Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft
File:                     iuE5rwiZ9da1syWBNz7aMDfqMMA.mft (raw, json)
Hash identifier:          c/sf0pkSz0x70TRkssZzj8521hiXlBC76lLLlHWcX5A=
Subject key identifier:   77:A8:44:FF:A1:15:82:E6:64:62:26:62:2B:93:B3:3A:5D:54:CC:68
Authority key identifier: 8A:E1:39:AF:08:99:F5:D6:B5:B3:25:81:37:3E:DA:30:37:EA:30:C0
Certificate issuer:       /CN=8ae139af0899f5d6b5b32581373eda3037ea30c0
Certificate serial:       01960BD6C779F5B40F8B18B99A84B5EB04F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iuE5rwiZ9da1syWBNz7aMDfqMMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft
Manifest number:          0B8F
Signing time:             Sun 06 Apr 2025 16:02:27 +0000
Manifest this update:     Sun 06 Apr 2025 16:02:27 +0000
Manifest next update:     Mon 07 Apr 2025 16:02:27 +0000
Files and hashes:         1: NGjcJESkWKoe17DLj5CiFkjFkhs.roa (hash: GPilr/syUwSnDgvatxbmfR2uNG9m+2J2hRVuK9V/K4A=)
                          2: iuE5rwiZ9da1syWBNz7aMDfqMMA.crl (hash: /FMjPEptz7H146WYA1RNNTJj/PQ1luUi/PXm/pQ4RPs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iuE5rwiZ9da1syWBNz7aMDfqMMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 07 Apr 2025 16:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:0b:d6:c7:79:f5:b4:0f:8b:18:b9:9a:84:b5:eb:04:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ae139af0899f5d6b5b32581373eda3037ea30c0
        Validity
            Not Before: Apr  6 16:02:27 2025 GMT
            Not After : Apr  7 16:02:27 2025 GMT
        Subject: CN=77a844ffa11582e6646226622b93b33a5d54cc68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1b:d5:e4:8b:a8:bb:02:2e:0f:c7:e8:8e:0c:
                    b6:53:e1:fb:6a:62:47:8b:45:7d:c7:6f:a3:fb:bc:
                    96:55:6c:79:ba:39:2a:b1:e0:2f:98:5f:c7:fb:e2:
                    2a:d3:bc:13:74:19:cd:8e:16:05:4c:00:78:1a:47:
                    4b:38:06:ea:18:9d:ea:45:10:ce:1b:15:ea:82:c3:
                    66:d3:2e:7f:7e:6d:6e:6d:eb:5c:0d:eb:61:86:8b:
                    47:b1:43:f6:73:25:85:67:31:0a:e6:7a:03:a5:b2:
                    61:6f:eb:19:84:70:9e:91:d8:59:78:3b:89:fa:56:
                    89:0f:8d:a1:81:a7:07:57:39:7b:36:af:39:92:93:
                    2d:14:97:47:38:11:27:57:00:ef:8a:44:60:c1:62:
                    ec:8d:cf:b1:8e:09:d4:28:86:79:4a:70:54:7d:c1:
                    7c:62:d1:0b:13:cb:58:45:fe:60:6e:ba:8a:4f:c5:
                    3d:2a:fa:0d:e1:70:44:3a:54:cb:73:19:01:bc:24:
                    6e:7f:f0:75:61:f3:38:b2:64:9e:c7:a6:a0:6b:7f:
                    bd:74:d7:3d:2e:de:e7:86:b3:c8:c1:ab:35:8f:32:
                    5d:34:d8:b4:a7:66:f5:e4:d1:16:15:01:e3:a8:b6:
                    cd:ab:57:00:62:b5:80:1a:46:89:68:ed:2d:35:50:
                    eb:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:A8:44:FF:A1:15:82:E6:64:62:26:62:2B:93:B3:3A:5D:54:CC:68
            X509v3 Authority Key Identifier:
                keyid:8A:E1:39:AF:08:99:F5:D6:B5:B3:25:81:37:3E:DA:30:37:EA:30:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iuE5rwiZ9da1syWBNz7aMDfqMMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:d8:44:83:41:15:4a:f8:a3:ec:23:fe:66:eb:8c:c9:13:ef:
         c8:5e:ef:f3:f1:12:43:2a:7d:49:0e:8c:c7:d7:b7:7c:88:c4:
         c7:a6:c4:cd:f6:f7:fe:ad:84:da:dd:92:9a:9e:aa:74:7b:df:
         32:63:fa:c7:4d:84:23:12:c2:c0:75:9f:64:c5:3e:e4:af:97:
         a6:cd:3a:36:0e:17:79:d1:ae:6d:66:60:b4:e6:31:e6:0a:7b:
         b7:8b:32:bb:7b:88:db:18:9b:b2:19:27:f9:c1:09:a9:1a:fb:
         89:56:e6:d9:1f:08:50:f3:bf:0e:dc:43:1e:93:e9:82:26:97:
         77:ed:90:69:9c:ac:83:3b:2c:05:98:23:7f:5a:dc:31:42:8b:
         4d:3d:d6:8e:16:d0:cc:7d:79:f6:69:8d:a1:dd:cc:56:7d:14:
         2d:fb:b0:a1:7f:1b:2a:1d:8d:e3:b4:55:a7:7a:79:2a:a5:6f:
         9c:f1:13:21:c9:04:d0:73:d3:85:a8:eb:67:6e:ed:41:3b:16:
         21:00:ec:e5:34:74:bd:44:ef:6e:52:dc:80:64:d3:9d:af:be:
         f4:45:f9:fe:cf:c3:11:33:b9:bb:eb:e8:e1:59:e2:6b:a2:a1:
         56:e4:77:ee:0e:57:d0:af:18:d3:bf:7a:78:50:cf:a9:52:61:
         df:a8:a3:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:30:10 2025 by rpki-client