Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.mft
File:                     z8fvK3ZllIkteJKMvngXef3OZ9A.mft (raw, json)
Hash identifier:          CCem3RIw8UhrVjf92JO7k/K0dLOLpsx2gLoBeXyVxgA=
Subject key identifier:   F3:E3:A2:A2:FA:6E:56:66:99:5B:BC:07:B4:FD:E4:A2:32:A0:19:2A
Authority key identifier: CF:C7:EF:2B:76:65:94:89:2D:78:92:8C:BE:78:17:79:FD:CE:67:D0
Certificate issuer:       /CN=cfc7ef2b766594892d78928cbe781779fdce67d0
Certificate serial:       01967378BCF0B325A3211226E11D2E611D03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z8fvK3ZllIkteJKMvngXef3OZ9A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.mft
Manifest number:          150E
Signing time:             Sat 26 Apr 2025 19:00:14 +0000
Manifest this update:     Sat 26 Apr 2025 19:00:14 +0000
Manifest next update:     Sun 27 Apr 2025 19:00:14 +0000
Files and hashes:         1: 29zMSF3w66sUntVbm7zafoqxL7A.roa (hash: S+iEX8T3rvEJsvoQGdlPU+P3oIHIy1nvdiiFmyyofVw=)
                          2: 3QUDeKE7yNgQmHJNVO-g-9mVj4o.roa (hash: pVQz96Zg1UqB0ZGK2z8e6eGc6vTCat1YgW+D9RqJ9KA=)
                          3: PpdtSf-eqwERrg8wgynYdTmmTLE.roa (hash: ify0C44M1xKOyDvtxqel7hVqVdfYpMaLpzM5ZRBsfs8=)
                          4: vA4rANUmY77ajy3yEyLDZ1K3vnA.roa (hash: v5PKNuGl4AALPFrvuOw4WSf5gwfiM8g/rIh066tDvuI=)
                          5: z8fvK3ZllIkteJKMvngXef3OZ9A.crl (hash: tpjKYJvM0dxe3/bU089F3MVvAJWJvCCs90Ta3dzvohE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z8fvK3ZllIkteJKMvngXef3OZ9A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 19:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:73:78:bc:f0:b3:25:a3:21:12:26:e1:1d:2e:61:1d:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfc7ef2b766594892d78928cbe781779fdce67d0
        Validity
            Not Before: Apr 26 19:00:14 2025 GMT
            Not After : Apr 27 19:00:14 2025 GMT
        Subject: CN=f3e3a2a2fa6e5666995bbc07b4fde4a232a0192a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:37:b1:c1:a3:88:74:e0:84:3e:b1:8d:69:3f:
                    41:d9:e2:fa:ea:dc:f7:c0:8e:99:77:cd:18:6a:0e:
                    28:69:4f:f2:e5:4d:89:e0:d8:22:c8:1a:b1:84:2a:
                    51:ac:b0:6c:39:28:a9:47:62:28:de:d9:ec:3d:a2:
                    9d:5a:c5:cc:ef:73:fd:d7:f8:5d:81:90:1f:71:00:
                    32:3f:82:cd:be:b9:b5:9e:9d:37:42:91:b1:73:bd:
                    a6:6e:98:79:32:21:ec:80:5d:7b:f4:7e:1a:96:09:
                    47:7b:b3:15:35:27:8b:86:bc:7e:53:c4:18:9c:7c:
                    3a:b8:72:65:c4:03:b7:30:e9:d6:2f:75:a1:07:c8:
                    58:cc:2a:dd:54:82:04:a8:91:6a:92:ea:7b:80:d0:
                    78:37:f9:85:d9:37:60:03:15:b5:28:59:9d:de:16:
                    9a:c0:cc:89:a5:c3:cb:9a:e1:03:25:50:a8:81:bf:
                    b1:86:d0:b4:8d:dc:a1:d0:d0:53:f1:4c:f4:ba:64:
                    80:64:81:fb:19:74:32:c4:20:da:11:f9:99:b8:d2:
                    ff:9c:92:28:56:05:6b:b9:16:3d:82:de:bf:1f:80:
                    f4:07:6a:b8:f9:58:76:60:3b:dc:e8:36:9c:7d:3b:
                    17:e6:65:88:c1:78:1e:8b:ad:26:bb:2e:3c:c0:7e:
                    ce:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:E3:A2:A2:FA:6E:56:66:99:5B:BC:07:B4:FD:E4:A2:32:A0:19:2A
            X509v3 Authority Key Identifier:
                keyid:CF:C7:EF:2B:76:65:94:89:2D:78:92:8C:BE:78:17:79:FD:CE:67:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8fvK3ZllIkteJKMvngXef3OZ9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:3d:aa:61:e3:77:b0:07:6e:e8:89:2f:c3:01:dc:e3:25:98:
         1c:8e:38:b2:a5:12:9f:7f:12:34:32:45:bb:9d:7b:32:31:77:
         50:75:21:9c:9b:04:3d:d6:e0:54:6b:21:90:97:c9:b7:dd:96:
         24:32:b0:2e:57:ff:1c:55:da:67:bc:46:a5:5e:68:62:8d:72:
         ec:6e:e1:6d:57:70:70:42:fd:0b:e8:93:c0:78:fe:37:3d:3b:
         1e:13:2e:31:fc:ff:98:2f:2b:48:9b:48:ad:03:09:28:44:92:
         61:9e:6c:42:0a:6b:74:86:dc:ee:36:40:db:4c:f0:47:f2:77:
         53:f8:6f:8f:a3:f0:15:2e:1a:1d:d2:07:47:58:7a:b9:3c:5a:
         4b:b8:68:f7:ed:a8:b4:c0:32:05:9c:64:48:a9:24:83:a6:2f:
         9a:9b:30:b9:ac:7d:74:25:7a:33:58:71:27:ee:35:d8:7d:33:
         20:2b:dc:72:06:fa:f8:d7:bc:92:45:57:ae:ae:42:97:5f:65:
         1e:5c:98:37:e9:54:95:ac:86:f7:75:62:c5:b3:8e:18:47:e7:
         a3:9a:14:3e:d6:8d:d9:2e:3d:a4:92:7f:62:1d:e1:25:9c:09:
         f1:ce:8c:a1:2b:a9:92:b2:53:fd:c6:b2:47:e0:a0:5b:ef:76:
         75:73:6d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:10:47 2025 by rpki-client