Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
File:                     Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft (raw, json)
Hash identifier:          3Zrf2q9D7zGy9XBwcHXuK2jws+V6hgc7/C73BKigB14=
Subject key identifier:   27:46:F5:E2:50:3A:AF:CE:E1:E8:EC:95:86:88:34:7C:68:1E:79:FF
Authority key identifier: 15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE
Certificate issuer:       /CN=15ffa042114301368b4069abd68a1efbac47fdce
Certificate serial:       01964B58B118E88FF90E2622B84AF1C93715
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
Manifest number:          1519
Signing time:             Sat 19 Apr 2025 00:00:25 +0000
Manifest this update:     Sat 19 Apr 2025 00:00:25 +0000
Manifest next update:     Sun 20 Apr 2025 00:00:25 +0000
Files and hashes:         1: 6u0Asdv1MK3aB_6LSzkcot6bBic.roa (hash: Unsvdd0urMCZdw1KCmFCBV2OeTjQKyc3NTKlxR83W+g=)
                          2: AGOQH07CbOv-ptcClhHBm5EQp-4.roa (hash: LGaMLQ5/MFjNXGL657nV7BSt6luG57ujXGiYSAKsY5E=)
                          3: Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl (hash: 8IroxHepTGJQ5SCS7nBCTfrpQ101Cck7Uwfc/kTIYlI=)
                          4: G_eCdr_CtHHYdvx_wsfrWGJQP2E.roa (hash: m4lFNVsxQJtYcVSh1StMkG9TI91ecQZqyflVHyNHncI=)
                          5: O-SsLGZDDis9x7Hdr9bjMmd2BoY.roa (hash: HishzW2LB7SBBdcbiiTEBoYKX9Z+I6RhesW10ogdrys=)
                          6: UezMgLKKI-WhO1czQILLBRClTv8.roa (hash: AnuM+KLFPB1elW7al0sjIDYMJlOpGTtEqCymfhnESgE=)
                          7: VMoqlOK-MJqp996eyPBNUMTrX6A.roa (hash: 8RHtQIgLQ/EvEXhkyLFjYmtdChDMLdlv9Mb6lWVfKUw=)
                          8: zXrOjxGX_DI-tXkFUtLuBXotuic.roa (hash: mrO+89Y/llkPbD0Oqqb4OVuncS888EEiNoMgxFZFl6I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4b:58:b1:18:e8:8f:f9:0e:26:22:b8:4a:f1:c9:37:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15ffa042114301368b4069abd68a1efbac47fdce
        Validity
            Not Before: Apr 19 00:00:25 2025 GMT
            Not After : Apr 20 00:00:25 2025 GMT
        Subject: CN=2746f5e2503aafcee1e8ec958688347c681e79ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4b:39:8a:fc:cc:ed:e8:6d:48:63:52:b8:ce:
                    47:1c:1a:9a:00:73:06:04:5d:6c:40:a8:b9:fc:2c:
                    64:35:1c:61:ef:37:6c:21:76:b6:0d:a7:4e:71:dc:
                    f3:22:41:79:5d:bb:7e:a4:fa:a3:72:f8:00:84:76:
                    44:13:c6:0a:f6:ae:b5:46:c7:ef:6b:b0:47:8d:4b:
                    59:aa:95:7e:75:49:a5:bb:fe:ac:d0:50:fd:92:36:
                    dc:27:2d:90:66:2e:36:c3:54:a2:b4:8c:61:51:00:
                    d3:b6:fa:fb:c9:9f:b1:5d:6a:d9:b1:dc:6a:16:6c:
                    72:12:b3:66:a6:23:8a:40:6c:b2:17:71:3e:da:e8:
                    06:47:b5:98:f9:99:96:a1:7a:99:8a:e6:62:22:86:
                    50:5d:75:7a:3d:84:da:1c:9d:6f:5d:40:80:29:f5:
                    31:3d:b0:da:e0:99:00:16:3b:e3:92:55:39:6d:83:
                    a1:3b:42:2d:90:1f:f0:35:ba:48:fb:b7:0c:6d:1f:
                    ac:a7:22:55:13:d6:e8:75:f0:7f:14:66:0e:cd:1a:
                    ce:b2:d3:87:d6:98:a9:a5:97:d0:85:a4:53:5b:78:
                    d5:98:4d:18:13:4f:8c:6b:fe:d0:c5:14:f1:71:1d:
                    bb:08:c2:3d:e2:67:6c:bf:f3:4c:6c:ea:d6:6a:9d:
                    0c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:46:F5:E2:50:3A:AF:CE:E1:E8:EC:95:86:88:34:7C:68:1E:79:FF
            X509v3 Authority Key Identifier:
                keyid:15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:2e:fa:95:88:4b:58:32:ca:b3:68:23:d5:0f:5f:e1:36:3a:
         ef:96:b8:c7:1a:76:9d:8d:2b:f2:ca:70:70:b5:da:7a:34:b9:
         d4:7b:da:27:53:48:a4:d8:4b:81:74:1b:60:92:8e:c3:f8:5f:
         4e:09:4f:00:fa:74:bc:2c:19:f9:4a:c9:ff:d2:71:6c:58:f7:
         54:c6:fe:b2:ce:b1:72:46:dd:5a:5b:ef:5f:66:1b:b5:62:c5:
         c0:db:9c:b9:40:50:06:bc:22:4b:9d:da:0c:31:6c:76:c8:7c:
         0a:cc:36:52:9f:a8:ab:5e:13:27:9d:78:25:7a:52:56:22:d4:
         ec:6e:a4:01:85:25:92:f1:c8:2c:8a:1f:88:5a:50:d4:b4:4d:
         63:54:0a:71:72:b5:5e:f1:79:c8:e9:01:57:88:73:f8:b9:bf:
         54:f7:23:30:04:12:6d:06:ed:b8:2d:ef:7b:51:05:00:69:d8:
         05:c3:5b:7a:3b:b4:43:21:9b:47:96:63:f5:6d:f9:75:dd:a3:
         94:8f:1d:55:79:76:6e:f3:ca:f6:ae:73:3a:c8:85:fd:60:be:
         ca:1f:05:e4:10:46:3b:79:cf:27:ff:ce:18:8a:55:a7:0c:6d:
         b7:27:bb:39:29:c1:5b:aa:19:a8:bf:e4:09:58:a3:7a:4e:a4:
         51:7e:d6:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:53:13 2025 by rpki-client