Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
File:                     7hzOkB5ft8kvCakVz25lb2k7oQA.mft (raw, json)
Hash identifier:          rGDt7azCCERzz3oZL2GcId9camVKsaT9R7rMuy3Fzgk=
Subject key identifier:   DB:46:F8:84:5A:72:71:EF:2E:B0:58:A7:CD:C3:23:35:52:35:24:7A
Authority key identifier: EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00
Certificate issuer:       /CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100
Certificate serial:       01974AE84A4A33223A741D907714B36F3493
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
Manifest number:          1366
Signing time:             Sat 07 Jun 2025 15:00:26 +0000
Manifest this update:     Sat 07 Jun 2025 15:00:26 +0000
Manifest next update:     Sun 08 Jun 2025 15:00:26 +0000
Files and hashes:         1: 1-YcJrvTRpLHaqQAFDly2XT4FqzM.roa (hash: P+X7bk4xVC2G2mv0GzrMdTNr5FMbR6w5BMTW58Igvfs=)
                          2: 7hzOkB5ft8kvCakVz25lb2k7oQA.crl (hash: UAqlMwvr8CwwIfrCLwKxJNnMJoIp6h0HMFkuqQqC+Ow=)
                          3: _GP8StenfvBJOKnQr7M_P7qAzf4.roa (hash: kdSVEH13j0prqXPkHz8Kr5u7PPDHiQCPmIC83dYc1oc=)
                          4: fzev7_a9OYyMIFNofQlw5RVoFZM.roa (hash: 10wzAQdx79ulrqhu3JqofOZW6+gKOGXZaHawTm1W9iE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 11:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:e8:4a:4a:33:22:3a:74:1d:90:77:14:b3:6f:34:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100
        Validity
            Not Before: Jun  7 15:00:26 2025 GMT
            Not After : Jun  8 15:00:26 2025 GMT
        Subject: CN=db46f8845a7271ef2eb058a7cdc323355235247a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:25:46:f8:2c:82:42:34:cc:29:d1:36:9e:67:
                    5d:94:a8:2a:a5:6a:1e:6c:2b:84:1a:04:c1:7c:b7:
                    4c:e9:10:58:f2:5b:d6:45:00:af:ce:3e:88:8e:31:
                    3a:a4:8c:ac:ed:b4:21:1e:57:31:bd:92:08:92:92:
                    6f:c9:e5:66:c5:6d:9d:f4:b4:21:2d:b7:0c:e0:a1:
                    d2:f1:a2:72:1d:1d:b4:3f:a2:e2:7f:8f:2d:f8:18:
                    df:62:c0:28:b9:c2:f0:1a:f6:69:64:ce:b4:43:1a:
                    e7:72:45:eb:c6:c0:b0:43:4e:4b:a5:e5:7d:70:c5:
                    18:a3:53:18:90:f7:b9:a2:28:bd:a2:3d:a9:61:4e:
                    ab:55:90:f3:4f:96:bf:e3:ad:ff:06:8b:0b:97:90:
                    6f:a9:d1:6f:9a:71:b7:a4:f7:72:21:86:e9:cd:99:
                    a9:0a:31:89:a5:40:79:bb:a0:b7:29:ed:df:c8:22:
                    1a:89:5e:dd:31:77:7b:2a:50:80:41:86:de:35:11:
                    0f:e2:02:d5:37:42:ea:2e:08:eb:01:c2:40:83:77:
                    19:b5:2f:2e:50:95:ca:ed:fe:d2:b1:24:85:31:f0:
                    35:25:79:04:4b:f5:45:b2:de:3d:6c:1b:57:0d:18:
                    5c:aa:bd:1d:27:b7:24:fb:55:bd:45:0d:5b:ee:61:
                    15:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:46:F8:84:5A:72:71:EF:2E:B0:58:A7:CD:C3:23:35:52:35:24:7A
            X509v3 Authority Key Identifier:
                keyid:EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:a2:de:2a:7b:e5:fd:30:55:d9:3d:2d:88:5a:1e:0d:b8:ce:
         c8:a5:93:f0:49:7f:18:58:51:f6:2d:21:92:1d:a5:67:eb:42:
         af:fa:47:80:c3:eb:9c:e2:e7:ae:4d:77:13:c3:dc:5f:00:32:
         3b:d4:88:29:8b:0e:6d:20:23:73:73:4a:b8:4a:20:67:71:29:
         ad:3b:07:f6:8f:33:b0:3c:c3:fe:2c:0e:02:42:18:fa:09:91:
         ce:8b:9e:9a:2a:c3:3b:fc:c4:b3:ee:ad:b9:9b:69:88:f7:9b:
         19:05:55:84:1d:bd:2b:2f:cb:b6:05:72:be:c8:de:38:50:52:
         1d:2f:ca:99:6b:c3:17:91:c0:35:8c:0c:d3:55:e6:2b:0b:5d:
         03:6d:ad:7f:a3:72:8e:a5:2b:55:28:f4:6e:75:2d:99:48:84:
         98:6a:94:3b:70:4f:e0:47:f4:1d:9c:75:48:2a:c0:fd:02:54:
         5c:18:2c:07:6e:af:9d:e8:f9:dc:c8:b8:b7:79:b6:79:21:d6:
         5d:91:5b:1d:ad:28:35:da:2e:7f:38:2f:41:f1:f0:1a:0d:7a:
         ea:35:97:13:c0:ae:2b:63:13:40:d1:98:d9:c4:c0:bb:f9:ed:
         ef:fd:98:e9:c8:9c:ee:11:64:5f:a8:21:32:95:21:47:48:34:
         b0:fb:66:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:01:57 2025 by rpki-client