Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft
File:                     1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft (raw, json)
Hash identifier:          Powen8MQTkNk9Juvr43OlRT8wVsRKcvE7P+7sOPWRhY=
Subject key identifier:   57:96:99:73:1A:B9:3E:45:9D:6E:08:E7:D9:AD:DA:0E:BB:2B:E9:4D
Authority key identifier: F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E
Certificate issuer:       /CN=f8a966664ec96edbd12e8e82e940bfb9faec105e
Certificate serial:       019648C5871B9F43F2C933CC082F3A920D62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft
Manifest number:          14FD
Signing time:             Fri 18 Apr 2025 12:00:26 +0000
Manifest this update:     Fri 18 Apr 2025 12:00:26 +0000
Manifest next update:     Sat 19 Apr 2025 12:00:26 +0000
Files and hashes:         1: 0-pROOQXTsOCMh82qmUXoNFs4FE.roa (hash: 0vaU6zj0/sOrHvzQbJoSj9Sg3MRWFQ3zNRXZe2vIoxM=)
                          2: 1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl (hash: +VaYnRPt2yFobmoSkz6TVxBoszWWVhLrSVhl+vAKs0Y=)
                          3: 2Cx8NesV2FgXdhnelF2G7i5Bybw.roa (hash: 8z2f0ixyt/V0YgUez4ATct6QO89AWHzLa+ZNoGbwCzI=)
                          4: 8YGP0hkU08CaSTjLusnYfNoY0P4.roa (hash: jWZuJOzMx9s5Np/gPv2mn1+ybL0gZ2yjh5jQEUREZ9U=)
                          5: MQiGNWbAlQR27bMbQEHKZB--EhI.roa (hash: AiFihDDBAGIMVUfPOtlJJbKjEh0jiKhW/hNN55RabQ0=)
                          6: g4GRCAwu2q3EL-X1WL9RVrJbAQI.roa (hash: slCTgIDY8YfOpbaBmeIbIqftrjDIQWNh6XUk0mKIj7o=)
                          7: i6OZnwSC6Nlsenhf0tdXitkE5-w.roa (hash: W6vwLHJCt+ThAPP53KTcgutvWVLILu8jqOoeNXpZV58=)
                          8: nFpp1sOKP4UepGIUoHswLN2IbRI.roa (hash: Ttm+Uf2laDwHJ/wFsX6jTAwI0vmckT+FtwvtYdaFusE=)
                          9: vYCLX9lBA7ZtzSrFDp94A_tt6ys.roa (hash: YmvWA4cqMB8VZpWwYryqd/wK/81/N7wIyQFXaVwROW4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:48:c5:87:1b:9f:43:f2:c9:33:cc:08:2f:3a:92:0d:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8a966664ec96edbd12e8e82e940bfb9faec105e
        Validity
            Not Before: Apr 18 12:00:26 2025 GMT
            Not After : Apr 19 12:00:26 2025 GMT
        Subject: CN=579699731ab93e459d6e08e7d9adda0ebb2be94d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:3d:34:af:31:c0:d9:70:e6:0a:ea:4f:32:28:
                    c8:36:f6:10:1f:d2:ed:8a:d2:6a:63:3e:94:cf:29:
                    6f:a3:97:2c:46:9c:70:7a:de:82:eb:5c:72:95:de:
                    70:0a:e6:9b:ad:ec:b0:0d:41:db:11:c5:86:63:f5:
                    6c:d3:d7:cc:35:56:b2:56:48:e7:2c:32:c3:6e:84:
                    a2:b7:d5:06:36:9e:a6:90:41:da:44:f7:96:d5:03:
                    79:d1:a5:77:eb:93:65:b0:20:5f:fe:bc:e6:2c:f8:
                    15:2d:dd:43:ea:32:db:c9:6b:8d:be:84:97:f8:b8:
                    b5:f5:82:72:fb:a5:57:7c:88:fa:24:cc:f1:5a:ba:
                    f5:98:1d:c7:ae:d3:fb:af:9d:6f:fa:ba:6b:b5:20:
                    5c:e0:74:53:e8:3e:a7:5e:e8:75:49:d0:ab:c6:99:
                    d9:fa:01:24:23:d4:58:f8:bf:df:49:e6:4c:69:54:
                    5f:29:b6:bb:40:27:1a:1a:88:5d:b9:ba:a5:59:86:
                    e7:43:10:f6:da:0d:0a:9f:70:95:7d:40:ff:f2:ed:
                    8e:34:45:ac:84:c7:92:83:99:d7:a9:ee:3c:09:0d:
                    92:2a:17:c8:21:68:62:e3:36:6e:75:61:92:57:26:
                    57:5d:c8:ea:5b:61:49:68:da:d0:c1:d2:41:eb:05:
                    bc:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:96:99:73:1A:B9:3E:45:9D:6E:08:E7:D9:AD:DA:0E:BB:2B:E9:4D
            X509v3 Authority Key Identifier:
                keyid:F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:88:d1:f8:42:10:a9:fe:44:98:0e:25:15:a4:cc:50:95:05:
         18:24:78:bd:36:8c:43:69:f3:17:44:37:05:5c:26:ca:d8:49:
         b5:fc:5a:09:8e:5d:60:9a:1f:18:02:f6:59:3e:28:1f:b8:4f:
         44:3a:d2:e2:11:43:10:32:d2:e2:13:f9:a8:8c:07:6b:ec:ff:
         c3:6c:fa:93:18:58:7d:b7:ea:50:98:fd:4d:0c:ce:2d:1d:0a:
         b6:51:47:da:59:09:97:e7:3b:44:9b:30:ab:22:4f:9f:3e:c4:
         70:8e:ab:71:b0:43:65:2e:ac:db:3f:2f:87:b6:a0:58:f3:39:
         b7:33:76:eb:86:30:8f:4b:f8:4a:79:84:de:bb:ea:ad:63:54:
         14:ce:c6:37:f3:a0:0f:ae:0d:5a:c8:7f:12:9e:83:60:f3:d3:
         7b:ca:52:9d:20:1e:c1:78:82:8e:51:a3:ad:52:d2:e0:f5:20:
         ab:d1:81:c1:22:90:45:01:14:f2:e2:9d:1e:fe:95:d3:1f:81:
         6a:68:16:33:33:e9:a0:b6:de:71:44:d0:10:98:59:d2:32:55:
         84:7c:31:e0:a5:a7:48:36:11:41:3f:a1:c6:8d:e4:7e:f9:6c:
         2c:2f:5a:f3:12:a3:b2:99:d5:9f:1c:60:66:80:2a:d8:d6:ab:
         d3:18:44:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 20:38:48 2025 by rpki-client