Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a28330-8ba0-4b88-a7ac-8bbf8bfc6d8e/1/V1jLEehCvK8TI2R_O-_u4vxvDiw.mft
File:                     V1jLEehCvK8TI2R_O-_u4vxvDiw.mft (raw, json)
Hash identifier:          +pXc7cu6HYQzWK3EIjBAL65rKOgen2inNuUWCRzh+Qs=
Subject key identifier:   16:EC:E7:61:CF:3C:A6:82:CA:AB:C4:76:C1:F9:2F:84:6A:DC:30:BF
Authority key identifier: 57:58:CB:11:E8:42:BC:AF:13:23:64:7F:3B:EF:EE:E2:FC:6F:0E:2C
Certificate issuer:       /CN=5758cb11e842bcaf1323647f3befeee2fc6f0e2c
Certificate serial:       0196556E94C4A504C50DB2F440078A983BAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V1jLEehCvK8TI2R_O-_u4vxvDiw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/a28330-8ba0-4b88-a7ac-8bbf8bfc6d8e/1/V1jLEehCvK8TI2R_O-_u4vxvDiw.mft
Manifest number:          03F4
Signing time:             Sun 20 Apr 2025 23:00:32 +0000
Manifest this update:     Sun 20 Apr 2025 23:00:32 +0000
Manifest next update:     Mon 21 Apr 2025 23:00:32 +0000
Files and hashes:         1: DHtZpFn4GXCzNvsV-fQDkkv0E3Q.roa (hash: mIWQtuRUYMAIMNWTk2R94Vc9M/vD3qRf+T1I/Wud7SU=)
                          2: GuwUdDFQjBufx1Rw2XvyCI5KCLY.roa (hash: gUEwC/edl/xfPxryFYxMx6Htdh7hvRtXE9Fd/Bp9SoY=)
                          3: V1jLEehCvK8TI2R_O-_u4vxvDiw.crl (hash: B+EyTzOP8fu0bN1DmvoedO1+9TUxZ2TUPQp+DynnHiE=)
                          4: mdhPoB9Xi_SvHQW0Npo5tBiYYRw.roa (hash: N1Pm29zQ5qNztRCN8wb+WCQ/lCg8dOrqcVoxO2AK6Sc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/a28330-8ba0-4b88-a7ac-8bbf8bfc6d8e/1/V1jLEehCvK8TI2R_O-_u4vxvDiw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/a28330-8ba0-4b88-a7ac-8bbf8bfc6d8e/1/V1jLEehCvK8TI2R_O-_u4vxvDiw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V1jLEehCvK8TI2R_O-_u4vxvDiw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 23:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:55:6e:94:c4:a5:04:c5:0d:b2:f4:40:07:8a:98:3b:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5758cb11e842bcaf1323647f3befeee2fc6f0e2c
        Validity
            Not Before: Apr 20 23:00:32 2025 GMT
            Not After : Apr 21 23:00:32 2025 GMT
        Subject: CN=16ece761cf3ca682caabc476c1f92f846adc30bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:0e:4a:43:e9:39:b0:31:9f:06:28:d8:25:7a:
                    e1:72:8e:9d:db:2a:cd:30:cf:4d:14:d4:88:e4:c2:
                    99:a3:37:a8:4a:2a:f7:c7:a5:81:d9:2a:75:f0:4f:
                    01:ce:03:b4:3c:6a:2a:9c:ab:94:d1:12:7c:6f:00:
                    21:07:d6:9a:25:11:c0:53:c6:47:b6:98:c0:e8:40:
                    f3:1e:96:f9:8d:75:d1:60:cf:87:e7:15:fb:f7:25:
                    94:d7:d5:17:71:4d:95:d0:78:f6:b8:ae:c3:5d:39:
                    f5:94:38:f0:6f:81:00:40:94:ff:14:63:ad:53:e9:
                    07:2b:1b:7b:fd:32:27:7a:9d:17:21:5b:3d:ee:bf:
                    5b:ec:3e:9f:ec:5f:6c:67:18:85:fc:05:2e:8d:b6:
                    9d:08:37:a6:bf:12:fe:c3:9a:b3:02:b0:61:9b:9d:
                    c7:71:5b:42:75:12:cb:d0:d0:64:21:3f:b8:3b:0a:
                    2e:52:2e:d4:82:58:f0:c1:d3:62:35:05:f1:35:74:
                    24:11:65:52:7c:dc:13:44:40:50:4f:a8:f7:e4:04:
                    ec:8d:6f:42:07:99:fc:4f:a7:61:24:19:cc:9b:73:
                    eb:67:54:01:77:3c:eb:da:cf:12:61:dd:91:43:14:
                    91:ab:06:81:f3:90:2f:f4:76:4f:c3:7a:9b:56:00:
                    0d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:EC:E7:61:CF:3C:A6:82:CA:AB:C4:76:C1:F9:2F:84:6A:DC:30:BF
            X509v3 Authority Key Identifier:
                keyid:57:58:CB:11:E8:42:BC:AF:13:23:64:7F:3B:EF:EE:E2:FC:6F:0E:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1jLEehCvK8TI2R_O-_u4vxvDiw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a28330-8ba0-4b88-a7ac-8bbf8bfc6d8e/1/V1jLEehCvK8TI2R_O-_u4vxvDiw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a28330-8ba0-4b88-a7ac-8bbf8bfc6d8e/1/V1jLEehCvK8TI2R_O-_u4vxvDiw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:c2:42:fc:13:4e:57:2f:96:d0:9f:62:d5:1b:21:77:0e:02:
         a9:a7:d5:94:09:36:de:92:62:f5:d5:55:77:62:f8:2b:4d:92:
         ca:ff:d4:26:7a:fa:9e:3e:09:4f:6f:b4:98:75:3b:46:7f:5f:
         bc:df:91:09:26:00:ef:70:cd:a3:8f:e8:25:53:36:85:84:9e:
         b4:68:8c:b6:00:f8:60:8a:d4:31:9e:47:39:7e:53:1d:3f:25:
         12:57:0f:f3:b2:f3:24:c7:55:bb:21:ea:61:dc:4b:43:26:cb:
         9e:f4:c8:ae:b1:0b:f6:e1:25:3a:e3:3b:d7:ae:ea:bc:36:a9:
         f4:bb:d5:99:2a:ef:34:c8:78:81:a7:f9:53:9b:79:5e:16:40:
         75:30:38:3c:a9:ad:2c:48:fc:4d:ed:01:3e:93:18:78:23:27:
         fe:42:4b:3f:45:72:79:b3:67:f3:7b:80:97:0c:9d:f6:e0:4d:
         71:a2:3f:d2:df:c7:be:3b:87:ca:1e:bd:2c:ba:c9:b2:d7:cf:
         76:86:71:d6:a7:8c:34:c1:e7:c9:cf:a0:11:24:ee:15:50:90:
         11:a1:f5:87:48:a7:34:53:6b:72:69:1a:6e:41:17:b2:0d:f9:
         b0:69:bf:03:7f:b8:48:6f:1d:ff:e1:cc:23:f9:02:a8:89:60:
         62:87:74:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:43:36 2025 by rpki-client