Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.mft
File:                     m5fCLQsziopFqhNFsJF7oNyXM5A.mft (raw, json)
Hash identifier:          ry1Rc+HctPqJAmiD6oaovyWXnMCgy5A19yHqcqTVr/U=
Subject key identifier:   D4:A8:76:9C:5B:1C:55:C7:4F:59:21:B3:5B:9F:F3:26:07:FD:1F:DB
Authority key identifier: 9B:97:C2:2D:0B:33:8A:8A:45:AA:13:45:B0:91:7B:A0:DC:97:33:90
Certificate issuer:       /CN=9b97c22d0b338a8a45aa1345b0917ba0dc973390
Certificate serial:       0196157DA2E30240C1FEA1CEA083721C04AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m5fCLQsziopFqhNFsJF7oNyXM5A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.mft
Manifest number:          1117
Signing time:             Tue 08 Apr 2025 13:01:17 +0000
Manifest this update:     Tue 08 Apr 2025 13:01:17 +0000
Manifest next update:     Wed 09 Apr 2025 13:01:17 +0000
Files and hashes:         1: 7McjxupphmUTIDMB5hb0zSdkKPU.roa (hash: EbiTg62JkmhMKsH+lFrkNiNAuLRjLLKFna7hKz3yDps=)
                          2: A5RYkDh5iQHsMCEi9eKiE3UYQTY.roa (hash: 2Z2MMJPop83/eKqvvRjbHx9UxdjVWLlOnDA0QnBD8dM=)
                          3: m5fCLQsziopFqhNFsJF7oNyXM5A.crl (hash: AYt86L0J3q0JnwlMu0f+k3VhU3/9toR/bH90j6Z60ww=)
                          4: pjqTP4jfQfsNA8tjYi42Sc1-S88.roa (hash: H5/YZQfh0J/SWAF5xqrnL8j1DdrlYslU+4bEkRfwqM8=)
                          5: s9-7uzfILp_wqpuTQ6RY06M_vb0.roa (hash: Pd9QbCwquRy9rtMT/uczWDR3qfrQi3t7npfRPZFPtOw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m5fCLQsziopFqhNFsJF7oNyXM5A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 09 Apr 2025 13:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:15:7d:a2:e3:02:40:c1:fe:a1:ce:a0:83:72:1c:04:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b97c22d0b338a8a45aa1345b0917ba0dc973390
        Validity
            Not Before: Apr  8 13:01:17 2025 GMT
            Not After : Apr  9 13:01:17 2025 GMT
        Subject: CN=d4a8769c5b1c55c74f5921b35b9ff32607fd1fdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:15:b4:b6:fb:12:3d:c0:ac:31:7e:d2:7b:90:
                    a0:2b:65:56:00:5a:82:b0:16:ab:9d:41:e7:df:1c:
                    2c:55:46:a7:c1:bb:2c:1a:55:fb:f8:95:ae:43:de:
                    c0:2c:56:45:45:20:2c:a7:aa:a7:ba:82:ab:3f:f2:
                    a6:18:8a:af:1e:8f:0b:3b:c4:9b:d6:c3:b0:9e:04:
                    a8:7b:b9:ab:b9:9f:c7:d5:bc:79:fa:29:1b:18:3b:
                    5b:9a:71:f1:1d:2e:a3:10:49:1e:cf:73:8e:40:97:
                    f2:43:a1:65:6e:da:06:2e:06:c5:ac:31:c3:71:fd:
                    80:21:50:dd:90:ae:08:1c:dc:40:bf:fd:93:10:ba:
                    dc:83:5b:d1:36:06:3a:3a:3c:bc:10:c8:ec:68:cf:
                    82:ea:eb:59:b9:c3:23:77:f1:b5:98:19:23:46:15:
                    1a:3d:e4:28:d4:b1:4b:c0:45:23:b4:b2:f0:6f:96:
                    4b:c8:6a:dd:51:58:60:68:6a:d7:b2:9b:e7:82:88:
                    0f:97:0d:28:2b:49:67:66:df:e0:50:cf:73:0b:b5:
                    8e:76:23:68:89:fb:29:c0:55:42:4a:12:9f:68:8a:
                    30:0d:87:91:6e:05:cb:83:72:8b:26:d5:cf:e7:18:
                    b3:90:6c:dd:70:00:a0:4b:65:77:52:87:21:ad:99:
                    08:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:A8:76:9C:5B:1C:55:C7:4F:59:21:B3:5B:9F:F3:26:07:FD:1F:DB
            X509v3 Authority Key Identifier:
                keyid:9B:97:C2:2D:0B:33:8A:8A:45:AA:13:45:B0:91:7B:A0:DC:97:33:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5fCLQsziopFqhNFsJF7oNyXM5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:56:e6:74:98:14:eb:2d:33:29:6f:8d:3a:f5:66:9d:cf:b8:
         28:21:64:a7:40:3d:95:91:94:5c:9e:ae:2d:c9:65:63:b9:26:
         6e:c8:a8:09:80:16:bf:f5:c5:33:8b:e6:68:91:5d:6b:af:9c:
         50:62:8f:00:62:bc:3d:2c:c3:04:f1:51:96:23:5d:b0:01:3e:
         8f:68:20:67:cc:44:c9:2f:7d:05:34:67:07:83:6d:88:a1:4c:
         2d:43:8e:d7:e2:cd:f9:45:b8:2d:51:44:40:99:8b:3e:10:7f:
         f3:36:11:eb:7c:a2:e7:d1:9b:cf:e9:82:71:cb:1b:da:ae:68:
         e0:e7:43:3f:00:42:f7:95:58:b5:3a:cf:77:0e:6c:e5:9a:ce:
         55:c0:6e:bd:0f:80:a4:f9:43:9f:c5:c7:65:9e:de:2d:54:49:
         1a:ba:6f:b3:23:06:d6:d4:50:98:ca:1d:ca:dc:bd:4a:a4:6e:
         e8:c8:14:5c:07:32:d4:f4:f9:12:87:22:a5:b2:6b:e3:b0:25:
         6c:39:46:a3:89:20:bd:d5:18:ed:10:39:fb:b0:17:34:97:1a:
         78:89:4d:d3:44:1f:f5:8c:57:ae:65:8d:17:e5:47:17:2a:10:
         e6:fa:a0:2a:7a:35:54:90:0e:18:ea:a0:15:9b:da:ac:0e:fb:
         80:3c:84:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 19:01:22 2025 by rpki-client