Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/c3c91d-5319-41aa-b197-ab5d163977f2/1/qEIWlUkV487vdNu7z-lHIAnYiQE.mft
File:                     qEIWlUkV487vdNu7z-lHIAnYiQE.mft (raw, json)
Hash identifier:          Zphba3YP2KqwkfDOVc3hAJcBVfeQg6wTKJDVTqTi2IM=
Subject key identifier:   9D:9D:E7:33:6C:73:51:29:F5:6D:E5:D2:E6:C5:4B:29:94:07:C7:D0
Authority key identifier: A8:42:16:95:49:15:E3:CE:EF:74:DB:BB:CF:E9:47:20:09:D8:89:01
Certificate issuer:       /CN=a84216954915e3ceef74dbbbcfe9472009d88901
Certificate serial:       0196AA9E8B1100A8C7CC610BEC5955756F01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qEIWlUkV487vdNu7z-lHIAnYiQE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/c3c91d-5319-41aa-b197-ab5d163977f2/1/qEIWlUkV487vdNu7z-lHIAnYiQE.mft
Manifest number:          036F
Signing time:             Wed 07 May 2025 12:00:39 +0000
Manifest this update:     Wed 07 May 2025 12:00:39 +0000
Manifest next update:     Thu 08 May 2025 12:00:39 +0000
Files and hashes:         1: qEIWlUkV487vdNu7z-lHIAnYiQE.crl (hash: qHDHPQh0Vvwsem0NJvAxNMhxmxqNTjnH1i4FNXnKpRA=)
                          2: uzEIjlJYDDkYjDRzAf2S2_nuADQ.roa (hash: jOMq+THXs6tHKVnh3usZCh/VkjmthWBocgL66TKhVMs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/c3c91d-5319-41aa-b197-ab5d163977f2/1/qEIWlUkV487vdNu7z-lHIAnYiQE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/c3c91d-5319-41aa-b197-ab5d163977f2/1/qEIWlUkV487vdNu7z-lHIAnYiQE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qEIWlUkV487vdNu7z-lHIAnYiQE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 12:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:aa:9e:8b:11:00:a8:c7:cc:61:0b:ec:59:55:75:6f:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a84216954915e3ceef74dbbbcfe9472009d88901
        Validity
            Not Before: May  7 12:00:39 2025 GMT
            Not After : May  8 12:00:39 2025 GMT
        Subject: CN=9d9de7336c735129f56de5d2e6c54b299407c7d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ce:67:17:f9:4b:f5:27:37:b4:9f:1e:42:3d:
                    7c:1a:05:83:44:a2:40:f5:2c:6c:b2:c5:fb:31:83:
                    b8:54:ee:a8:c7:ac:c8:b7:3b:b5:74:f6:51:ee:61:
                    b1:69:18:de:37:83:0f:53:51:60:1a:29:a6:43:73:
                    2b:11:21:8b:b2:38:19:62:af:3b:c2:dd:32:cd:a4:
                    77:b3:15:f4:86:70:3f:d4:60:11:ff:9c:ec:2d:66:
                    90:49:54:44:90:ed:8f:79:58:77:23:6f:08:65:a9:
                    fb:be:61:51:a0:4b:52:7b:87:ab:33:57:f9:1a:ed:
                    74:47:bb:12:74:9c:13:a2:37:15:11:0a:17:1e:32:
                    07:85:25:85:82:00:29:3c:ad:ca:77:36:23:11:a1:
                    c5:d8:16:d3:7f:d7:71:c0:20:81:11:fa:a0:a8:9c:
                    29:90:92:64:31:c9:36:7a:ce:90:26:d3:b5:18:2f:
                    2c:80:5f:e7:31:9d:f3:22:58:11:55:47:34:43:00:
                    8e:01:14:0e:e3:ea:04:ce:96:53:f4:d0:1f:35:a7:
                    4d:0b:3b:e9:88:e0:41:d3:fa:b7:04:d0:54:93:1c:
                    5f:a7:e8:ef:56:6a:44:e8:fc:ad:bb:84:fc:6a:3e:
                    13:66:5f:cd:7f:30:df:34:58:ff:79:eb:75:a2:38:
                    1a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:9D:E7:33:6C:73:51:29:F5:6D:E5:D2:E6:C5:4B:29:94:07:C7:D0
            X509v3 Authority Key Identifier:
                keyid:A8:42:16:95:49:15:E3:CE:EF:74:DB:BB:CF:E9:47:20:09:D8:89:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEIWlUkV487vdNu7z-lHIAnYiQE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/c3c91d-5319-41aa-b197-ab5d163977f2/1/qEIWlUkV487vdNu7z-lHIAnYiQE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/c3c91d-5319-41aa-b197-ab5d163977f2/1/qEIWlUkV487vdNu7z-lHIAnYiQE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:13:85:97:b1:35:84:de:4b:ec:e1:e0:ef:a4:72:e5:f0:0c:
         62:4f:32:f1:1f:d7:b5:c2:0a:da:e8:54:10:c1:2d:35:86:23:
         1f:80:60:fb:68:87:12:24:e0:48:9e:a9:03:c6:09:6b:f2:34:
         15:5b:dd:29:70:70:a3:a0:31:b1:b7:cb:c9:fc:c5:23:2a:fe:
         5b:a3:dc:3e:6e:13:f8:11:58:77:3e:fc:62:b8:7c:34:53:d2:
         a4:7f:ea:2a:80:d8:30:d4:99:e7:46:f5:9b:a1:6b:e6:20:0f:
         d5:1d:f4:8a:1d:04:36:83:01:4b:85:e4:2e:00:12:95:dd:a5:
         2c:c1:4f:13:81:3e:be:71:ab:59:52:2f:6e:13:cc:52:fa:10:
         e6:df:32:96:7f:50:02:50:6e:be:25:70:94:22:a6:2c:b0:fa:
         79:7b:f1:fc:15:39:65:28:03:90:c9:ae:1d:2c:0e:93:9d:15:
         b2:84:12:da:60:ac:f9:6c:33:dd:de:aa:71:c9:6d:a6:fb:41:
         ca:18:c6:15:b3:9a:c5:bf:81:c2:f2:d8:f5:62:7e:99:8b:31:
         aa:d8:ea:ab:e9:84:8a:95:00:f7:ce:ec:f0:66:cf:6e:77:c0:
         e4:11:51:26:c8:6c:8d:50:3f:41:4d:bb:72:72:f4:a4:c4:18:
         c6:c8:6a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 15:18:22 2025 by rpki-client