Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/46f501-7745-49da-b1d8-07309e796c78/1/V2tXrthT-J2ipbI98X-SF-76YbY.mft
File:                     V2tXrthT-J2ipbI98X-SF-76YbY.mft (raw, json)
Hash identifier:          +Wo5DdHRFPcDx5wCaT5d4RuVuqiuhXSp4vZksGYNU54=
Subject key identifier:   20:FF:9D:1F:9B:65:E3:CD:14:91:C4:BB:AE:1D:51:8C:9C:19:A6:2E
Authority key identifier: 57:6B:57:AE:D8:53:F8:9D:A2:A5:B2:3D:F1:7F:92:17:EE:FA:61:B6
Certificate issuer:       /CN=576b57aed853f89da2a5b23df17f9217eefa61b6
Certificate serial:       01968F27375CD5A834793611F968F9894DF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V2tXrthT-J2ipbI98X-SF-76YbY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/46f501-7745-49da-b1d8-07309e796c78/1/V2tXrthT-J2ipbI98X-SF-76YbY.mft
Manifest number:          151B
Signing time:             Fri 02 May 2025 04:00:34 +0000
Manifest this update:     Fri 02 May 2025 04:00:34 +0000
Manifest next update:     Sat 03 May 2025 04:00:34 +0000
Files and hashes:         1: B3vxfCdBbqCpFRIfeZyCQ2Fihm4.roa (hash: QTf5FbWUd2JRsm5/AHBpunnMm6hqVgSwd8D8NPeJObg=)
                          2: V2tXrthT-J2ipbI98X-SF-76YbY.crl (hash: 6vRxFRwXej7OOswkSdT3WFO+Tkoy02r0WKHk2sUFjtw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/46f501-7745-49da-b1d8-07309e796c78/1/V2tXrthT-J2ipbI98X-SF-76YbY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/46f501-7745-49da-b1d8-07309e796c78/1/V2tXrthT-J2ipbI98X-SF-76YbY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V2tXrthT-J2ipbI98X-SF-76YbY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 04:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8f:27:37:5c:d5:a8:34:79:36:11:f9:68:f9:89:4d:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=576b57aed853f89da2a5b23df17f9217eefa61b6
        Validity
            Not Before: May  2 04:00:34 2025 GMT
            Not After : May  3 04:00:34 2025 GMT
        Subject: CN=20ff9d1f9b65e3cd1491c4bbae1d518c9c19a62e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:98:f9:44:cd:5e:8e:b1:d5:bc:33:5f:0b:e0:
                    28:16:72:72:67:bb:c8:41:7f:2a:be:32:88:02:dd:
                    dc:3b:08:be:7b:6a:cc:1b:80:cb:30:8d:2d:2d:d7:
                    8c:22:26:df:7e:f2:60:b2:bc:db:fc:4a:77:c3:7d:
                    aa:39:0c:6d:e9:ad:7d:e7:57:b4:5f:82:49:ab:37:
                    83:89:30:5d:ad:20:7d:4d:02:05:73:fa:89:c6:9a:
                    52:02:37:80:10:31:31:40:87:76:cb:ff:ed:64:bb:
                    46:ef:80:6c:9c:19:b1:5e:bd:eb:fd:d4:5b:f9:f6:
                    52:eb:52:80:f5:b1:69:dc:40:2f:26:f6:dd:07:87:
                    2f:93:0b:f6:56:3e:32:85:fd:e9:6b:53:e0:31:65:
                    20:18:bf:b1:5f:16:bf:a2:f3:c6:13:82:ab:55:af:
                    ce:74:fb:50:30:bd:61:05:5e:73:7f:e8:1a:ae:12:
                    98:cc:be:eb:e3:c0:0e:69:bf:14:32:d6:49:24:cd:
                    bb:5e:49:72:d2:25:0e:8c:26:5f:72:2e:e5:e7:ef:
                    c8:27:2d:7b:9a:fe:7f:67:37:10:7f:7b:48:ed:93:
                    6b:f8:93:7f:a1:4b:89:6a:40:e6:15:b4:89:73:1d:
                    75:6d:bd:b1:b4:d6:6f:06:b6:c1:68:e1:20:70:70:
                    0e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:FF:9D:1F:9B:65:E3:CD:14:91:C4:BB:AE:1D:51:8C:9C:19:A6:2E
            X509v3 Authority Key Identifier:
                keyid:57:6B:57:AE:D8:53:F8:9D:A2:A5:B2:3D:F1:7F:92:17:EE:FA:61:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V2tXrthT-J2ipbI98X-SF-76YbY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/46f501-7745-49da-b1d8-07309e796c78/1/V2tXrthT-J2ipbI98X-SF-76YbY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/46f501-7745-49da-b1d8-07309e796c78/1/V2tXrthT-J2ipbI98X-SF-76YbY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:f0:2e:52:1c:8d:01:ce:ab:a4:af:a9:3a:6b:a1:1b:51:86:
         79:62:a3:15:14:32:90:f0:eb:2f:ee:69:f6:cf:6d:54:fe:f2:
         15:03:61:eb:11:33:ce:3e:5a:48:c6:f8:d1:d8:4f:49:65:6b:
         2c:92:a2:f6:06:c8:86:04:85:b2:f2:2b:84:18:60:da:07:45:
         ed:39:c9:43:60:a6:50:f9:c2:0f:c3:30:7a:58:67:b7:4c:24:
         b7:aa:25:3f:55:e2:d3:1b:59:51:f2:c7:a2:0c:88:13:98:ca:
         ca:cd:22:36:96:01:a7:4b:51:b9:5b:a0:48:06:46:74:96:39:
         f7:bc:ff:fd:c2:b6:5d:f3:32:64:1a:18:73:cd:54:a2:57:85:
         34:3e:b5:27:a9:b9:8c:03:2b:86:86:d6:2d:87:8c:91:a7:b4:
         9e:e4:1e:16:b6:4b:4d:74:b9:74:ea:04:aa:b0:fc:13:03:89:
         1c:b0:e9:4f:63:90:04:ed:21:f1:99:36:ed:17:57:2c:31:10:
         b8:77:7c:6f:2f:61:2b:b7:87:1a:6d:71:b4:7a:94:a3:9a:49:
         9a:a8:22:69:f7:21:3b:15:34:d9:50:b3:78:5f:60:4f:c6:ae:
         85:5b:30:72:9e:20:32:97:9b:fa:6a:dc:7d:3b:73:92:10:11:
         97:3e:13:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 14:23:17 2025 by rpki-client