Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft
File:                     mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft (raw, json)
Hash identifier:          YZSXsLYMJqzHKNQRqpsLAebIPd1Sn1T9o31SsRQ8Wbg=
Subject key identifier:   77:98:5A:64:B1:F6:A3:3F:F1:42:28:CB:F5:BB:C9:A7:6B:81:8B:83
Authority key identifier: 99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04
Certificate issuer:       /CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204
Certificate serial:       019652DB470CD8F8EBEBF3D757EA4A313D35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft
Manifest number:          0EEB
Signing time:             Sun 20 Apr 2025 11:00:24 +0000
Manifest this update:     Sun 20 Apr 2025 11:00:24 +0000
Manifest next update:     Mon 21 Apr 2025 11:00:24 +0000
Files and hashes:         1: OalAb_NOtnnw1Uf7t2E7JPJ6VoY.roa (hash: /2DSINFIyLLAuWT+NSN2AERglHoq5WMezjiuaEAGBLc=)
                          2: XQnA4fzSokv349YJHCcSPvW1wpY.roa (hash: 1T4l/3zq9SIbzqOCRSx+UROHUX/iz06EO7SpCd6NyJk=)
                          3: YLlE5pxTdS6tg_rMJZiHRJCBtz0.roa (hash: Bw/ViWsgEqyxUU4QLJ0NfAmaEK6jP82CD1tF0xNBYgI=)
                          4: i0UQOeJ6YNtAxZECZiMmxjiaF3I.roa (hash: Tq5saoxoAZ2SR0wF+u5fAsszTDxNlUp7BPSS54+/SOc=)
                          5: mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl (hash: x3o46PTJeGYvUWiwRtN02TRKilsXTlmzHprZOXCkNYY=)
                          6: qOY7wbeKs3nIQqhImhSE17lPdCk.roa (hash: jaqajIIr+ngeFDOwuzVR6399SRRk8jyurbScXxLtxAE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:52:db:47:0c:d8:f8:eb:eb:f3:d7:57:ea:4a:31:3d:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204
        Validity
            Not Before: Apr 20 11:00:24 2025 GMT
            Not After : Apr 21 11:00:24 2025 GMT
        Subject: CN=77985a64b1f6a33ff14228cbf5bbc9a76b818b83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f0:a2:53:fd:32:70:12:40:e4:8d:df:2a:cf:
                    7c:f2:e0:ed:d4:13:98:cf:bf:87:6f:18:63:25:6a:
                    10:3f:92:37:23:71:77:6e:24:5e:08:eb:b4:b9:02:
                    ba:a0:9f:08:b3:37:8f:77:c5:33:2e:98:a2:31:1d:
                    74:a4:d9:91:d1:74:ca:94:c3:32:8b:b1:fa:7d:e8:
                    f4:7b:d2:92:38:c9:94:d9:77:36:9b:3e:b2:d0:c4:
                    3a:8f:4d:dd:44:ab:60:fd:4e:3c:23:19:a2:04:ea:
                    f5:53:80:cc:6d:c7:7b:d4:d2:21:e2:f6:b1:24:41:
                    7b:e1:88:a7:54:c8:b2:dd:77:98:be:fa:1a:33:9b:
                    c2:88:07:c4:50:4e:66:a7:7b:fc:d5:6c:ce:7f:72:
                    49:ab:33:de:aa:e9:47:dc:21:47:76:08:82:18:46:
                    bc:61:04:1e:2c:58:34:66:bf:66:6b:a2:94:2a:96:
                    1c:05:54:f4:99:74:42:62:b5:f9:3e:e5:f4:d1:c0:
                    54:59:33:21:d8:22:6d:7b:b7:c1:a2:c7:55:c7:89:
                    72:4d:c6:2d:1a:83:67:f4:5f:6e:1b:3e:37:ed:b4:
                    d0:53:28:00:e9:f7:be:3c:a3:13:54:af:33:a6:f7:
                    09:44:57:c5:f5:a6:ad:b8:f3:c9:d9:f4:32:8d:7b:
                    d8:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:98:5A:64:B1:F6:A3:3F:F1:42:28:CB:F5:BB:C9:A7:6B:81:8B:83
            X509v3 Authority Key Identifier:
                keyid:99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:92:f1:a6:dd:91:82:2e:b1:9e:07:f3:2f:35:12:b8:fb:b2:
         ab:47:60:8c:3c:87:96:5b:90:97:99:08:21:c7:93:a3:20:33:
         55:92:46:ca:05:0f:3f:dc:6b:74:7a:da:59:bf:70:27:d4:27:
         54:08:71:1c:27:b7:e2:51:39:03:0e:59:77:ca:db:65:0d:0c:
         e4:ad:16:ad:9f:65:44:bc:6a:3a:1d:73:57:5f:1b:66:0d:7b:
         93:53:d9:e9:1b:38:ff:fd:97:bd:bc:49:a3:0d:4d:0e:dd:7a:
         49:51:7d:86:df:e5:f0:b8:e2:d1:0e:ec:f6:f4:43:64:54:59:
         8e:ed:b8:31:ac:dd:19:06:1f:c2:70:37:fc:17:18:5b:fc:09:
         4e:d8:94:c4:bf:32:b3:70:33:9f:ec:dc:cc:84:dc:21:20:5a:
         90:86:04:d6:46:05:e8:3d:21:f0:54:fc:2d:4a:c8:d6:ff:34:
         3d:54:75:18:b5:e1:0b:50:98:7c:ed:7f:15:f5:c0:7c:1a:47:
         02:98:b4:f6:75:36:8c:ef:6b:0c:f8:03:2b:af:be:70:6f:10:
         51:6b:58:a4:a0:f2:45:e1:ae:60:a4:b8:dc:32:27:32:09:d8:
         37:5f:43:b1:fc:83:4a:60:36:bd:61:06:bd:98:62:03:0a:47:
         3b:14:c4:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:59:08 2025 by rpki-client