Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/07eac7-4d52-46d9-ba44-8945860d5238/1/RM62HnGmGfIxTp2YRuxnvIihJEw.mft
File:                     RM62HnGmGfIxTp2YRuxnvIihJEw.mft (raw, json)
Hash identifier:          Zj7rV8IL9/xpuXcV5lvx1sGHau7giY2xCG/Td3MOHVk=
Subject key identifier:   F8:CD:8E:D4:D7:FF:0D:E6:A8:BF:C2:A7:DB:EE:6A:DB:17:02:F2:1D
Authority key identifier: 44:CE:B6:1E:71:A6:19:F2:31:4E:9D:98:46:EC:67:BC:88:A1:24:4C
Certificate issuer:       /CN=44ceb61e71a619f2314e9d9846ec67bc88a1244c
Certificate serial:       01965C832E76391953FC38579220C3B14FC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RM62HnGmGfIxTp2YRuxnvIihJEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/07eac7-4d52-46d9-ba44-8945860d5238/1/RM62HnGmGfIxTp2YRuxnvIihJEw.mft
Manifest number:          1502
Signing time:             Tue 22 Apr 2025 08:00:23 +0000
Manifest this update:     Tue 22 Apr 2025 08:00:23 +0000
Manifest next update:     Wed 23 Apr 2025 08:00:23 +0000
Files and hashes:         1: H87BgtgHIgu3QOsmyVPPsdsknwE.roa (hash: xkDJ76AwerYWSRPO+inuQ8jDirisQ4H3gsMF8VViH04=)
                          2: QtXoVnj67TwjPgxEcqYom66X0y8.roa (hash: G8VO9HJj4m/eWjxYvgve0bBNmaJFIBzj2OTGT7rn2u8=)
                          3: RM62HnGmGfIxTp2YRuxnvIihJEw.crl (hash: MKb0pGGus3WsYuPsN8jQdeSWRiWLxhgMwcPlJKuaBRY=)
                          4: q_2J_90F4rPreclpPcC8HlAxjrA.roa (hash: HQ44EO8txOKcoFtZru4S60/X6J86Op89ytT0eAb7xzE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/07eac7-4d52-46d9-ba44-8945860d5238/1/RM62HnGmGfIxTp2YRuxnvIihJEw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/07eac7-4d52-46d9-ba44-8945860d5238/1/RM62HnGmGfIxTp2YRuxnvIihJEw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RM62HnGmGfIxTp2YRuxnvIihJEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Apr 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:5c:83:2e:76:39:19:53:fc:38:57:92:20:c3:b1:4f:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44ceb61e71a619f2314e9d9846ec67bc88a1244c
        Validity
            Not Before: Apr 22 08:00:23 2025 GMT
            Not After : Apr 23 08:00:23 2025 GMT
        Subject: CN=f8cd8ed4d7ff0de6a8bfc2a7dbee6adb1702f21d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:52:fb:3c:f3:b0:83:e0:35:2f:39:f2:2e:13:
                    77:d8:83:52:b4:6c:65:41:9f:f8:c5:26:a1:d2:35:
                    e3:e9:6c:ae:17:08:d4:e4:e1:ad:ab:4e:e9:3d:80:
                    16:c0:06:e2:3e:73:fe:8a:d8:9c:b9:7f:72:a8:aa:
                    e8:c4:3a:95:59:79:75:df:b8:99:6d:ab:3f:30:7e:
                    14:ef:9e:7e:84:87:6b:f1:39:e3:ab:98:3e:01:40:
                    f5:27:22:52:42:af:7a:c5:9d:6f:b4:a0:f4:2e:46:
                    8d:69:27:a5:8f:5a:a0:d4:bb:ed:97:d9:d9:97:35:
                    be:aa:fd:5a:9a:02:ec:99:9e:a8:10:e3:30:3f:55:
                    19:09:82:b4:57:09:f7:57:f4:11:70:bf:1d:18:00:
                    82:a0:95:a6:8b:bb:ec:74:7f:8d:af:37:b1:20:17:
                    fa:53:4b:a2:96:37:c9:cf:ae:96:42:8c:13:65:13:
                    06:ba:9b:0d:79:f9:29:0c:2b:e8:9c:e3:40:c9:44:
                    c2:ba:de:1f:d0:8b:b3:a5:01:62:e6:2e:f6:42:f6:
                    4f:06:f5:95:10:73:45:31:b4:fd:97:c5:a6:e5:aa:
                    cc:d6:2a:7b:ad:54:72:b9:bd:87:ea:a1:73:dd:07:
                    c5:d8:cb:60:68:6c:4d:86:ce:5e:26:44:cc:42:cf:
                    78:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:CD:8E:D4:D7:FF:0D:E6:A8:BF:C2:A7:DB:EE:6A:DB:17:02:F2:1D
            X509v3 Authority Key Identifier:
                keyid:44:CE:B6:1E:71:A6:19:F2:31:4E:9D:98:46:EC:67:BC:88:A1:24:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RM62HnGmGfIxTp2YRuxnvIihJEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/07eac7-4d52-46d9-ba44-8945860d5238/1/RM62HnGmGfIxTp2YRuxnvIihJEw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/07eac7-4d52-46d9-ba44-8945860d5238/1/RM62HnGmGfIxTp2YRuxnvIihJEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:b4:42:85:9f:dc:e7:a1:38:f5:8d:0f:44:5b:43:cd:f4:b7:
         dc:bd:5c:f5:36:f5:81:2d:22:17:c6:43:58:f6:1d:b5:12:41:
         d4:48:8b:3a:dd:0f:9b:e9:5a:ca:53:bd:2e:14:81:a3:9a:b3:
         b4:69:78:d4:9a:e5:89:8e:63:2d:37:5b:24:97:ed:90:09:b3:
         57:be:ad:07:40:70:6c:d5:7e:0b:ae:ba:8c:06:29:b2:a1:fe:
         38:9b:6c:0a:d0:33:8a:fa:77:fd:9a:1c:db:33:aa:33:46:34:
         be:96:e3:e2:a2:2b:56:57:c6:ea:d0:c5:ff:03:05:59:08:90:
         d9:0a:c9:07:82:5b:5e:4c:8a:a8:00:86:32:ca:e7:41:1c:02:
         4e:83:68:c1:72:c7:ce:a0:f1:97:f2:05:4f:df:f0:cd:74:83:
         1e:27:6a:e2:6e:f1:51:40:10:4b:5a:3f:b5:92:46:5f:93:9d:
         ef:1f:2f:e5:0f:3d:0a:df:20:78:91:2b:db:ad:e7:90:33:d0:
         17:76:af:07:79:f7:da:40:7c:ed:c0:c4:d5:c8:2e:b2:cf:5a:
         f2:62:31:e2:bb:d1:09:f9:34:63:c7:a8:8c:e3:3a:b2:b2:8f:
         23:a4:a6:12:45:d2:ce:6d:8a:b7:b9:b1:b2:bf:ec:01:30:53:
         22:f2:70:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:37:34 2025 by rpki-client