Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.mft
File:                     mSPRBAwF8Jn7T-20mLtKFIMnmPo.mft (raw, json)
Hash identifier:          MY706ISBlEzWl9zthNK7dWyDrwIn9GWV3EwfK+iROt0=
Subject key identifier:   EC:2D:68:6F:5F:8E:0E:14:5A:22:2E:2E:7B:F9:E7:CC:EA:6A:56:CA
Authority key identifier: 99:23:D1:04:0C:05:F0:99:FB:4F:ED:B4:98:BB:4A:14:83:27:98:FA
Certificate issuer:       /CN=9923d1040c05f099fb4fedb498bb4a14832798fa
Certificate serial:       01964D46ED74F2215413BD14967A618D1AE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mSPRBAwF8Jn7T-20mLtKFIMnmPo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.mft
Manifest number:          03F6
Signing time:             Sat 19 Apr 2025 09:00:15 +0000
Manifest this update:     Sat 19 Apr 2025 09:00:15 +0000
Manifest next update:     Sun 20 Apr 2025 09:00:15 +0000
Files and hashes:         1: 6X834B5gcsNjXymrQMfROjTj6Pc.roa (hash: eUjrS9xR0GNckSwbqncq7fyluCC422BD9P+h/ci+z+8=)
                          2: mSPRBAwF8Jn7T-20mLtKFIMnmPo.crl (hash: TLa+kYhvPphwtlTomV11nVunpRblR1lmjYDSpnPWsdI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mSPRBAwF8Jn7T-20mLtKFIMnmPo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 07:26:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4d:46:ed:74:f2:21:54:13:bd:14:96:7a:61:8d:1a:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9923d1040c05f099fb4fedb498bb4a14832798fa
        Validity
            Not Before: Apr 19 09:00:15 2025 GMT
            Not After : Apr 20 09:00:15 2025 GMT
        Subject: CN=ec2d686f5f8e0e145a222e2e7bf9e7ccea6a56ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:39:97:9e:d2:1f:5e:76:2b:f5:9f:64:29:8f:
                    98:cf:c4:81:43:33:fb:ae:99:c8:39:c5:31:dd:62:
                    6e:05:05:fb:1e:64:1f:05:50:2e:5a:a7:9e:97:25:
                    1a:a3:bb:18:33:b8:da:65:01:4e:99:30:35:ae:f2:
                    cb:db:bf:61:11:b1:73:b6:3e:00:63:a9:ae:0b:48:
                    16:bd:e0:d9:f3:81:46:4e:c8:2f:e0:e4:7f:15:49:
                    1a:f9:99:1a:1a:6c:d6:c7:b3:67:3d:6c:de:6f:2f:
                    86:1f:c5:2a:e8:85:a8:d2:00:08:44:06:be:31:12:
                    83:8e:3b:88:a9:65:be:62:df:07:d7:32:38:7c:89:
                    68:97:39:a1:95:07:54:78:2a:6f:7c:d4:34:a2:0d:
                    46:e9:10:dd:56:65:08:ec:04:18:10:db:fb:fa:d9:
                    6f:36:93:83:19:44:65:39:55:8a:8f:ab:b4:d3:f4:
                    77:52:80:37:df:b3:d2:f1:35:f4:bf:c7:aa:1c:7b:
                    dd:67:db:ee:31:6e:d2:31:76:5a:36:3b:f7:14:2e:
                    89:35:3c:09:7c:d9:f8:46:be:55:14:e0:74:5c:90:
                    05:9b:44:b0:b8:55:61:ab:f5:73:4b:df:32:11:fe:
                    82:c0:5c:31:44:73:1b:6f:d8:92:6d:5d:06:69:52:
                    11:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:2D:68:6F:5F:8E:0E:14:5A:22:2E:2E:7B:F9:E7:CC:EA:6A:56:CA
            X509v3 Authority Key Identifier:
                keyid:99:23:D1:04:0C:05:F0:99:FB:4F:ED:B4:98:BB:4A:14:83:27:98:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSPRBAwF8Jn7T-20mLtKFIMnmPo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:e3:a0:4b:32:c3:d1:66:3e:4a:c2:70:bb:d9:f9:88:07:e6:
         61:97:8e:65:88:ff:8b:af:0c:10:50:e1:22:88:68:25:be:a6:
         e5:34:f5:b4:db:a8:00:03:56:2f:5b:4d:7c:13:73:a3:25:2f:
         3d:5c:d5:57:4d:16:e9:aa:68:0c:e5:c7:33:bc:2d:17:8b:70:
         f4:b2:f4:9c:ae:14:54:1c:3a:85:2d:2b:84:81:c0:75:60:dc:
         fa:7b:f3:98:f5:94:54:0f:74:1d:8a:90:5d:04:af:9d:6c:a3:
         c5:ca:e2:cb:a1:81:cc:6c:33:f3:ab:1a:52:1b:82:5c:83:63:
         cc:16:d5:c9:b6:e9:da:a6:14:0c:64:13:bf:22:48:47:17:9b:
         bf:3f:02:a5:09:54:04:df:61:2c:13:43:da:d4:d1:6b:c9:da:
         89:8d:72:73:51:9f:ef:60:74:08:cf:95:07:79:d6:df:39:31:
         22:30:6a:ac:ba:22:bc:6d:c9:99:64:74:5f:22:c2:6b:0e:a9:
         98:f3:87:b1:3f:ba:e6:d4:a8:d1:9a:ea:1d:58:44:55:94:25:
         58:98:3b:60:70:2b:48:a1:c8:93:47:f3:92:92:9a:9e:49:ef:
         2f:5e:2d:ab:d5:fd:64:c3:ca:fa:ad:19:2f:cc:73:f9:c7:15:
         2d:86:e8:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 16:30:48 2025 by rpki-client