Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/f7Q94jf9C2ooc4kjCSHSWiwu0ag.mft
File:                     f7Q94jf9C2ooc4kjCSHSWiwu0ag.mft (raw, json)
Hash identifier:          VA08g0rffV6eB58jfEGeXS9HWLSIY5xb83ozPoePqSI=
Subject key identifier:   E7:A7:51:F5:4B:85:2E:FD:7B:C8:A9:85:95:60:90:88:1B:B3:66:11
Authority key identifier: 7F:B4:3D:E2:37:FD:0B:6A:28:73:89:23:09:21:D2:5A:2C:2E:D1:A8
Certificate issuer:       /CN=7fb43de237fd0b6a287389230921d25a2c2ed1a8
Certificate serial:       01964556CB74CF9CB1722FC8D34CB57F0BE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f7Q94jf9C2ooc4kjCSHSWiwu0ag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/f7Q94jf9C2ooc4kjCSHSWiwu0ag.mft
Manifest number:          1487
Signing time:             Thu 17 Apr 2025 20:00:38 +0000
Manifest this update:     Thu 17 Apr 2025 20:00:38 +0000
Manifest next update:     Fri 18 Apr 2025 20:00:38 +0000
Files and hashes:         1: ZbCuBvhm3WPg8vIgNTz5bN7GnM0.roa (hash: geQ1HtbnOZqLyTn8wKAlnJdK10ztk7Vg8HhapzU1X2M=)
                          2: f7Q94jf9C2ooc4kjCSHSWiwu0ag.crl (hash: fkgjUFct6fEzC81eE32vnI9hw5D5jdSxe4N+TLZISk8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/f7Q94jf9C2ooc4kjCSHSWiwu0ag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/f7Q94jf9C2ooc4kjCSHSWiwu0ag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f7Q94jf9C2ooc4kjCSHSWiwu0ag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:45:56:cb:74:cf:9c:b1:72:2f:c8:d3:4c:b5:7f:0b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fb43de237fd0b6a287389230921d25a2c2ed1a8
        Validity
            Not Before: Apr 17 20:00:38 2025 GMT
            Not After : Apr 18 20:00:38 2025 GMT
        Subject: CN=e7a751f54b852efd7bc8a985956090881bb36611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:2e:36:30:0e:a8:c4:4c:27:34:ee:f4:df:1d:
                    ed:5a:eb:6c:29:f3:ad:34:0e:46:b2:48:f1:4f:3d:
                    25:ff:ae:80:60:d9:d9:8b:89:f3:f3:fd:2d:da:bc:
                    35:4c:9b:dd:9e:f3:67:45:02:91:52:32:32:3d:c6:
                    45:af:74:e5:c7:0c:77:93:71:30:51:ca:ff:3d:e9:
                    57:f5:70:5c:7b:48:f1:0f:08:4d:c1:8f:d7:01:bd:
                    bd:ef:45:fe:93:9d:5c:0a:25:88:df:21:39:45:bb:
                    9d:85:9a:b9:b8:da:ef:a2:72:1b:c1:ac:fb:fa:81:
                    56:10:51:67:77:8c:49:8c:d6:a5:1d:9e:94:f6:30:
                    84:91:c9:6b:8d:22:81:61:70:12:ce:b8:c6:c9:96:
                    09:18:38:a8:31:93:f2:45:44:50:27:26:b1:ca:80:
                    c8:c2:ca:06:e7:af:40:c8:2a:cb:46:53:d7:5b:30:
                    aa:d8:f5:e3:db:3a:68:a0:a6:d1:3d:4f:78:0a:6f:
                    ec:1b:a1:07:4d:42:0e:e8:d8:56:f0:03:61:5c:4a:
                    79:20:41:00:93:b0:5c:fc:6d:9e:a1:d3:ff:c4:9e:
                    2d:b4:0e:7b:b9:c9:a3:d0:b2:62:ed:bc:ee:41:df:
                    27:89:55:55:dc:6a:b1:7f:22:b0:48:82:f7:07:19:
                    38:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:A7:51:F5:4B:85:2E:FD:7B:C8:A9:85:95:60:90:88:1B:B3:66:11
            X509v3 Authority Key Identifier:
                keyid:7F:B4:3D:E2:37:FD:0B:6A:28:73:89:23:09:21:D2:5A:2C:2E:D1:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7Q94jf9C2ooc4kjCSHSWiwu0ag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/f7Q94jf9C2ooc4kjCSHSWiwu0ag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/f7Q94jf9C2ooc4kjCSHSWiwu0ag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:58:83:68:3c:b4:f0:60:18:54:b4:86:0c:1a:20:38:32:56:
         66:a4:97:d4:0c:8b:95:e1:a5:b1:d7:e5:05:17:e3:fa:15:7a:
         00:81:d3:3e:22:cf:d8:15:88:03:1f:df:35:5c:27:d2:0b:d6:
         27:ed:ed:d3:60:34:36:54:3a:3a:35:e9:84:c4:a5:3c:1b:34:
         3c:ce:11:a7:d4:1d:05:5a:8c:ef:16:d2:f6:1b:c9:b8:41:e2:
         fa:76:fa:ba:ba:93:d0:d6:ea:6d:9e:e5:59:6e:f5:24:25:09:
         6b:50:df:7b:fd:9d:b7:59:aa:80:02:66:d6:6b:49:f9:ce:f0:
         2a:8c:e8:c4:50:9f:a0:95:27:f9:c3:c7:f2:d1:2b:54:74:15:
         57:22:0e:ae:06:c3:f2:cd:b0:fe:8d:f1:56:68:c7:7c:99:ac:
         9d:4c:6e:be:5c:67:82:ad:11:5d:b6:95:8d:6f:94:f3:cb:36:
         37:be:f0:be:da:68:b1:78:74:43:67:23:6b:d3:23:16:1c:c4:
         19:8a:85:1f:97:68:d7:9b:76:df:d3:13:06:99:40:fa:0d:ee:
         a7:ab:7a:90:c2:70:ef:c3:31:a1:92:5d:aa:f0:a4:1f:6a:df:
         0f:be:71:09:cd:50:9d:0c:c5:8d:93:99:b9:09:01:ec:38:9d:
         28:68:3a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:48:35 2025 by rpki-client