Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/eb7f7e-a880-497b-b54c-b708c40a667f/1/P4Go6MdbWPfR79TD5lItJ4Y_nM8.mft
File:                     P4Go6MdbWPfR79TD5lItJ4Y_nM8.mft (raw, json)
Hash identifier:          yNeKBbHI7746CsDhpqjFAuyO3larHQ611atszE2HYaU=
Subject key identifier:   7B:9D:C3:2B:C7:64:16:E2:11:E2:72:FF:0C:B8:DC:5C:0A:51:33:EF
Authority key identifier: 3F:81:A8:E8:C7:5B:58:F7:D1:EF:D4:C3:E6:52:2D:27:86:3F:9C:CF
Certificate issuer:       /CN=3f81a8e8c75b58f7d1efd4c3e6522d27863f9ccf
Certificate serial:       0196575CC8354AD3BB3009FA476B48F6ED92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P4Go6MdbWPfR79TD5lItJ4Y_nM8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/eb7f7e-a880-497b-b54c-b708c40a667f/1/P4Go6MdbWPfR79TD5lItJ4Y_nM8.mft
Manifest number:          1500
Signing time:             Mon 21 Apr 2025 08:00:20 +0000
Manifest this update:     Mon 21 Apr 2025 08:00:20 +0000
Manifest next update:     Tue 22 Apr 2025 08:00:20 +0000
Files and hashes:         1: P4Go6MdbWPfR79TD5lItJ4Y_nM8.crl (hash: fwY1NT6kVPO3EkPJ1jVLqYGo1rtsw5ultPfpxGF/rcI=)
                          2: xxFhvD1_C6pipJEBTKl033yHEF0.roa (hash: wMvUINT+XWfdQDveaENdYgbkPPqi3fpmXNh+RaQEiM0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/eb7f7e-a880-497b-b54c-b708c40a667f/1/P4Go6MdbWPfR79TD5lItJ4Y_nM8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/eb7f7e-a880-497b-b54c-b708c40a667f/1/P4Go6MdbWPfR79TD5lItJ4Y_nM8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P4Go6MdbWPfR79TD5lItJ4Y_nM8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:57:5c:c8:35:4a:d3:bb:30:09:fa:47:6b:48:f6:ed:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f81a8e8c75b58f7d1efd4c3e6522d27863f9ccf
        Validity
            Not Before: Apr 21 08:00:20 2025 GMT
            Not After : Apr 22 08:00:20 2025 GMT
        Subject: CN=7b9dc32bc76416e211e272ff0cb8dc5c0a5133ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:01:13:13:00:e1:8e:8f:a6:17:c1:77:e9:a0:
                    56:f4:48:0b:28:81:c5:be:6f:1d:7d:39:58:f5:a0:
                    fb:5a:90:7c:ef:d4:9a:98:15:a9:55:f7:69:00:3a:
                    c3:04:b1:b1:ff:88:c2:a0:b3:d6:6b:37:29:c0:26:
                    48:7d:16:50:bd:62:37:38:a1:1b:e0:c3:51:cd:3f:
                    8c:7b:a0:e8:44:11:f4:5f:5f:40:aa:e7:17:d8:c6:
                    8e:7e:1b:1a:08:58:0e:b1:d6:fe:00:16:8a:3f:ca:
                    a1:7f:0b:db:f3:50:3d:7f:00:f1:87:24:ce:99:77:
                    cf:21:15:e8:24:45:df:2e:52:bc:ac:b1:5f:5b:30:
                    7e:ba:bb:51:84:60:1b:c3:17:d3:ae:12:74:ec:f6:
                    91:6b:cb:68:7f:cb:ce:38:ca:49:83:86:f7:75:a9:
                    cd:37:14:04:85:67:b4:97:a3:53:b5:f6:1f:2f:ff:
                    f2:c4:e5:6f:5c:3e:88:a9:2d:a4:5b:05:f6:39:ba:
                    68:9a:ce:75:26:3d:a3:2f:e5:ab:42:d2:c3:9e:01:
                    d0:bb:ba:bf:b8:d6:fe:20:54:8d:12:28:83:b7:0f:
                    b3:c4:90:b0:91:1b:0c:1e:03:0a:0f:ec:2c:af:ca:
                    47:70:ec:38:d2:e6:26:dd:ce:03:70:92:ca:15:ea:
                    32:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:9D:C3:2B:C7:64:16:E2:11:E2:72:FF:0C:B8:DC:5C:0A:51:33:EF
            X509v3 Authority Key Identifier:
                keyid:3F:81:A8:E8:C7:5B:58:F7:D1:EF:D4:C3:E6:52:2D:27:86:3F:9C:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P4Go6MdbWPfR79TD5lItJ4Y_nM8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/eb7f7e-a880-497b-b54c-b708c40a667f/1/P4Go6MdbWPfR79TD5lItJ4Y_nM8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/eb7f7e-a880-497b-b54c-b708c40a667f/1/P4Go6MdbWPfR79TD5lItJ4Y_nM8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:be:9b:1a:3c:e5:08:d9:d1:54:2f:12:d9:9c:47:c2:1c:13:
         3c:99:5c:20:be:ae:90:d5:f0:6c:49:62:3d:7e:97:b6:a3:02:
         37:9c:d9:33:a6:0f:7d:bd:d5:da:b9:65:3b:12:64:ba:a9:78:
         8e:30:7a:09:ab:dd:63:84:07:ed:2e:60:23:cd:82:bb:92:e2:
         f6:44:b5:cb:63:6c:51:56:36:6d:f9:7a:b5:6f:d5:fd:61:51:
         b1:5a:e6:8a:99:85:ab:a7:b6:b2:58:d5:ae:5e:f9:49:de:33:
         14:e3:9d:d8:22:2b:2e:c0:e3:59:55:47:50:56:18:de:8a:46:
         47:c7:63:ea:1b:0c:ef:85:fc:c0:3b:f1:8e:4d:7b:27:db:eb:
         6f:f8:1f:81:1c:13:51:c7:41:54:a5:27:ce:e7:50:b6:4f:15:
         c0:78:d3:ca:cd:0c:7a:d8:b7:b3:cb:ba:89:ca:f1:6f:15:1d:
         8f:20:9b:ac:d7:f8:fb:ae:bd:76:e1:f9:2a:30:4f:93:5a:78:
         fd:56:e9:33:58:b4:c1:8f:9d:59:08:9c:0f:34:87:e3:34:3a:
         c6:e9:86:e3:ac:eb:83:8e:43:44:68:5d:50:fd:ea:a4:37:87:
         34:2d:ed:79:8e:6f:54:19:49:c3:0d:76:f0:c0:cd:52:75:f8:
         06:97:de:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:37:44 2025 by rpki-client