Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.mft
File:                     vU5u3SbvGxbYSOmBMOb8RFCzJ1I.mft (raw, json)
Hash identifier:          XToa0AxbYRwnXR4BiT4ymeCNCc7JP8z4UodRBhr51PM=
Subject key identifier:   6A:79:EA:47:A1:B7:C1:E5:61:BA:25:1A:88:6F:8D:87:8C:98:91:E7
Authority key identifier: BD:4E:6E:DD:26:EF:1B:16:D8:48:E9:81:30:E6:FC:44:50:B3:27:52
Certificate issuer:       /CN=bd4e6edd26ef1b16d848e98130e6fc4450b32752
Certificate serial:       0196545BDA4AC770C6FBFE066CCDD2AF5B84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.mft
Manifest number:          1500
Signing time:             Sun 20 Apr 2025 18:00:27 +0000
Manifest this update:     Sun 20 Apr 2025 18:00:27 +0000
Manifest next update:     Mon 21 Apr 2025 18:00:27 +0000
Files and hashes:         1: 9VwiwUj_IGIUqg4ye8UxAOO6D9Y.roa (hash: NnxEfPp852isbiSy7sr8rgaQ1hDoY4s+bvfFdDqg9W8=)
                          2: S5K9sZSxJuICsnYh9DHsHhGYg9w.roa (hash: aaqMsXzi9m0Tt1MG99Oy7OnBJX3zKsmFv/eQfpWMk2I=)
                          3: v2m_c-UZBbM4tqAg4W1Obv9Rnn0.roa (hash: d3kQ/0S0OM1P8L+mkERLRrrDIpjPhVXyTCSgVSXYQO0=)
                          4: vU5u3SbvGxbYSOmBMOb8RFCzJ1I.crl (hash: r6hPWx1Ht5M7IWuwloO/mjEJbE1D/mmAl0hjjrR7/t8=)
                          5: vdFR4y9F44FSjYAGCMTNGAkn55s.roa (hash: kapPC5BZzOsMFj/r/PWqmKyQ2wL4stabpvweUd2gaq0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:54:5b:da:4a:c7:70:c6:fb:fe:06:6c:cd:d2:af:5b:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd4e6edd26ef1b16d848e98130e6fc4450b32752
        Validity
            Not Before: Apr 20 18:00:27 2025 GMT
            Not After : Apr 21 18:00:27 2025 GMT
        Subject: CN=6a79ea47a1b7c1e561ba251a886f8d878c9891e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f6:ec:38:20:4f:93:97:57:1b:0c:76:13:5c:
                    db:b1:e8:0b:54:20:77:6e:51:68:e8:88:27:8c:3a:
                    56:da:0f:6a:b6:16:62:27:68:8f:50:dc:f9:1b:18:
                    1c:3f:7a:a0:4e:9d:16:3e:43:01:85:c2:7e:0f:b5:
                    97:06:99:51:42:42:5b:4d:e3:ff:85:9e:aa:2f:8c:
                    d9:89:fa:52:ce:87:64:9b:6a:f2:c1:ba:e1:9e:a6:
                    b9:a7:ba:40:d4:c0:8b:b6:f5:7a:a5:71:11:bf:4f:
                    4f:4a:7b:c7:d2:bf:d9:00:9d:11:70:03:28:48:20:
                    44:07:df:e7:ab:68:83:d5:21:c9:59:da:7a:52:c0:
                    ba:00:06:06:78:fe:8b:54:ec:27:87:06:e7:6c:71:
                    38:50:cc:4b:27:3a:bc:73:89:c8:03:0d:28:b0:ca:
                    10:da:09:0d:de:f5:95:9f:d9:59:2d:63:47:bd:e5:
                    cd:7c:a7:d8:3c:bf:d8:4f:3d:5e:95:41:b7:51:b5:
                    78:50:d6:5f:af:e5:bf:be:ae:2b:a9:ff:d9:83:77:
                    0e:96:5d:ec:29:e5:14:83:47:f4:7b:2a:f3:44:81:
                    25:95:33:a1:fb:03:b4:20:d4:cd:55:47:43:9f:61:
                    34:38:ae:63:4e:77:55:d8:ed:96:60:b0:75:de:ce:
                    ec:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:79:EA:47:A1:B7:C1:E5:61:BA:25:1A:88:6F:8D:87:8C:98:91:E7
            X509v3 Authority Key Identifier:
                keyid:BD:4E:6E:DD:26:EF:1B:16:D8:48:E9:81:30:E6:FC:44:50:B3:27:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:1c:0b:1e:03:31:5b:02:69:6e:0d:78:63:73:f5:1b:3a:91:
         f3:99:7a:63:13:06:ee:18:75:62:26:14:96:d9:6c:8f:90:ba:
         4b:72:4a:b3:93:bf:c1:4f:ce:32:95:b5:73:cf:f4:6a:65:96:
         3a:4a:10:43:5e:41:0a:62:4d:f4:53:bc:e1:ec:74:a5:fe:bd:
         35:8b:f8:1e:10:cf:9a:80:be:b4:1d:9b:09:ae:a4:b6:83:e2:
         53:82:af:ca:61:d8:54:27:d7:b3:f2:8f:73:c1:8a:50:9c:be:
         4c:2a:be:b7:c4:a4:bb:9a:f8:8d:de:79:ef:78:ff:7b:c8:fa:
         2b:44:2f:ab:b5:2b:96:9e:87:03:c9:3c:24:22:59:a6:18:01:
         f9:5e:57:9e:2e:14:69:ca:94:10:1e:8c:d0:8a:d2:87:8d:d9:
         00:c4:83:1f:53:e8:09:52:a2:f5:10:28:af:3f:87:13:c4:ee:
         0b:8a:f5:a3:9d:de:74:41:a0:69:c6:cb:34:f9:65:f5:4c:0c:
         57:58:ce:84:55:46:04:f1:15:5e:91:5a:eb:eb:6e:37:35:46:
         e0:50:0e:25:27:88:8f:47:50:b6:44:ea:25:fd:fb:f0:d7:35:
         4e:c2:26:53:99:97:27:b9:75:43:2b:66:9f:bb:1f:24:be:5d:
         06:d5:b4:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:46:27 2025 by rpki-client