Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft
File:                     kfX87b24TdUvxncNfM_T_GaE-kE.mft (raw, json)
Hash identifier:          OSbsUmf3nk/COFfk3gskak8ylc153yJBxhrJVbTknFo=
Subject key identifier:   7F:06:B6:6E:73:D0:8B:79:62:4F:3B:AC:1C:FF:46:7D:1F:F3:2B:D8
Authority key identifier: 91:F5:FC:ED:BD:B8:4D:D5:2F:C6:77:0D:7C:CF:D3:FC:66:84:FA:41
Certificate issuer:       /CN=91f5fcedbdb84dd52fc6770d7ccfd3fc6684fa41
Certificate serial:       01962A84E9447B8C4A941F4A3E3CE48A5CA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft
Manifest number:          14EF
Signing time:             Sat 12 Apr 2025 15:01:15 +0000
Manifest this update:     Sat 12 Apr 2025 15:01:15 +0000
Manifest next update:     Sun 13 Apr 2025 15:01:15 +0000
Files and hashes:         1: 6UpEJlRsXOn9vaGmBJWrZdfalwA.roa (hash: HSwxSSz5lFpaFRsJuAqgaQ8EsTFkTI/T+FmwfdtjYaA=)
                          2: 9tPvRIgWOFQGF5ALiDiBtpjalf0.roa (hash: CNi9LKlhqfclz9Oir048bs7o3/W9+fUSyftDkxngReE=)
                          3: JvOQdUjkCtx4pMZ63YDUDSKRif8.roa (hash: lpSKgZ5ZudI2jyQ9YWWPgdYiIoklrO/1U/orK0nz9yw=)
                          4: kfX87b24TdUvxncNfM_T_GaE-kE.crl (hash: 1iyf9yRgow5Mj56rki6KVD+6cd0tTp96F0U7taKhEi0=)
                          5: lKDuxfpv6g9ZDhVaa38VKaYZKKg.roa (hash: OVK0az1AcO1NBXsdKgGXvtFiE3weIknB+sCCAuqYuGw=)
                          6: xXN1JERl6SmTU8LGAK6YjCsE_8g.roa (hash: UJ/2eCVna1OAdfj1e6cD3/kAVB2y1kYmD/HxfsrIilw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 13 Apr 2025 14:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2a:84:e9:44:7b:8c:4a:94:1f:4a:3e:3c:e4:8a:5c:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91f5fcedbdb84dd52fc6770d7ccfd3fc6684fa41
        Validity
            Not Before: Apr 12 15:01:15 2025 GMT
            Not After : Apr 13 15:01:15 2025 GMT
        Subject: CN=7f06b66e73d08b79624f3bac1cff467d1ff32bd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:07:78:b8:70:b2:e2:92:b2:f1:b0:74:0a:bb:
                    8b:28:b4:cd:d8:0f:9d:d5:7a:53:02:77:ed:b6:46:
                    d4:90:ac:7a:5d:b7:f2:86:5f:fd:54:ca:80:72:10:
                    4b:04:db:e1:11:ac:78:c3:a7:1d:58:96:35:23:ca:
                    5d:db:00:10:38:27:e7:b5:ba:6f:d7:76:93:a2:bd:
                    13:9a:42:31:c2:82:eb:23:bd:76:f6:91:02:66:2d:
                    65:db:b9:c0:61:38:c4:74:ac:d1:94:b5:46:b4:ac:
                    37:56:81:5c:53:ca:20:f9:eb:a2:ec:4c:03:6b:4a:
                    12:43:97:a3:14:50:b4:91:ce:89:a9:8b:5d:26:a8:
                    14:e6:07:60:88:29:c7:ae:e2:bf:aa:57:64:0d:14:
                    77:81:62:69:62:13:b5:d0:ec:af:f1:59:0c:19:6b:
                    49:4b:56:45:b2:a9:20:60:8c:12:45:71:1c:3a:34:
                    fc:cc:05:cb:4f:6e:e1:eb:df:22:5f:6e:44:6d:c5:
                    21:44:a3:b9:28:56:c6:43:ea:4b:b4:f3:e4:21:3b:
                    cb:51:df:af:42:e4:87:53:85:82:af:e5:dc:77:81:
                    0b:96:1f:38:52:ef:a9:a5:29:9a:c0:ec:b7:a3:03:
                    df:00:24:38:81:58:52:93:da:1d:d5:67:49:cd:a0:
                    90:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:06:B6:6E:73:D0:8B:79:62:4F:3B:AC:1C:FF:46:7D:1F:F3:2B:D8
            X509v3 Authority Key Identifier:
                keyid:91:F5:FC:ED:BD:B8:4D:D5:2F:C6:77:0D:7C:CF:D3:FC:66:84:FA:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:72:7e:b3:69:37:c5:5a:1f:ee:ec:28:f1:d3:23:21:ff:78:
         cd:45:b9:5e:1b:14:26:7c:64:c2:e0:ac:56:84:42:3d:4d:b2:
         65:fd:0f:b3:c7:26:08:e9:37:10:e1:1c:bf:ed:05:88:29:52:
         37:81:d8:09:69:4f:16:84:19:3c:30:bf:66:ef:d6:85:34:b6:
         a8:69:48:5f:d3:4a:e8:af:cb:f0:98:76:dc:68:e6:83:c0:fc:
         23:93:8e:73:27:2a:95:2b:48:2e:07:16:f4:86:d2:fd:35:c4:
         a9:de:60:40:5f:db:81:03:8b:7e:cb:df:64:d1:4e:8c:37:7b:
         7c:30:07:b0:98:65:f8:4b:40:ae:cc:f3:02:02:b0:41:71:1a:
         61:25:fa:44:ec:ba:f5:c2:d3:a1:ec:ef:68:24:a0:91:b9:3a:
         46:37:d5:3f:1b:1b:6b:1c:12:f8:15:f8:92:71:74:2f:99:ca:
         38:17:81:b6:11:ea:30:59:90:2d:d8:ad:2a:6b:9a:e3:9f:53:
         d8:7d:f1:40:77:74:92:20:7f:c2:10:32:77:25:16:32:00:15:
         f2:48:8c:17:c4:55:f0:cc:6d:88:d4:47:4b:5b:93:57:b2:6c:
         70:5d:bf:d0:83:88:71:c2:72:de:9e:d2:81:ed:66:7c:91:b8:
         20:c5:0f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 20:45:09 2025 by rpki-client