Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.mft
File:                     j0ZpIWogeMsCQjH0Yy6rTafuS8E.mft (raw, json)
Hash identifier:          F6JscJs6V88oC5A9E8CtcGAj7WWFvLlcP/dGNYRtZWM=
Subject key identifier:   AD:C4:AC:9E:54:4B:9C:27:4A:FF:92:B3:F6:16:6D:86:76:9D:B7:F3
Authority key identifier: 8F:46:69:21:6A:20:78:CB:02:42:31:F4:63:2E:AB:4D:A7:EE:4B:C1
Certificate issuer:       /CN=8f4669216a2078cb024231f4632eab4da7ee4bc1
Certificate serial:       01963F1D9F06BE3BDA41DFE34FAE91BA13F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j0ZpIWogeMsCQjH0Yy6rTafuS8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.mft
Manifest number:          14FD
Signing time:             Wed 16 Apr 2025 15:00:27 +0000
Manifest this update:     Wed 16 Apr 2025 15:00:27 +0000
Manifest next update:     Thu 17 Apr 2025 15:00:27 +0000
Files and hashes:         1: 6XrFWNa1C0R0sDYBaWkEAGDO1jA.roa (hash: x/McLjYuN68G+ok93frZNMwAwTarNWM5GuHdXugF2/o=)
                          2: M9easQkcHSQPdpi5ZGfGU4pWoUc.roa (hash: 2qkDycWdk7MJuJuaUzoNpBWkEOF+xOcflpW8m5S6jUM=)
                          3: i85p5aRbMq_hdM6cSIQdk4ygpwo.roa (hash: x1h1J7ft54CHUC6kjTSlGgx0DSnPNMMrSgheR8JAqcM=)
                          4: j0ZpIWogeMsCQjH0Yy6rTafuS8E.crl (hash: 6L3vicz7VvDNEJnDe5pPOrTu0L+rAerNJNeqHle2D00=)
                          5: n9-usLo6aF2wwW6_ywj-9Wvh4ac.roa (hash: 1CoA6tKUFjr40QImyeSQY7rXCRf9OZT/UPmAih0cirQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j0ZpIWogeMsCQjH0Yy6rTafuS8E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 13:16:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3f:1d:9f:06:be:3b:da:41:df:e3:4f:ae:91:ba:13:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f4669216a2078cb024231f4632eab4da7ee4bc1
        Validity
            Not Before: Apr 16 15:00:27 2025 GMT
            Not After : Apr 17 15:00:27 2025 GMT
        Subject: CN=adc4ac9e544b9c274aff92b3f6166d86769db7f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3d:1e:a7:41:64:a2:23:a9:1d:3d:c5:47:17:
                    62:da:81:15:60:d4:9e:b6:34:aa:36:ac:64:c5:4d:
                    00:c9:5b:7d:d1:54:eb:c2:b9:c7:1d:04:79:49:27:
                    47:ca:13:55:68:50:a2:ee:dd:56:6b:66:cb:13:26:
                    39:dd:e9:0d:11:d7:38:db:67:74:d8:f5:ff:32:d8:
                    74:e7:6e:6b:cd:9d:f0:3a:48:da:fb:5e:ad:70:0d:
                    a7:44:f9:66:ed:bb:fc:f1:09:16:bd:ab:74:62:95:
                    42:07:09:4d:0b:12:12:b8:08:e9:94:02:4c:d7:50:
                    be:31:dc:b9:4e:02:1c:63:e3:c2:eb:17:6a:9d:24:
                    7d:09:0d:ff:6e:5a:b5:05:85:ec:85:b0:35:61:33:
                    72:76:e3:0e:44:d0:14:55:97:e2:d8:3b:cc:d8:aa:
                    8e:32:65:18:c9:6b:61:95:00:9e:0b:27:44:76:2a:
                    02:b5:60:ce:f4:e6:5f:2e:72:ff:3e:9e:88:19:b4:
                    82:e1:27:55:74:2f:93:1b:45:94:11:5b:22:8b:8f:
                    03:55:76:ae:f2:df:c4:25:91:3e:24:9b:a4:07:8e:
                    78:4c:f9:99:70:80:de:c5:d3:27:09:02:1e:73:3f:
                    a1:78:99:c0:67:76:bb:ae:3f:60:70:fe:dc:91:90:
                    31:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:C4:AC:9E:54:4B:9C:27:4A:FF:92:B3:F6:16:6D:86:76:9D:B7:F3
            X509v3 Authority Key Identifier:
                keyid:8F:46:69:21:6A:20:78:CB:02:42:31:F4:63:2E:AB:4D:A7:EE:4B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0ZpIWogeMsCQjH0Yy6rTafuS8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:a8:2d:3c:55:b2:05:00:2a:03:06:0d:ca:d3:fb:62:22:92:
         9c:bb:df:9d:bb:db:75:59:c4:bf:10:4d:e2:4f:99:1a:c2:e5:
         dd:ba:86:25:74:61:f1:7c:b5:db:91:91:e8:0d:a9:80:66:10:
         a9:6d:b3:a9:4b:dd:69:9b:ee:56:49:02:25:50:f4:a5:d5:61:
         86:9d:6d:d6:ae:ba:31:c8:df:10:2d:6c:78:86:25:f4:8b:64:
         5e:f0:2d:30:c6:17:96:47:1b:e8:9b:42:79:b1:7a:97:4b:7f:
         f0:5e:65:d7:44:2f:22:d7:b6:1d:e1:2f:1b:f8:40:95:65:ad:
         4d:9a:db:9d:4a:eb:72:fa:0b:5e:c1:62:eb:ca:94:8c:8c:76:
         53:f8:cf:fa:f7:28:97:1f:74:4b:0f:8d:db:47:b1:73:cc:a6:
         0f:37:22:71:04:23:1f:12:a1:19:a2:cf:4f:8c:7a:72:69:cc:
         3b:f3:b1:e7:d7:35:2c:f4:a3:20:05:7b:d9:21:25:0c:ba:df:
         51:47:3a:d9:a3:fa:69:bc:eb:cf:c0:9b:1b:44:9c:18:24:0d:
         2a:b2:b4:42:35:90:d0:3d:5c:5a:83:00:36:60:ec:ef:a8:7a:
         45:6c:c2:89:35:6a:f2:2a:fd:a1:32:13:fd:4f:dc:82:8b:60:
         27:23:fb:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 23:29:29 2025 by rpki-client