Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/sVyi9obU5ISnfDTBc0dr9p0je30.mft
File:                     sVyi9obU5ISnfDTBc0dr9p0je30.mft (raw, json)
Hash identifier:          u6u6OMQYr33eQpkruXzVBmRk9pXOkNtomE8pQyfJaLs=
Subject key identifier:   1C:1F:EC:A2:78:9D:FA:01:50:BA:58:65:2A:D7:18:13:69:13:01:20
Authority key identifier: B1:5C:A2:F6:86:D4:E4:84:A7:7C:34:C1:73:47:6B:F6:9D:23:7B:7D
Certificate issuer:       /CN=b15ca2f686d4e484a77c34c173476bf69d237b7d
Certificate serial:       0196512415704F9FFEEDD73E3B9EA926F861
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sVyi9obU5ISnfDTBc0dr9p0je30.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/sVyi9obU5ISnfDTBc0dr9p0je30.mft
Manifest number:          10A6
Signing time:             Sun 20 Apr 2025 03:00:41 +0000
Manifest this update:     Sun 20 Apr 2025 03:00:41 +0000
Manifest next update:     Mon 21 Apr 2025 03:00:41 +0000
Files and hashes:         1: HGyMO-gI6BJOthGGldBVkMwTP6M.roa (hash: LWkHdvqqdhuJkMVn2Z8NyBNjrEPjz4vXV3NQv+TmBQY=)
                          2: sVyi9obU5ISnfDTBc0dr9p0je30.crl (hash: qACwBFVXQfbqXBQr0IDdBpaxVq/zusv52uv1XgxN3mc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/sVyi9obU5ISnfDTBc0dr9p0je30.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/sVyi9obU5ISnfDTBc0dr9p0je30.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sVyi9obU5ISnfDTBc0dr9p0je30.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:51:24:15:70:4f:9f:fe:ed:d7:3e:3b:9e:a9:26:f8:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b15ca2f686d4e484a77c34c173476bf69d237b7d
        Validity
            Not Before: Apr 20 03:00:41 2025 GMT
            Not After : Apr 21 03:00:41 2025 GMT
        Subject: CN=1c1feca2789dfa0150ba58652ad7181369130120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:81:81:e2:83:bd:cd:ca:a9:66:aa:72:a8:2e:
                    aa:d3:0b:21:6c:a3:11:0c:89:7b:41:78:da:c9:45:
                    56:d1:41:6d:1d:e4:de:07:7e:ea:e6:cc:06:60:e2:
                    89:1a:ea:55:c9:53:a7:4e:44:a4:07:c6:75:e6:c4:
                    52:ac:52:7e:1b:9f:95:f1:a4:86:c9:a1:0e:00:98:
                    7a:2b:b4:99:84:57:38:f4:8c:45:d8:5c:16:40:a3:
                    73:d8:8b:38:ae:92:e3:21:97:ad:64:b9:0d:16:76:
                    a9:d9:58:08:f3:13:ac:03:e2:de:80:bf:6a:5e:4f:
                    e8:11:68:a4:a4:91:03:c3:19:32:9e:cb:60:56:c0:
                    b4:f1:b6:85:60:04:ec:e8:55:ba:6b:5d:07:6e:2d:
                    b5:9b:84:19:7c:4c:de:90:1f:fd:d2:e7:2b:83:a1:
                    ce:5f:fc:06:05:99:75:3d:c4:3c:91:88:40:0d:8e:
                    d7:32:aa:ec:17:96:79:59:d6:90:ed:45:99:67:85:
                    c2:21:13:70:e3:0c:86:96:bd:58:91:8b:97:4f:ee:
                    19:93:c2:a5:45:99:f1:52:59:c8:59:50:65:a6:64:
                    ca:62:9d:85:f5:d8:aa:73:ee:5e:68:7b:59:2e:87:
                    de:6e:10:eb:ef:ef:c0:b4:79:13:3d:9c:cd:90:86:
                    55:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:1F:EC:A2:78:9D:FA:01:50:BA:58:65:2A:D7:18:13:69:13:01:20
            X509v3 Authority Key Identifier:
                keyid:B1:5C:A2:F6:86:D4:E4:84:A7:7C:34:C1:73:47:6B:F6:9D:23:7B:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVyi9obU5ISnfDTBc0dr9p0je30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/sVyi9obU5ISnfDTBc0dr9p0je30.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/sVyi9obU5ISnfDTBc0dr9p0je30.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:35:59:1e:2a:70:a1:3d:34:cd:10:29:e6:25:e0:5c:17:ee:
         fc:ea:aa:a2:12:a7:90:0b:df:d6:9e:07:cd:5a:f4:c2:e5:39:
         1a:15:d6:f5:ef:86:c5:37:da:fa:83:7c:db:f5:5c:ef:cc:a6:
         86:e0:78:a5:12:ae:d3:5b:dc:c0:a0:e1:c8:f1:1a:ed:9d:a7:
         05:c2:65:c0:7c:9d:1e:39:64:36:c6:e1:d7:a9:fe:b9:32:47:
         2a:cb:de:34:87:a8:90:e6:f7:e6:55:92:9d:91:a6:c0:1f:4c:
         96:97:d4:41:dc:ed:43:1b:3e:56:11:10:fd:3c:5a:1f:cd:10:
         ef:1b:a3:96:69:b2:7e:a7:9b:7d:0e:ff:b9:cf:19:15:67:9f:
         40:1c:6c:85:75:fc:6b:20:9c:72:6c:27:95:c1:6e:9d:8e:ec:
         60:cf:a9:27:dc:16:4d:7f:d4:81:ff:2a:58:c0:a9:c3:f9:9f:
         05:89:35:6c:43:9a:f5:f0:a0:c6:19:de:86:c8:14:99:69:55:
         09:d7:88:47:75:45:d9:db:06:88:3e:4d:5d:01:f6:b3:8d:51:
         7a:fc:cb:49:92:78:d9:42:fe:a2:bc:aa:7e:e2:cb:db:4f:83:
         e2:5b:1d:f4:a0:f2:aa:92:b4:5a:2a:7a:63:9e:76:a7:f0:9c:
         d6:fb:9c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 05:00:20 2025 by rpki-client