Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.mft
File:                     dixgr01zclhFzq8Le1hed1cGaWU.mft (raw, json)
Hash identifier:          y7fUpt/LPnf8jNkd8mKW1U1CQ7oKD3GphtNhoQFOM8g=
Subject key identifier:   BA:71:07:78:65:0A:24:81:B2:BA:58:77:13:67:54:25:36:01:51:4A
Authority key identifier: 76:2C:60:AF:4D:73:72:58:45:CE:AF:0B:7B:58:5E:77:57:06:69:65
Certificate issuer:       /CN=762c60af4d73725845ceaf0b7b585e7757066965
Certificate serial:       019652A479211E7D9AD2D599308229221F84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dixgr01zclhFzq8Le1hed1cGaWU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.mft
Manifest number:          14FC
Signing time:             Sun 20 Apr 2025 10:00:32 +0000
Manifest this update:     Sun 20 Apr 2025 10:00:32 +0000
Manifest next update:     Mon 21 Apr 2025 10:00:32 +0000
Files and hashes:         1: dixgr01zclhFzq8Le1hed1cGaWU.crl (hash: E5J+Zm377JaxlpyjvURtZ8J3Xcn75BlFl54jlgyq0+g=)
                          2: dldB0wg3sOKFlgEWz6LNxn-RMtU.roa (hash: A/mZd0VT9lvf5tIKF1PGUACWDIq15nwU2xObWbHt5Q0=)
                          3: fGaPq4YA6maqB6noR_KA3CoM-Rc.roa (hash: INJZ5oK620NZUOOr9nOKGmnHUYB9fAHODj6emd7n2KE=)
                          4: fVcVxVJ7p62rticmypgxz96e8JQ.roa (hash: 0G0V21w8vjbyE9Yv5tuFynWy+aBCDfEtQfkWhN6p7OY=)
                          5: muQqhNcFqaAhliY1Xe6uhTF-w60.roa (hash: 5ol3Dy/oyYKpD5jnMaSN9uea7FQti15q53TRbPs48Kg=)
                          6: z1dSMhrf6i9m8VW8FnaeYoIuN2Y.roa (hash: s3koYJ0MAG3XeNvRc7EhqxMmZm+M8QlbPEJh3Wi8tyU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dixgr01zclhFzq8Le1hed1cGaWU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 10:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:52:a4:79:21:1e:7d:9a:d2:d5:99:30:82:29:22:1f:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=762c60af4d73725845ceaf0b7b585e7757066965
        Validity
            Not Before: Apr 20 10:00:32 2025 GMT
            Not After : Apr 21 10:00:32 2025 GMT
        Subject: CN=ba710778650a2481b2ba5877136754253601514a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:61:7d:09:2b:b9:aa:01:d5:a4:c2:34:69:2b:
                    61:e2:81:ef:f7:6d:e7:b4:eb:7e:b5:63:0f:d6:24:
                    98:79:57:39:85:dd:79:32:b4:37:f4:65:74:a7:2f:
                    f0:b2:6b:0c:d1:a2:f7:4d:dd:f5:95:b7:8d:1a:98:
                    58:93:15:3d:0f:69:83:3b:8f:cb:1b:2b:a4:7a:f4:
                    7b:ac:57:1a:70:04:fd:6c:64:57:0f:9f:1c:b3:95:
                    b7:3c:3f:95:fc:e8:08:30:09:65:66:54:f2:5a:e2:
                    63:3c:c5:bb:4d:22:b7:9d:c4:bf:92:a8:ac:90:79:
                    60:81:c2:08:1c:84:8c:7a:a2:37:47:ee:95:d4:1f:
                    32:47:52:e5:f9:fb:1c:7e:5e:23:34:98:af:c5:51:
                    bb:ac:47:5d:2e:f5:20:cf:94:54:f7:ce:17:fd:b6:
                    2a:f9:b5:c3:44:d8:5f:4a:f9:20:d9:87:27:80:c8:
                    9d:56:bb:89:ac:7c:19:43:dd:03:0b:3e:d0:8c:8c:
                    cb:25:9e:d7:48:f7:98:53:76:9b:cc:ba:2c:a1:9f:
                    6c:1b:76:d1:e4:e1:29:b2:71:ae:6f:14:ab:49:62:
                    f2:27:93:b5:0b:5a:8f:f4:a6:f0:16:2c:c8:82:36:
                    e1:3a:8c:64:7b:d7:3b:60:5e:ba:3b:ab:2f:5f:c4:
                    be:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:71:07:78:65:0A:24:81:B2:BA:58:77:13:67:54:25:36:01:51:4A
            X509v3 Authority Key Identifier:
                keyid:76:2C:60:AF:4D:73:72:58:45:CE:AF:0B:7B:58:5E:77:57:06:69:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dixgr01zclhFzq8Le1hed1cGaWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:fb:f6:da:19:b1:61:56:cf:66:8f:4a:ee:fb:b1:52:77:01:
         a6:d0:4a:68:90:03:4b:0f:7c:98:1a:c0:a7:73:9a:8f:65:ad:
         49:b3:dd:f9:9e:b7:76:be:6b:c4:32:b1:da:e4:1c:55:e7:73:
         4f:52:7c:db:c1:78:53:d7:53:cf:eb:68:c1:99:1f:68:e8:72:
         a4:ff:ad:e8:d6:34:f2:a2:0e:ae:52:c7:bd:78:9b:a8:d5:75:
         78:04:ac:65:54:fa:4c:de:66:ba:46:66:fb:19:00:f5:3a:7a:
         18:7c:66:a2:57:e1:83:0b:5c:69:4e:b4:8f:ae:26:60:17:98:
         21:19:ef:f0:f7:9f:01:4c:6a:27:86:74:00:9a:18:a8:49:92:
         32:1a:e2:2b:9b:42:44:0a:b9:47:eb:ca:90:ba:77:a3:43:5b:
         30:67:7c:1c:88:6f:9d:1e:33:04:2b:3c:d1:2c:36:5e:4a:b8:
         c9:ce:1d:db:39:40:df:3f:4c:76:31:fa:68:d0:82:7e:8f:cd:
         da:32:ff:8c:9e:89:e7:ef:9f:c2:f7:e9:59:0a:50:30:af:2c:
         fa:1f:85:72:99:92:50:0d:9b:a5:b1:4d:da:48:49:af:6e:4f:
         9a:fc:04:17:83:4f:6c:61:74:be:8b:97:a8:35:e2:86:27:56:
         53:77:41:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:35:05 2025 by rpki-client