Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft
File:                     _0zNsS_CLrhX-GxWWovFFR0FMrA.mft (raw, json)
Hash identifier:          sDnMUaGFZzc1RBEozrAWAPSEPwbkwMC2Acw7j7N+Xjk=
Subject key identifier:   A6:FB:EE:6C:79:EF:9C:5B:95:18:77:12:53:42:2D:B0:C4:21:81:1A
Authority key identifier: FF:4C:CD:B1:2F:C2:2E:B8:57:F8:6C:56:5A:8B:C5:15:1D:05:32:B0
Certificate issuer:       /CN=ff4ccdb12fc22eb857f86c565a8bc5151d0532b0
Certificate serial:       019676435161771C92E6A0E792B511E977AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_0zNsS_CLrhX-GxWWovFFR0FMrA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft
Manifest number:          0596
Signing time:             Sun 27 Apr 2025 08:00:45 +0000
Manifest this update:     Sun 27 Apr 2025 08:00:45 +0000
Manifest next update:     Mon 28 Apr 2025 08:00:45 +0000
Files and hashes:         1: T-Yw2cTI2wr-Y-TJOoMJXVh3bJU.roa (hash: 0NqJgy30YTXcCM9pl9HQ+jtoeVufCCiGR0QgwmWh8es=)
                          2: _0zNsS_CLrhX-GxWWovFFR0FMrA.crl (hash: Jjvgoy9iCHeJl9funt0QUiviP87N6Ycrl4QMYWL6SbA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_0zNsS_CLrhX-GxWWovFFR0FMrA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:43:51:61:77:1c:92:e6:a0:e7:92:b5:11:e9:77:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff4ccdb12fc22eb857f86c565a8bc5151d0532b0
        Validity
            Not Before: Apr 27 08:00:45 2025 GMT
            Not After : Apr 28 08:00:45 2025 GMT
        Subject: CN=a6fbee6c79ef9c5b9518771253422db0c421811a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b8:98:97:70:b2:f5:1b:02:a8:24:05:e1:23:
                    09:18:5f:cc:b4:8d:94:5a:77:7a:24:75:b2:4f:67:
                    8d:e3:95:32:32:29:4a:90:29:e1:9e:8e:c1:4b:78:
                    98:00:34:8a:3f:f4:55:d1:8c:7e:62:99:d8:4e:5d:
                    62:3d:58:af:f9:d1:a9:c9:b8:5d:85:48:2a:ec:f0:
                    92:62:eb:78:7c:9a:56:f1:c5:5d:3e:03:bf:ce:27:
                    41:be:af:a3:74:91:8e:d9:f5:01:8e:27:2a:c9:38:
                    10:25:55:e2:0a:46:40:53:30:95:d2:e0:bc:c0:54:
                    0a:9b:e1:64:02:3f:f8:45:99:d7:df:88:48:8b:86:
                    b9:3b:08:57:3d:9a:b2:df:20:43:57:80:5e:66:88:
                    57:17:2a:f3:1f:e9:9e:c0:53:6a:8b:35:2e:27:44:
                    9f:ab:09:90:24:99:bc:03:4c:9a:0e:64:43:16:7c:
                    7b:26:3d:79:cc:6f:14:42:e2:c2:85:81:b0:2a:e9:
                    db:d7:09:64:e9:f7:0b:58:a1:a2:cb:d9:cb:30:6a:
                    f9:12:df:ef:23:5f:3d:fd:b7:3f:7e:01:1f:f2:d1:
                    98:de:6e:20:a9:4b:25:35:66:4b:e9:d0:73:41:6d:
                    23:52:2f:64:e7:14:0d:15:5a:2a:33:eb:52:7c:67:
                    86:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:FB:EE:6C:79:EF:9C:5B:95:18:77:12:53:42:2D:B0:C4:21:81:1A
            X509v3 Authority Key Identifier:
                keyid:FF:4C:CD:B1:2F:C2:2E:B8:57:F8:6C:56:5A:8B:C5:15:1D:05:32:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0zNsS_CLrhX-GxWWovFFR0FMrA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:bd:fb:bc:24:bd:05:08:f3:26:0d:85:e5:2f:10:b5:99:4d:
         7b:82:78:29:cf:78:e6:4e:45:8b:7f:96:16:55:55:0a:b8:50:
         ed:cd:ea:c1:fb:f1:7b:0d:2f:6c:79:70:f9:f5:d9:ad:28:07:
         a1:08:30:a1:a4:ba:3b:bb:2d:9c:cd:a0:1b:d0:4b:1b:02:fa:
         16:97:b4:a3:9e:46:33:7e:0b:74:9d:23:18:0f:ef:4d:5c:b6:
         d5:27:7f:34:73:b5:f4:e1:65:e0:00:ca:20:a7:1d:25:f3:2d:
         5b:b5:d7:cb:55:51:0d:0f:6b:94:be:45:52:7a:e5:f4:06:79:
         17:56:28:b0:b5:29:b7:f2:e1:9f:b7:90:31:52:a9:f3:f0:0e:
         f8:ed:a2:fb:ed:80:41:0b:d7:af:ed:d8:82:80:d9:84:a4:32:
         16:bd:55:db:6b:6c:35:3d:1c:7c:cf:02:d4:e6:98:d0:67:26:
         9e:87:14:47:f6:8a:dc:8a:14:e7:78:74:d7:d6:53:d7:cb:de:
         a5:4b:f5:03:8b:d5:a1:56:10:3c:d8:a7:41:d1:81:13:70:b3:
         4f:fb:f2:55:24:24:eb:d1:c3:97:cd:04:bd:bf:c9:b5:22:00:
         9e:cb:b5:60:0f:20:28:ec:44:81:dd:e7:39:9a:9d:4c:cf:02:
         99:86:85:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:07:54 2025 by rpki-client