:e4:f5:d5:67:69:
         ac:d3:23:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:30:17 2025 by rpki-client on console-fra.rpki-client.org