Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.mft
File:                     ou0LqLRu8lHloFimSiGzB9NlDdw.mft (raw, json)
Hash identifier:          e5DhhmHRRkb5IjkaiQioYbHoZMxccYFbcN2vLYj6KmU=
Subject key identifier:   69:09:CD:0D:DA:16:F8:56:57:5D:12:04:A6:D5:7E:42:71:17:98:00
Authority key identifier: A2:ED:0B:A8:B4:6E:F2:51:E5:A0:58:A6:4A:21:B3:07:D3:65:0D:DC
Certificate issuer:       /CN=a2ed0ba8b46ef251e5a058a64a21b307d3650ddc
Certificate serial:       019675308B07334361A80833E2FF7D739B58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ou0LqLRu8lHloFimSiGzB9NlDdw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.mft
Manifest number:          150F
Signing time:             Sun 27 Apr 2025 03:00:37 +0000
Manifest this update:     Sun 27 Apr 2025 03:00:37 +0000
Manifest next update:     Mon 28 Apr 2025 03:00:37 +0000
Files and hashes:         1: 1-oPnzeRnS2wes3eHWFhju7Aog-g.roa (hash: 0Z/IUXs4OK8CJd/fYdgboQWjbgJJCz+sIFSEwO7NpmA=)
                          2: ou0LqLRu8lHloFimSiGzB9NlDdw.crl (hash: 27zJiavISXiyPp90TPopw3VsuD6qDamFAFjA5lL5lOg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ou0LqLRu8lHloFimSiGzB9NlDdw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:75:30:8b:07:33:43:61:a8:08:33:e2:ff:7d:73:9b:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2ed0ba8b46ef251e5a058a64a21b307d3650ddc
        Validity
            Not Before: Apr 27 03:00:37 2025 GMT
            Not After : Apr 28 03:00:37 2025 GMT
        Subject: CN=6909cd0dda16f856575d1204a6d57e4271179800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:39:b9:70:2e:cd:c1:9d:2d:10:9e:f4:fc:61:
                    3d:e4:f5:52:18:f7:c9:67:19:3a:09:80:8d:09:f7:
                    9a:55:a6:d3:d0:89:0a:80:ca:4c:5c:7c:a8:c9:ac:
                    18:b5:9a:aa:ff:4c:42:42:4c:ad:a3:ec:65:1b:52:
                    da:fd:78:ff:f2:9a:ac:7a:70:3f:69:b4:b7:89:00:
                    12:20:b8:3f:a8:b9:f7:13:dd:14:82:d4:e6:3a:97:
                    30:e7:74:1b:af:52:06:cd:de:48:8d:f7:a4:07:85:
                    9f:c5:d2:5c:90:12:f2:84:8e:3e:55:6f:25:69:48:
                    e2:2e:d0:8f:20:6e:24:ac:e0:80:f2:02:57:37:7e:
                    b2:52:d8:2b:e1:dd:cf:6a:a9:cb:a7:6b:ae:90:19:
                    35:7a:f7:a5:0e:24:83:68:c6:36:c7:ff:59:bb:3c:
                    de:8d:a4:6b:48:5e:e4:a7:1f:5a:60:d4:13:1f:a2:
                    a6:a2:53:ab:0b:a8:dd:3c:2e:21:98:1b:4a:b5:75:
                    71:f5:1e:27:28:e4:f7:db:a5:b7:c9:9d:5f:d5:fb:
                    80:7b:0b:d8:33:44:4e:33:cb:d8:cb:e0:43:2b:6f:
                    3a:90:7b:a6:b2:1e:fe:7d:2e:3d:f4:68:89:0e:f7:
                    71:00:7f:b6:ec:96:4f:d9:f1:f9:3c:c2:b5:0f:d3:
                    b4:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:09:CD:0D:DA:16:F8:56:57:5D:12:04:A6:D5:7E:42:71:17:98:00
            X509v3 Authority Key Identifier:
                keyid:A2:ED:0B:A8:B4:6E:F2:51:E5:A0:58:A6:4A:21:B3:07:D3:65:0D:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ou0LqLRu8lHloFimSiGzB9NlDdw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:27:1a:f7:36:5e:0a:1f:89:77:22:86:1d:ae:a3:f0:46:f6:
         31:46:05:16:c6:5c:13:31:f6:6c:6e:f7:9c:92:a0:36:77:76:
         80:31:f6:6a:4a:99:64:82:97:1b:b8:34:f3:6b:29:cd:15:39:
         a2:9d:db:fa:3b:f7:42:9b:db:9a:d4:2e:ee:51:6d:4f:7d:bc:
         85:ef:f3:79:50:0c:6a:8e:fb:1e:f2:61:1c:55:67:c2:17:c3:
         3e:f9:af:a4:6c:06:69:83:5d:fb:50:0f:08:10:4a:ff:1d:06:
         d4:96:2a:a4:ff:bb:59:3a:6d:07:61:83:47:ed:69:e6:a2:af:
         4a:5d:e9:2f:14:6e:c6:0d:ab:be:8f:78:1c:b6:28:48:6d:3f:
         e7:7a:96:8e:b6:75:a5:17:63:bb:bc:6f:65:a9:1d:70:19:a0:
         65:ab:d6:71:42:91:41:79:ed:15:f5:2b:1a:76:fa:f6:99:ff:
         c1:0d:67:5b:50:51:93:b9:9d:1c:10:a2:fa:e3:7c:b1:3d:5d:
         fb:79:8b:e3:65:22:80:92:b4:5d:2c:89:1d:d9:e6:36:b9:00:
         34:34:9e:9d:4d:dd:1a:4f:42:88:28:99:6a:83:78:54:bd:00:
         07:50:79:cd:39:56:04:ad:38:f4:5a:8a:b5:e2:98:e3:10:5d:
         e8:5d:7a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:49:41 2025 by rpki-client