Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.mft
File:                     RzXoB9NJ0xVk-f1UYTjjWY4gB84.mft (raw, json)
Hash identifier:          a2CQKMpF5XBL8C6mdgu2kFxLihYDt6vZlY9CuruR0/Y=
Subject key identifier:   1C:C5:DC:B5:EA:DE:C2:5F:B2:AA:B6:1A:F1:5A:60:05:0B:F0:7D:09
Authority key identifier: 47:35:E8:07:D3:49:D3:15:64:F9:FD:54:61:38:E3:59:8E:20:07:CE
Certificate issuer:       /CN=4735e807d349d31564f9fd546138e3598e2007ce
Certificate serial:       0196895D2FA93CBAC10D8A30ED74BA99DF5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RzXoB9NJ0xVk-f1UYTjjWY4gB84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.mft
Manifest number:          0E2A
Signing time:             Thu 01 May 2025 01:01:47 +0000
Manifest this update:     Thu 01 May 2025 01:01:47 +0000
Manifest next update:     Fri 02 May 2025 01:01:47 +0000
Files and hashes:         1: RzXoB9NJ0xVk-f1UYTjjWY4gB84.crl (hash: BeUTd+F+YF7f6dgNpFl++Wqw8saIY1YTQz5iFz2G5KM=)
                          2: okKN99_kSuFiK1nEiQxwIj0skkI.roa (hash: BJdgdwQcgeiOTDLWh5HfcEvgJyNYUlctToI5pjHaF+4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RzXoB9NJ0xVk-f1UYTjjWY4gB84.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 21:27:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:89:5d:2f:a9:3c:ba:c1:0d:8a:30:ed:74:ba:99:df:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4735e807d349d31564f9fd546138e3598e2007ce
        Validity
            Not Before: May  1 01:01:47 2025 GMT
            Not After : May  2 01:01:47 2025 GMT
        Subject: CN=1cc5dcb5eadec25fb2aab61af15a60050bf07d09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:59:d1:50:d9:f4:d8:b7:1d:de:db:9d:1b:8e:
                    34:f6:1f:98:33:be:ad:b3:92:c2:99:43:28:12:ee:
                    7e:d6:ad:86:a5:97:9c:b9:bf:1a:fd:f2:be:21:3c:
                    ee:b2:0b:b6:69:d2:a6:93:2b:23:7e:87:68:1f:a7:
                    d8:8f:77:2e:9d:28:b4:25:0e:85:d7:e6:7d:1a:58:
                    c4:bb:76:54:45:09:a8:d8:2f:ba:ff:24:b6:21:3b:
                    73:95:a6:a8:83:2d:f4:1f:46:64:44:c9:36:96:23:
                    27:14:a5:0a:be:6f:67:25:38:78:29:a9:29:c8:5c:
                    0d:46:4f:ad:47:02:b1:a5:bd:3b:47:3f:bf:76:76:
                    24:d6:77:88:2f:6c:4a:44:f2:e0:46:9e:b4:54:36:
                    b8:4a:b3:2f:af:5e:8a:c1:74:0c:db:c3:12:23:9e:
                    f5:32:61:3e:de:54:e4:1a:16:96:76:54:a7:2a:c2:
                    2d:32:9f:d5:fb:92:cc:40:a9:9a:31:1c:aa:ff:05:
                    8e:a9:80:a6:a5:03:98:b7:32:8a:6b:6c:59:5f:d4:
                    ed:3a:34:2d:29:00:7a:e1:f1:40:48:c1:d1:bc:74:
                    e1:67:0f:b1:92:df:27:aa:4f:c6:b5:eb:01:5f:ae:
                    50:58:9b:a1:c2:78:50:6f:33:63:87:68:3a:12:99:
                    32:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:C5:DC:B5:EA:DE:C2:5F:B2:AA:B6:1A:F1:5A:60:05:0B:F0:7D:09
            X509v3 Authority Key Identifier:
                keyid:47:35:E8:07:D3:49:D3:15:64:F9:FD:54:61:38:E3:59:8E:20:07:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzXoB9NJ0xVk-f1UYTjjWY4gB84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:93:43:9b:4b:88:28:b4:77:59:94:b9:e8:c1:82:12:03:af:
         43:8a:d4:d1:a8:43:23:88:01:d7:8b:5d:44:ce:f6:36:d7:ff:
         7a:8a:fd:e5:47:26:fc:bc:2c:fe:61:67:e3:86:78:26:e3:c4:
         59:84:cf:01:0c:03:6e:87:3c:36:86:13:b4:06:3a:3f:1e:1a:
         ac:37:6d:99:84:cf:18:c1:62:7c:8d:36:64:5d:cb:24:b6:04:
         1c:12:fe:1b:39:bb:17:25:44:a2:a2:e8:f4:5c:28:c7:51:4e:
         1e:da:b9:c1:9c:4d:7d:9e:04:53:3e:87:01:15:26:d1:66:ae:
         35:3c:7e:8f:f9:21:57:3d:87:f9:c9:6a:38:a2:4b:01:d5:a2:
         d2:c1:17:c2:e6:63:dc:1a:8a:7d:6e:c9:cb:ba:58:74:22:ec:
         38:d7:f9:2d:23:4d:5c:d6:50:0e:9d:ff:bb:83:15:5e:f3:8a:
         8a:74:bb:60:cd:57:30:32:d3:d8:91:5a:16:da:a0:ac:b3:6d:
         40:95:f6:83:47:91:77:e1:ed:a6:b4:d7:04:80:3e:bf:a8:81:
         3f:79:e3:b3:1d:d3:87:5a:61:2b:d6:0c:88:b6:78:24:55:c1:
         48:35:81:0e:93:bf:89:79:b8:1c:ca:6a:15:91:40:33:c2:a1:
         80:fa:58:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:47:22 2025 by rpki-client