Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.mft
File:                     _h0Y2aIic226wjERC4jerI2wM20.mft (raw, json)
Hash identifier:          +FYPseEinmjqWP+gH5IwUJYEtJs25a41sSgQ3zONHhY=
Subject key identifier:   23:1F:62:F2:50:7E:6C:B6:AD:CC:C9:5E:C3:5C:35:3E:F1:C0:F3:A6
Authority key identifier: FE:1D:18:D9:A2:22:73:6D:BA:C2:31:11:0B:88:DE:AC:8D:B0:33:6D
Certificate issuer:       /CN=fe1d18d9a222736dbac231110b88deac8db0336d
Certificate serial:       019640672B90AB5CF7230B6FC4710E837DDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_h0Y2aIic226wjERC4jerI2wM20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.mft
Manifest number:          14F6
Signing time:             Wed 16 Apr 2025 21:00:25 +0000
Manifest this update:     Wed 16 Apr 2025 21:00:25 +0000
Manifest next update:     Thu 17 Apr 2025 21:00:25 +0000
Files and hashes:         1: EZTTi0DeKjOt5n50pGmAFCowsBg.roa (hash: E6d6xhT95nfb0o31mLYa+7IwZxSu5Vcz/JzrKKV4/Tw=)
                          2: _h0Y2aIic226wjERC4jerI2wM20.crl (hash: qo+zcnNTS+3Ygu7MOmQaXHpSi7ZafGDe5K3M4busuPE=)
                          3: _j56SkoPwjvw5J3-yiHS-OHaGdg.roa (hash: 8LANgZZ7cUUufNrH/hblrmKv7SFmglJPoUVHRC20Sgc=)
                          4: nphj8rzOnLWDJ-Ev9uLxCzuPoh0.roa (hash: HyT5REdDkPYj/vcE9InpMXDrNrWM+FwGj433uROaITI=)
                          5: rrJ9oJTEKjWY36H_-ybxMrxa8AU.roa (hash: VOnvk/Pca3s41OyosIHhlUhIPKuz7htec6edKpEFyTA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_h0Y2aIic226wjERC4jerI2wM20.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 13:16:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:40:67:2b:90:ab:5c:f7:23:0b:6f:c4:71:0e:83:7d:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe1d18d9a222736dbac231110b88deac8db0336d
        Validity
            Not Before: Apr 16 21:00:25 2025 GMT
            Not After : Apr 17 21:00:25 2025 GMT
        Subject: CN=231f62f2507e6cb6adccc95ec35c353ef1c0f3a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:99:fc:56:41:4a:2f:bc:7f:2f:76:f2:9f:d5:
                    30:a3:99:c4:54:1d:cd:d6:0b:03:bb:62:da:55:90:
                    9e:64:f0:08:89:49:56:af:e7:8f:92:40:13:ef:0f:
                    98:45:92:9a:7c:e8:59:2c:10:97:e4:28:d6:77:3f:
                    8a:85:fd:ad:02:d3:89:c7:78:e4:ec:e1:cf:4f:da:
                    95:8c:8d:78:da:df:2c:f5:ec:11:d3:68:ec:07:ad:
                    ef:9c:32:88:e8:d5:27:f7:58:cf:02:4f:d6:7f:fe:
                    34:6d:11:49:e8:42:89:04:34:b5:79:bf:6c:37:94:
                    17:64:17:ee:ef:1c:df:0f:f2:75:9c:c3:7c:3c:a6:
                    a3:82:b2:49:a7:d8:11:60:9f:0c:72:44:1c:65:9d:
                    fe:b7:20:a9:df:1b:2e:a0:28:b1:dc:2f:5e:e8:52:
                    67:71:e7:5d:cf:ca:d6:b4:4e:3a:e4:39:23:06:43:
                    2c:e1:ea:f4:af:03:29:35:0f:6e:5b:91:e8:d0:21:
                    16:0b:90:59:b6:14:96:df:cd:49:b8:74:c3:8f:5e:
                    13:31:7b:da:9d:3b:ad:06:53:74:8a:d1:82:86:39:
                    6d:dd:09:fc:b9:f5:68:29:99:d2:ad:a8:33:22:a8:
                    da:f4:6b:5b:87:51:b1:d7:09:69:7a:78:07:dc:11:
                    8a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:1F:62:F2:50:7E:6C:B6:AD:CC:C9:5E:C3:5C:35:3E:F1:C0:F3:A6
            X509v3 Authority Key Identifier:
                keyid:FE:1D:18:D9:A2:22:73:6D:BA:C2:31:11:0B:88:DE:AC:8D:B0:33:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_h0Y2aIic226wjERC4jerI2wM20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:2e:21:9a:24:58:31:a1:8c:ea:38:f2:c2:3a:b1:48:47:1b:
         76:5f:a0:e5:84:a4:0e:ea:c5:45:5e:bd:8e:39:ce:10:0a:aa:
         bc:df:db:54:68:5d:90:ce:42:65:ff:5b:68:55:d7:13:f2:e3:
         1c:68:31:3d:d5:3e:5a:d0:c2:3f:0c:68:d0:71:b4:f5:0a:c9:
         57:da:c6:0a:b9:08:e7:a5:c3:73:15:7c:a4:de:31:a0:8b:da:
         95:3d:10:88:ba:f2:95:ca:8d:98:6e:fa:56:e7:35:dd:5b:ce:
         e6:98:d2:e1:17:dc:7b:73:49:ce:73:1b:5f:92:67:b8:a2:4e:
         56:5f:12:99:73:fd:37:4b:23:23:fc:5c:5d:f4:65:c1:b7:53:
         2c:44:17:a5:b0:78:b8:22:df:b7:c4:67:47:88:88:9b:56:8f:
         6e:a3:38:d2:37:3b:85:30:4c:d2:7f:0f:bf:b4:84:a9:b7:1c:
         d9:96:68:93:32:57:71:41:0a:f1:42:b8:6e:88:aa:74:b7:38:
         ef:41:53:a2:f4:87:c1:c2:bd:9c:73:ed:2a:c4:a9:1c:ea:9c:
         98:1f:ab:8c:bd:41:5e:2c:8f:b0:7e:b3:d7:cd:0d:37:94:4e:
         50:7e:fd:93:30:08:42:bf:fa:49:b7:7c:bb:82:0a:eb:9e:02:
         9d:e2:60:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:16:51 2025 by rpki-client