Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.mft
File:                     Xo0HtF99gxJMn4wPrAO-wCRos34.mft (raw, json)
Hash identifier:          bZhZQAJe//3gOjUrbNIFu5ysO9sh2D1FTd+ZeHYtzAo=
Subject key identifier:   C6:64:6B:1E:D2:94:3F:AD:2D:55:1B:7B:C8:AE:E0:8E:F8:2A:1A:A4
Authority key identifier: 5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E
Certificate issuer:       /CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e
Certificate serial:       01962F743B28E23CA12A1DBF7C38B513A251
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.mft
Manifest number:          1500
Signing time:             Sun 13 Apr 2025 14:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:08 +0000
Files and hashes:         1: 42NnB3jW5n3RbWWrHMDd_7NubAY.roa (hash: bZyySLXxgMQfpoBtEuXSmgHgMgLKQxBjV3IqMenXg0E=)
                          2: 6fbinwZffloM0LKbfaH0b2eS-Sw.roa (hash: qKNkqQbtbvk3OgnwHN7CkwuLiUcFr56z8lyxMpVt8JU=)
                          3: EuMIVvtjfwcw4H_1qN_NTTYxtB0.roa (hash: GstL7gwAEgcyBOR5WEEQ3UJ45LkAklqubcGaSv86PEM=)
                          4: U3GEel-_AheBYgIYIVYL9mt_5dg.roa (hash: qjeuuOD21NigMG6GkIxT7OwP2vU0izG4cg6tV2NDSPY=)
                          5: Xo0HtF99gxJMn4wPrAO-wCRos34.crl (hash: OnPeuBa9FJZItHNsH+yaaEGdLstngbg2VYxye9qzX2w=)
                          6: hMxFbe2_woNux6m3JkElwux-E5g.roa (hash: nrSIsPwWOsAGq4mrEG8bp4vhnLrScT5iVl2b8ClElOk=)
                          7: olCZzHEOZSOjj4yqtahX2zJkhMQ.roa (hash: aXtBhSkmw714xAy5wT1PAT7ELEpsc4omuqROu4g4WE8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 14 Apr 2025 14:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:3b:28:e2:3c:a1:2a:1d:bf:7c:38:b5:13:a2:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e
        Validity
            Not Before: Apr 13 14:01:08 2025 GMT
            Not After : Apr 14 14:01:08 2025 GMT
        Subject: CN=c6646b1ed2943fad2d551b7bc8aee08ef82a1aa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9b:a6:04:22:f4:a9:aa:80:36:0f:2b:3d:d1:
                    bf:fc:82:2f:4a:81:80:13:82:bc:fc:06:6f:df:98:
                    9e:7c:19:f9:87:97:b2:cc:ad:81:b3:a9:ce:bb:ea:
                    8d:02:ea:34:26:64:65:b2:97:51:04:20:f6:b8:f5:
                    19:9b:4c:c8:8a:e2:8e:7f:71:2a:a8:8b:2a:bf:70:
                    a8:8d:fe:f3:ed:ce:b3:20:d5:e1:a3:1b:47:3f:74:
                    04:41:e1:76:85:53:19:c8:65:16:08:9d:bf:14:59:
                    d4:ec:85:26:28:f3:0e:e0:02:6c:e5:71:38:7a:3f:
                    06:dd:ed:71:16:4c:f8:e8:fa:fc:05:14:b6:39:ed:
                    02:b8:eb:81:b7:b5:9c:aa:4f:fb:3b:b8:31:e8:18:
                    68:3d:8f:d9:c6:55:ca:35:f9:81:75:a8:e8:2f:d7:
                    3c:5f:87:43:f4:a0:6d:c2:5f:15:0f:ef:06:6c:b7:
                    b5:0a:e3:91:2c:2b:f5:3a:76:89:45:55:1c:ae:1e:
                    97:41:55:d1:74:95:e9:43:26:a0:d1:af:fa:d1:51:
                    88:c6:5f:cc:1f:74:d8:4a:d9:e7:cc:d5:6d:c5:ee:
                    c2:ac:d1:82:01:43:e4:45:80:3b:5b:c8:b7:12:60:
                    0d:bc:e2:45:ab:6a:bf:e2:1b:6f:46:e8:90:df:d9:
                    63:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:64:6B:1E:D2:94:3F:AD:2D:55:1B:7B:C8:AE:E0:8E:F8:2A:1A:A4
            X509v3 Authority Key Identifier:
                keyid:5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:d8:b7:f2:4c:f3:e1:99:ca:1f:ee:8e:1e:2e:c3:a6:86:3c:
         8c:aa:13:f5:0b:04:b2:00:bd:f7:fe:42:2e:10:c8:26:7e:38:
         16:ea:e9:11:95:cf:c1:8a:63:cb:da:ea:d3:9f:04:98:d7:20:
         4e:5d:74:ac:36:3e:f5:2f:c5:5f:17:fb:18:67:07:f0:92:0c:
         8f:bb:87:bf:22:73:47:d5:f1:d6:71:23:ff:e7:c6:29:ae:4e:
         84:a2:fd:2c:1d:bb:b7:73:51:5a:7b:9e:7a:1e:00:02:cc:1b:
         7d:70:2b:12:18:ed:c3:95:d3:bb:f0:d5:99:5e:a0:93:85:a5:
         f5:63:5d:05:28:90:bb:5b:ef:9c:b5:9b:39:7f:a7:a3:49:54:
         47:a9:76:89:79:d9:5c:f5:f0:4c:c6:b8:47:c6:c6:67:1b:0b:
         bc:ca:19:4b:d9:47:69:ff:f3:3d:87:4c:91:8c:df:e4:6a:01:
         61:05:b5:89:76:b8:e6:dc:1c:71:ed:f8:ee:4e:02:39:11:f5:
         7b:a1:ee:67:55:29:1d:12:6c:d6:16:48:15:b0:37:e5:d8:7c:
         9b:76:47:8c:1f:4f:a6:b3:37:99:59:4b:c0:a1:c0:f0:46:c2:
         59:be:43:85:39:8f:e9:a8:f1:77:11:6f:ee:90:ca:69:67:24:
         07:21:56:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 22:39:22 2025 by rpki-client