Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.mft
File:                     0gdchPUpyH3YX9Sv6k4JNDZq9Uo.mft (raw, json)
Hash identifier:          M9A7WJuoVH8p6gJmtgBTt9xs28RcWvr68peIyCD0Yhk=
Subject key identifier:   8A:A4:6D:77:28:F2:FC:15:B3:A3:DE:50:04:94:C6:5F:7B:1D:4B:3F
Authority key identifier: D2:07:5C:84:F5:29:C8:7D:D8:5F:D4:AF:EA:4E:09:34:36:6A:F5:4A
Certificate issuer:       /CN=d2075c84f529c87dd85fd4afea4e0934366af54a
Certificate serial:       0196439F7F008F0725927F61544F67EDB1B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.mft
Manifest number:          14F5
Signing time:             Thu 17 Apr 2025 12:00:48 +0000
Manifest this update:     Thu 17 Apr 2025 12:00:48 +0000
Manifest next update:     Fri 18 Apr 2025 12:00:48 +0000
Files and hashes:         1: 0gdchPUpyH3YX9Sv6k4JNDZq9Uo.crl (hash: z79PK4pyEltxfkmudlQMTtQphyO0za/hKuSxwHB2Ksg=)
                          2: 9e9KE2F8zCrYqsOR0ocKB3uWC0g.roa (hash: xWmWZ6mNV40OXaNhlTROFGFnywkkEouFvFZTD1JJjZc=)
                          3: MXxh0YHPMrk5arTCf3q6sfloz_s.roa (hash: N+z7kc9squE6rbdRMbjpnb079oubXEpLhtNwZjifRAU=)
                          4: PJMpQm9gwngY8P3_lMKl-7kl_Jo.roa (hash: kW2DqnWjgsO28lEW1wrqQlb2aOCM46/dPtOZpgqTEW0=)
                          5: q6I6gf2csqwaWg3RJJBU3r8Ww9s.roa (hash: TuJ+a/fTT9f6d+FkeMmzYXOZB23+5zFwPl6nA0Nxjxw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 12:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:43:9f:7f:00:8f:07:25:92:7f:61:54:4f:67:ed:b1:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2075c84f529c87dd85fd4afea4e0934366af54a
        Validity
            Not Before: Apr 17 12:00:48 2025 GMT
            Not After : Apr 18 12:00:48 2025 GMT
        Subject: CN=8aa46d7728f2fc15b3a3de500494c65f7b1d4b3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:5d:e1:df:6a:b7:77:9f:8f:6e:4f:b6:9c:0a:
                    68:25:2d:24:58:e5:0a:a1:0e:f7:18:09:aa:4b:cb:
                    51:84:2a:b3:6b:8c:de:d1:4c:9a:fa:f6:2a:3a:91:
                    97:2b:b1:85:cc:b2:27:fc:8b:94:1c:62:c1:ab:a7:
                    99:7c:2d:14:e4:0b:c5:9d:59:66:ca:cf:cf:c4:bb:
                    1c:e0:7e:9b:ac:0f:ff:a9:ad:d9:90:2e:00:51:f8:
                    24:44:ab:1d:25:f3:92:f1:95:b8:2b:94:7e:41:05:
                    31:64:3c:0b:02:f1:0f:52:7c:70:f6:95:9e:82:92:
                    c8:ce:7c:7a:18:29:6d:e4:79:3c:4a:17:ee:18:9d:
                    e2:33:a1:f9:e2:7a:12:9c:81:86:12:84:f8:e5:d8:
                    18:1e:d5:68:86:4b:6d:21:6a:85:cf:80:9e:d6:28:
                    a1:c2:2c:63:c6:bf:73:9c:c1:d3:36:e4:e0:6b:cb:
                    ef:a9:73:0f:25:22:1e:89:9d:8c:c8:9e:8e:f1:8e:
                    0e:06:9a:61:d2:6f:eb:f6:2a:25:ab:e5:ab:9a:cc:
                    8b:1f:e5:c1:3c:d9:a9:7a:54:59:4a:b3:d5:5b:a6:
                    65:22:e0:43:9f:c7:c2:43:d4:4f:c7:0e:c8:ff:aa:
                    51:d2:9d:85:40:57:c8:7c:3a:97:0f:48:53:9e:fe:
                    4c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:A4:6D:77:28:F2:FC:15:B3:A3:DE:50:04:94:C6:5F:7B:1D:4B:3F
            X509v3 Authority Key Identifier:
                keyid:D2:07:5C:84:F5:29:C8:7D:D8:5F:D4:AF:EA:4E:09:34:36:6A:F5:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:84:29:98:21:0a:9d:77:1d:6d:e4:fa:62:cf:4f:e5:e9:57:
         42:d6:dc:2b:c5:9a:e8:95:83:6d:d8:fe:95:c7:d5:d1:28:8d:
         f4:ed:14:0b:3c:06:2a:13:2b:6b:70:07:93:c2:75:b1:40:1d:
         c4:a0:8e:b8:9c:5c:84:25:93:47:47:39:41:ee:93:af:ef:31:
         31:e5:35:7d:5c:17:a1:a0:80:15:8b:ac:58:74:80:a2:41:7f:
         aa:bb:25:cf:f7:03:38:00:00:c7:b7:77:05:8b:07:f9:61:e9:
         9a:cf:9b:af:a0:01:76:3b:39:e4:bf:54:65:89:65:cc:44:2e:
         54:21:ba:e2:69:80:c6:bf:50:90:dd:a8:d9:86:c3:f8:77:71:
         47:d3:d6:5b:a3:af:67:bc:4b:b2:7b:16:9a:33:c5:c8:ae:aa:
         f0:92:b9:e8:ae:75:9c:12:e5:b4:b8:96:1f:72:dc:ee:96:77:
         5a:84:0b:c8:a2:5e:e2:b9:6e:ac:bd:b4:e0:44:3a:66:c1:ae:
         dc:66:30:97:6b:66:bf:47:0a:bd:29:2a:2c:6f:e3:d2:80:fe:
         96:cc:a4:ee:4e:19:b6:44:d7:47:0b:2e:db:17:22:12:f3:19:
         1a:e0:64:70:a1:00:73:7f:9f:64:b5:9c:c2:d9:3b:4d:86:52:
         c4:5b:b7:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:22:30 2025 by rpki-client