Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.mft
File:                     5oClYQES3yA5h_MvDl4VrTXnENI.mft (raw, json)
Hash identifier:          chwIdnbIg12ujJBnxBn4GBQMXxLAX/g6695F7XVa2Yo=
Subject key identifier:   95:EF:27:9C:5B:99:36:CC:EB:B9:22:E5:13:67:DC:3F:21:E6:99:D9
Authority key identifier: E6:80:A5:61:01:12:DF:20:39:87:F3:2F:0E:5E:15:AD:35:E7:10:D2
Certificate issuer:       /CN=e680a5610112df203987f32f0e5e15ad35e710d2
Certificate serial:       01968090023E837223B70BAFF28220F9845D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5oClYQES3yA5h_MvDl4VrTXnENI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.mft
Manifest number:          04EE
Signing time:             Tue 29 Apr 2025 08:00:43 +0000
Manifest this update:     Tue 29 Apr 2025 08:00:43 +0000
Manifest next update:     Wed 30 Apr 2025 08:00:43 +0000
Files and hashes:         1: 5oClYQES3yA5h_MvDl4VrTXnENI.crl (hash: wbMGquVy8W5/EjrKuDLYyBjEetjH0KqRKubhfy/ktto=)
                          2: DhNK6wzjByDnasFkDiVozXApAMA.roa (hash: axPPgHJK+DsZDTes1Z8jvmiFkJ86vZLUMhnI7D0ebHM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5oClYQES3yA5h_MvDl4VrTXnENI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 08:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:80:90:02:3e:83:72:23:b7:0b:af:f2:82:20:f9:84:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e680a5610112df203987f32f0e5e15ad35e710d2
        Validity
            Not Before: Apr 29 08:00:43 2025 GMT
            Not After : Apr 30 08:00:43 2025 GMT
        Subject: CN=95ef279c5b9936ccebb922e51367dc3f21e699d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:75:5e:61:f8:8e:e3:50:ca:08:cc:2f:bb:a5:
                    d8:f8:a0:44:1f:d4:31:89:73:fa:14:d2:52:c9:4f:
                    8b:bd:84:d8:f0:4c:bf:ca:5f:ca:23:b1:02:62:a8:
                    53:96:03:25:ef:25:e4:46:8c:ea:f4:b5:3b:be:92:
                    50:c7:43:95:d4:b4:3b:80:6a:ad:e9:3f:82:04:d1:
                    60:77:bf:00:9f:0b:79:32:9e:94:c8:35:78:ef:f0:
                    87:f4:dc:a8:e5:57:e3:26:84:f7:06:e5:c7:d8:4e:
                    03:8f:ad:0e:d2:63:4a:e6:a6:2c:fc:fa:53:98:9a:
                    05:6f:eb:bb:fb:05:da:64:ab:09:44:56:3e:e0:cc:
                    18:e1:1c:56:ac:a6:35:c0:cc:aa:74:fb:a8:70:77:
                    50:38:bc:de:70:6a:18:d5:eb:60:1e:ad:0d:1e:3a:
                    d2:30:74:a0:22:d2:87:70:f3:32:5e:b1:2a:b7:52:
                    f7:c5:05:a1:34:b4:13:bb:22:60:d7:ab:02:5b:14:
                    9d:45:43:dd:a1:a0:ae:2e:fd:7f:43:11:8a:e5:75:
                    2d:20:46:8f:04:19:f2:75:81:bd:04:31:95:e2:0c:
                    a2:bb:6d:8d:47:03:58:ea:37:c0:c8:65:21:d7:46:
                    cd:8e:da:19:42:81:dd:8d:d9:6e:51:04:11:84:97:
                    6e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:EF:27:9C:5B:99:36:CC:EB:B9:22:E5:13:67:DC:3F:21:E6:99:D9
            X509v3 Authority Key Identifier:
                keyid:E6:80:A5:61:01:12:DF:20:39:87:F3:2F:0E:5E:15:AD:35:E7:10:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5oClYQES3yA5h_MvDl4VrTXnENI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:9c:6f:5b:89:94:03:9e:ee:8f:3a:94:fa:c7:3a:06:5a:c7:
         e6:88:06:a9:01:dd:39:89:02:34:a2:b5:80:1c:03:00:ac:f6:
         3d:2d:29:69:88:ea:6e:db:d4:2e:51:03:52:47:13:ea:42:a7:
         f9:fd:a8:ca:76:43:c3:22:99:d5:83:58:41:a4:93:10:49:38:
         b5:d8:9b:78:e9:a8:b7:84:03:36:e8:3d:e4:6e:02:11:d8:c4:
         f7:4d:a7:e2:1f:ab:94:d4:8c:a4:4f:5e:8a:46:03:e2:df:4a:
         1b:d9:2e:5a:fa:7f:bf:7e:ee:85:b0:e5:cc:64:22:da:3a:c2:
         c0:8e:4c:c0:b8:e5:b0:7b:a6:e5:53:e2:ab:bb:b3:b6:3e:b3:
         8e:8b:3d:e6:4e:75:54:42:ca:45:40:a5:87:73:51:f5:4d:28:
         ab:0b:7d:2e:f6:87:8e:05:7b:58:a8:eb:28:c7:08:31:bd:91:
         8b:14:a1:06:f6:8a:0a:57:3d:a2:76:b5:cc:cd:93:dd:52:7b:
         44:1b:70:36:85:f7:ce:8c:7a:24:0f:b5:e3:5f:f2:1d:5a:91:
         75:5d:31:c2:da:39:06:45:9e:f7:fe:3b:51:1b:f4:c5:5d:02:
         ee:c4:7b:2e:d1:94:79:2c:9b:8a:68:5d:d6:c1:56:d8:c8:09:
         37:17:a3:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:29:11 2025 by rpki-client