Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft
File:                     q29qNuwpYNTQXz2dyxh7m5BOpZs.mft (raw, json)
Hash identifier:          LQjeFyyjXojYvRlxeNnrsjuccBVru7Xx8mylNSi3b+8=
Subject key identifier:   42:22:6F:45:6C:FF:22:EA:83:90:C4:37:B8:43:64:23:0A:AB:A2:E4
Authority key identifier: AB:6F:6A:36:EC:29:60:D4:D0:5F:3D:9D:CB:18:7B:9B:90:4E:A5:9B
Certificate issuer:       /CN=ab6f6a36ec2960d4d05f3d9dcb187b9b904ea59b
Certificate serial:       01963EE6E5DC3A99860CADADC388EA4CB886
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft
Manifest number:          04ED
Signing time:             Wed 16 Apr 2025 14:00:41 +0000
Manifest this update:     Wed 16 Apr 2025 14:00:41 +0000
Manifest next update:     Thu 17 Apr 2025 14:00:41 +0000
Files and hashes:         1: DcoOphnBv0Z-r0DRs1Wzn6GO5g8.roa (hash: /C9jr7QH16ykeDGqHdZ0LLAVK74Wkvu3hj1t3uV43yA=)
                          2: Nq6xP1ML7pMOmt1I4z-fGnkBjbQ.roa (hash: eP8YWZy4BtRcpeOrILokYjbMpuSFUnV4sCVcpAqWhwM=)
                          3: XmMK1HZ3DcPkTMV2el117ysMhn8.roa (hash: 4EKgTSdeFZXBlalCvjDw36pJD0WP5d5sVK8uLLXyrbI=)
                          4: q29qNuwpYNTQXz2dyxh7m5BOpZs.crl (hash: kmTIaebROpDpZsYNYkZgnrfx0ILCD0/pzY5CQq7D6xQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 13:16:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3e:e6:e5:dc:3a:99:86:0c:ad:ad:c3:88:ea:4c:b8:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab6f6a36ec2960d4d05f3d9dcb187b9b904ea59b
        Validity
            Not Before: Apr 16 14:00:41 2025 GMT
            Not After : Apr 17 14:00:41 2025 GMT
        Subject: CN=42226f456cff22ea8390c437b84364230aaba2e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0a:c0:97:1f:6b:71:8a:48:c8:69:02:4d:60:
                    96:0f:d5:7d:ab:87:97:24:e5:a2:0c:d5:30:c8:35:
                    3e:e6:86:4b:46:2c:23:5d:2c:60:0f:9e:1c:d2:10:
                    c7:50:f6:58:df:60:ea:19:7f:28:5b:e9:26:2c:67:
                    21:8f:c5:52:2d:3a:8c:69:da:c4:43:16:90:20:f7:
                    cc:7e:88:0b:91:d2:af:22:8a:23:8d:67:66:15:40:
                    aa:cb:9a:fe:53:f5:7f:d4:be:c5:4b:d9:df:7b:42:
                    d7:9d:45:67:86:49:b0:d0:d2:cb:8e:31:06:f2:4d:
                    fb:48:36:64:3f:90:44:81:b7:6e:f4:4b:1b:75:6c:
                    c4:05:18:f0:cf:fb:da:f3:42:1f:6d:32:95:b5:d0:
                    ac:03:fb:9e:21:5e:be:90:44:f1:dc:64:fe:74:f6:
                    d6:95:0d:98:3a:4b:7a:46:79:e9:4b:07:fd:cf:43:
                    1c:d2:9b:46:49:62:86:cc:72:7a:33:39:fa:bd:8f:
                    a0:f9:89:19:a3:1e:2a:e8:b1:3a:07:93:2b:c4:9c:
                    f1:12:7c:09:da:be:f4:58:cf:de:8f:98:d4:0c:fd:
                    d7:d1:d9:0e:f3:f4:1a:de:cd:96:f3:77:8b:80:37:
                    e3:fa:81:f7:97:aa:fc:f7:ff:fd:53:b3:00:7b:66:
                    de:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:22:6F:45:6C:FF:22:EA:83:90:C4:37:B8:43:64:23:0A:AB:A2:E4
            X509v3 Authority Key Identifier:
                keyid:AB:6F:6A:36:EC:29:60:D4:D0:5F:3D:9D:CB:18:7B:9B:90:4E:A5:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:b9:9a:4b:77:66:3f:35:bc:8a:3e:de:d9:cb:18:c8:21:95:
         ee:09:44:82:d3:c5:6f:88:8f:3a:52:43:2f:47:f0:5d:4d:9c:
         64:ea:d6:d4:df:80:3a:4d:ce:39:02:b8:f8:11:fa:5b:30:79:
         07:d1:a5:83:36:8f:93:2c:ed:7e:14:60:87:a3:7e:7c:c7:96:
         77:a6:c2:99:14:22:49:64:b2:46:cb:41:5b:2d:c3:4e:75:87:
         a9:24:7e:02:ca:c2:77:05:7c:50:5e:5f:a4:bd:22:f7:c9:49:
         75:ac:8e:6a:17:0c:f0:71:5c:79:18:32:c3:8f:3e:3f:28:9b:
         cb:3a:51:89:c0:b4:c4:6c:7e:99:fe:00:66:1a:cc:ac:ce:83:
         ed:17:47:e4:0d:c0:e8:00:e4:c1:d8:ce:fa:ea:75:be:af:e9:
         36:ee:5f:4d:73:f5:94:66:a0:5e:61:cb:bc:41:a7:6b:30:f3:
         02:37:df:42:b1:a2:98:7d:10:f1:2e:fd:20:b3:a3:9b:05:0c:
         2c:32:ed:a6:b8:b2:cd:c8:65:84:29:e4:c5:9c:ac:85:fa:b2:
         4d:d1:41:1a:28:c8:56:fa:19:66:e5:5d:66:49:e6:0e:19:11:
         76:60:db:f1:db:3a:93:02:ba:c1:15:c3:78:7f:c2:2b:63:1f:
         b8:46:60:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 15:52:05 2025 by rpki-client