Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft
File:                     1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft (raw, json)
Hash identifier:          MlNPUk7NP8eaZRtGitbhplHwhtJogb6NIeiAkH6EDwc=
Subject key identifier:   89:28:DF:E7:9D:11:28:7D:2B:95:C0:66:80:D9:05:83:FA:9E:30:A0
Authority key identifier: FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B
Certificate issuer:       /CN=fad7100e77ed9119d66e2321bb6711d7e760982b
Certificate serial:       01961C23E74CC380554D4892514CB6767A52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft
Manifest number:          14E8
Signing time:             Wed 09 Apr 2025 20:00:37 +0000
Manifest this update:     Wed 09 Apr 2025 20:00:37 +0000
Manifest next update:     Thu 10 Apr 2025 20:00:37 +0000
Files and hashes:         1: 1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl (hash: O5t7xkGwgicJWqJ5sgwGbUZAOT8RcOxAhQLJS971XrM=)
                          2: 3fenuBwvB7wV3uASD-r_76wX2Qk.roa (hash: a5u8qqHNJ/g2qfpTOvTXK85cODmIHay31MoapuJ0tsI=)
                          3: NeK3VE5xIVumcURQvZORGSezPug.roa (hash: Kyuhso1DU/JY4Cd8KqltzS/UkVVtl7rIX1KuhxLgmkQ=)
                          4: SAShV7Cx-3cRFcPWPoHPU7seh9k.roa (hash: lzRGc/kfVkESt27Rk5Rm2MTThTLX4bNiPJvrX6OzG4s=)
                          5: TWLMxWYadUOjpfWSoRjdz4gkQVQ.roa (hash: eJJWCwgtvt1cLj2rlNHb1YuUwHOAuKtSsp+SGbWPUGI=)
                          6: U2YIuXAyUCZOsR4Cw5PSPdwaU0s.roa (hash: gWdVxjtR19wt31Bo3G5JO46Z63mY8LolhR8kTQQgD5Q=)
                          7: WvZhz4-xli7Jg3AjUEb09s8yIcg.roa (hash: nyDmjCwaWeBGV6O57JlcDsH1rd4TtVrk7nDHN+GYZDc=)
                          8: kSLVwGt_NyDYhkUM69fkyKqLKhE.roa (hash: 4uQpl4b7ipDKF9oMjr4f401/xIMAMkUuha8dHxAMb/k=)
                          9: mDRyfngxgYL9lEVKzyAkCQzkYsA.roa (hash: Md6fZymUQHzfcYJLAnblEk5P1I8XxKhta5Tqwb60pgA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 10 Apr 2025 16:11:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:1c:23:e7:4c:c3:80:55:4d:48:92:51:4c:b6:76:7a:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fad7100e77ed9119d66e2321bb6711d7e760982b
        Validity
            Not Before: Apr  9 20:00:37 2025 GMT
            Not After : Apr 10 20:00:37 2025 GMT
        Subject: CN=8928dfe79d11287d2b95c06680d90583fa9e30a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:55:0d:bb:db:17:fd:a3:b0:7f:ed:e7:70:e4:
                    73:10:6c:33:55:5f:32:1a:38:f7:23:3d:ae:15:95:
                    04:ed:fc:86:bc:71:1a:8f:a7:c0:90:c9:83:f3:c5:
                    30:fa:13:74:c9:2c:f2:a4:1c:7a:d8:d3:a2:14:76:
                    12:36:48:4b:a0:a9:0e:51:43:a3:1c:58:64:34:c5:
                    2e:3a:33:b6:4b:59:5b:fa:5a:a7:26:53:a3:bc:52:
                    2c:bd:4c:03:67:da:80:44:ae:df:96:c0:9f:d5:7c:
                    76:6d:80:64:29:aa:0b:a8:82:a0:fe:96:e0:09:2b:
                    8a:25:5f:b5:20:0a:ac:c2:6f:83:cd:45:48:4a:6a:
                    df:44:40:96:84:0c:d1:ba:38:25:12:10:54:e1:62:
                    89:2b:77:2b:f5:a5:5d:c9:25:b5:5a:38:c6:c9:67:
                    b8:69:24:4c:3f:b7:25:34:f7:26:0e:a7:89:46:e2:
                    a6:ee:4d:e5:35:1f:cd:19:26:4d:91:0c:24:e1:02:
                    f4:3c:16:9a:8f:1d:d6:64:c5:73:bd:91:9d:f7:94:
                    f7:7f:98:13:63:84:70:6c:50:b9:ac:dc:88:38:26:
                    40:16:c2:6e:d4:f0:bd:ec:ad:88:0c:a0:60:4a:45:
                    a2:e6:86:c5:c4:54:71:d0:89:ef:d5:3b:a5:81:ca:
                    dd:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:28:DF:E7:9D:11:28:7D:2B:95:C0:66:80:D9:05:83:FA:9E:30:A0
            X509v3 Authority Key Identifier:
                keyid:FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:05:58:e5:56:72:a9:c7:d7:d1:8e:11:6f:b5:f9:37:6e:ac:
         22:96:3a:8c:d8:0c:51:5c:cf:44:97:d1:ad:76:05:ba:22:9d:
         a1:90:f6:ed:bd:ec:96:60:39:5d:27:e0:9e:5c:39:65:4a:58:
         0a:ff:5b:5a:88:3c:49:67:04:ff:2d:d4:e7:ae:fd:4e:54:03:
         1f:f3:bc:6b:76:3e:d5:eb:99:75:2c:55:5b:7c:74:6a:91:1d:
         ad:d2:e2:e9:2a:60:c4:d7:a3:44:b0:23:55:bc:46:06:c2:e3:
         93:82:1b:fb:e9:45:1f:94:a6:99:6f:0d:ce:3e:70:70:5e:ae:
         d6:37:a3:87:e5:85:36:84:88:04:c2:f8:36:e1:7b:31:ea:27:
         cb:c6:af:ef:70:ec:9b:72:b3:d7:1f:de:44:21:1b:e1:e5:45:
         72:3f:74:ee:77:6c:b0:5c:f1:81:93:00:7a:b0:75:36:2a:81:
         bd:31:58:ea:81:b1:bc:ea:c1:51:c8:db:e1:f6:fa:07:94:9a:
         a9:83:6b:4e:f6:56:5d:ea:dc:e0:d7:e4:79:86:e0:49:b4:04:
         d0:e8:bd:99:3d:de:33:bc:44:57:2e:d4:ec:43:37:bd:e0:89:
         6c:8f:f8:c8:b7:c4:8b:b5:0e:01:76:5a:55:53:ac:da:75:da:
         4c:c3:1b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 00:24:38 2025 by rpki-client