Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft
File:                     d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft (raw, json)
Hash identifier:          JOwSwPqQc82y4uaAyEoCM8EtNFk5Rsnz9D5DJaOA3zA=
Subject key identifier:   3E:9D:A4:BC:9B:FD:BF:F2:ED:D0:5F:F6:50:5E:18:19:C7:D4:B2:CE
Authority key identifier: 77:C7:B4:57:F9:AF:04:29:24:14:23:73:CE:09:0F:7F:A8:76:25:7E
Certificate issuer:       /CN=77c7b457f9af042924142373ce090f7fa876257e
Certificate serial:       01967FB4646D7C0DCE9FC5B49DCAC0079526
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d8e0V_mvBCkkFCNzzgkPf6h2JX4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft
Manifest number:          0DD4
Signing time:             Tue 29 Apr 2025 04:00:50 +0000
Manifest this update:     Tue 29 Apr 2025 04:00:50 +0000
Manifest next update:     Wed 30 Apr 2025 04:00:50 +0000
Files and hashes:         1: d8e0V_mvBCkkFCNzzgkPf6h2JX4.crl (hash: qA2wtFbqnYlMG9OEHa2NZpQJa4bTZhKjnMo9jkEiiAU=)
                          2: gLKpyPGbqCEdbx2uKWZ-HtuhLy0.roa (hash: f77sZOCl1dYzZqqQSp/e70T40ZHDdgkRvhdb7798S4A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d8e0V_mvBCkkFCNzzgkPf6h2JX4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7f:b4:64:6d:7c:0d:ce:9f:c5:b4:9d:ca:c0:07:95:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77c7b457f9af042924142373ce090f7fa876257e
        Validity
            Not Before: Apr 29 04:00:50 2025 GMT
            Not After : Apr 30 04:00:50 2025 GMT
        Subject: CN=3e9da4bc9bfdbff2edd05ff6505e1819c7d4b2ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:28:2e:fe:cc:92:e0:75:31:fb:1a:bd:20:1f:
                    d8:b4:a2:05:ad:20:30:b2:b6:7c:a0:0b:b8:a2:14:
                    20:59:5c:31:81:a2:ee:c7:3a:c1:b3:b6:6e:1e:16:
                    2a:f8:b3:d8:2d:86:40:04:14:3b:48:9c:6d:9c:70:
                    b5:d4:b0:02:18:a2:27:cb:b1:78:10:b6:1a:03:75:
                    bb:4d:ad:08:e5:2c:ad:b1:30:af:3b:b0:52:92:0e:
                    63:4b:0b:d1:ff:01:3c:f2:39:cf:ea:5f:15:a2:89:
                    2c:38:64:fc:83:d0:55:d0:35:f3:57:3d:86:29:ce:
                    04:7d:d9:8c:71:02:59:ee:af:f7:af:b8:4a:9f:8c:
                    48:9c:0d:fc:d1:71:21:af:cf:6b:b8:b1:4b:d6:99:
                    a9:69:16:3d:67:4f:f4:b7:91:10:fe:58:a4:03:0b:
                    b8:e2:ff:6d:78:03:77:01:3a:a2:54:fc:8d:f2:62:
                    9e:2e:98:04:1d:f3:08:ca:1b:c7:1c:1d:fb:dc:d0:
                    c7:5d:e0:29:ce:67:e6:6d:e9:c9:95:ca:43:81:b4:
                    71:08:29:7c:22:40:25:85:48:2f:0a:94:43:db:96:
                    7c:30:6a:f0:6b:4e:ac:dd:a4:c5:a0:67:b7:ad:58:
                    4f:9f:79:14:ec:fe:f2:e9:3f:a8:34:5a:c2:13:11:
                    40:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:9D:A4:BC:9B:FD:BF:F2:ED:D0:5F:F6:50:5E:18:19:C7:D4:B2:CE
            X509v3 Authority Key Identifier:
                keyid:77:C7:B4:57:F9:AF:04:29:24:14:23:73:CE:09:0F:7F:A8:76:25:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8e0V_mvBCkkFCNzzgkPf6h2JX4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:41:a3:0a:37:bb:86:d3:0a:91:52:dc:cb:68:07:34:80:a2:
         77:ec:2b:9c:6e:c4:e4:02:94:f1:97:21:de:db:f9:18:53:3e:
         db:2d:cb:24:fb:b7:86:9b:25:ee:5d:3b:4f:e7:72:df:25:d4:
         6a:0c:12:04:98:5f:ba:18:f5:3c:ac:7a:22:dc:e2:3f:72:a0:
         c2:54:38:c6:12:bc:10:68:01:a0:fb:b9:27:9b:44:6c:3c:fb:
         31:76:d8:27:10:cf:b5:31:41:e6:34:3f:d4:5b:b2:20:17:f3:
         22:dc:ca:49:11:4d:61:45:4d:20:5b:21:cb:1e:33:a8:1b:02:
         b5:53:f4:16:0d:01:9a:b0:db:dd:8b:93:e2:1e:f5:01:ba:3c:
         0a:66:16:91:2a:be:1e:9a:71:6e:23:4e:24:f6:01:62:60:b5:
         25:b3:7c:95:8a:22:dc:00:3f:48:6f:6d:0c:37:ce:6f:3f:0d:
         3d:c8:f2:c2:34:a7:b5:5d:43:e7:c8:bb:da:03:4d:80:1d:ff:
         53:85:5c:b1:ac:58:a5:ad:87:0c:b8:26:5c:a7:af:78:35:bb:
         4a:8f:d2:75:6b:9f:7f:2b:9c:22:94:01:0b:6c:3f:e1:e3:30:
         62:89:32:98:1c:85:c1:92:58:07:7d:80:2b:cd:68:22:9f:01:
         c1:a6:49:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:38:37 2025 by rpki-client