Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.mft
File:                     4awDIrPqtlcuzioKxavxZKW7_yA.mft (raw, json)
Hash identifier:          MnwbYxvVHL/U6wzUoQOpCqivAGcNapKU62Vx9Fw9PRU=
Subject key identifier:   B2:68:1D:09:CD:D7:95:2B:EF:3A:7A:55:67:18:BF:73:3C:AC:0F:14
Authority key identifier: E1:AC:03:22:B3:EA:B6:57:2E:CE:2A:0A:C5:AB:F1:64:A5:BB:FF:20
Certificate issuer:       /CN=e1ac0322b3eab6572ece2a0ac5abf164a5bbff20
Certificate serial:       01961ADA91D26A1C1BA3FBB07E566BCBD284
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.mft
Manifest number:          14E7
Signing time:             Wed 09 Apr 2025 14:00:53 +0000
Manifest this update:     Wed 09 Apr 2025 14:00:53 +0000
Manifest next update:     Thu 10 Apr 2025 14:00:53 +0000
Files and hashes:         1: 4awDIrPqtlcuzioKxavxZKW7_yA.crl (hash: LpKfe338FlvaEERBKX+BI74JpH0tUYVnIpWpzakS2KY=)
                          2: 6L9DAlbkXK81Q7l3f78qPgHOMdg.roa (hash: H7lXA9IHNO8CGxsceOfFah+3Pwu6dBzOzorUprp44zU=)
                          3: AoQHR-c0TNu8hCvrBSny9rtvc-s.roa (hash: OjMzYAMFYdPVuu7HxYZKXpI6mzGVW1BBR3UyiRLx1pA=)
                          4: OVTjGADJ7YYJwQ0oJOwTN2X0vSY.roa (hash: qsBTTkXpQxhgbXJV5zUDTdGyL3Kcpnnbr12OpzsF9V0=)
                          5: Tuxvba9WYfbnEvHd3kzqapBEZ_Y.roa (hash: k++irbF5tx+uarYSpIOQsyD8NQHcKQnnHY3y6c8vNEg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 10 Apr 2025 14:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:1a:da:91:d2:6a:1c:1b:a3:fb:b0:7e:56:6b:cb:d2:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1ac0322b3eab6572ece2a0ac5abf164a5bbff20
        Validity
            Not Before: Apr  9 14:00:53 2025 GMT
            Not After : Apr 10 14:00:53 2025 GMT
        Subject: CN=b2681d09cdd7952bef3a7a556718bf733cac0f14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:35:9e:5d:78:c3:f4:6f:e1:91:be:37:7e:b9:
                    7e:c9:b1:ee:65:1a:87:ca:e2:d7:d4:cb:da:cd:f3:
                    39:13:71:56:b9:60:b7:3d:9e:06:9a:af:c8:b9:ff:
                    f2:e6:cd:ac:6c:2a:98:05:88:41:48:3e:0a:db:98:
                    cf:e5:63:62:77:04:ca:f0:52:f5:1d:14:2b:fe:96:
                    d0:54:07:de:d1:80:de:03:96:4b:e9:e6:df:fc:d4:
                    b0:20:1d:3a:e8:3f:11:2d:26:8f:7a:db:e9:36:13:
                    e3:92:b6:52:7e:5d:1f:32:34:c4:bb:ea:80:49:02:
                    79:42:e5:41:ff:d2:8d:30:41:6b:a0:d7:8a:42:64:
                    e4:d1:49:e1:6d:0b:5e:ae:ad:0a:07:c9:79:41:f2:
                    76:4d:15:8d:5e:19:db:e5:29:d4:d9:31:b5:02:28:
                    45:84:8c:2b:c5:a2:f1:0a:13:f8:0f:82:54:60:d8:
                    09:45:6b:be:72:1d:3f:46:2e:60:cf:4b:de:b2:7e:
                    3e:28:69:e1:b0:ad:0a:93:a2:1d:3f:4c:74:91:fc:
                    b2:8a:cc:bb:84:9d:3d:47:de:ef:bd:57:69:0b:f5:
                    f9:67:41:1d:8f:3f:da:e5:05:dd:22:bf:73:0a:9e:
                    ee:e9:e9:71:93:ea:eb:21:dd:95:cf:ad:93:a6:5a:
                    51:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:68:1D:09:CD:D7:95:2B:EF:3A:7A:55:67:18:BF:73:3C:AC:0F:14
            X509v3 Authority Key Identifier:
                keyid:E1:AC:03:22:B3:EA:B6:57:2E:CE:2A:0A:C5:AB:F1:64:A5:BB:FF:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:65:21:a2:ad:4c:4b:94:20:09:a7:37:30:2f:6b:3c:66:41:
         6f:f7:c1:d3:38:ce:07:b6:c4:27:8c:a3:44:1a:ef:17:74:e7:
         51:8b:bf:c3:50:04:1c:75:09:33:53:db:71:72:3e:5f:be:0e:
         09:85:b2:15:ac:05:c4:99:93:9f:1f:62:dc:3f:be:59:17:69:
         01:f0:ce:63:86:b2:e8:03:ab:d0:a2:93:60:8f:ce:41:10:35:
         c3:67:69:48:1d:05:3d:6f:7c:b4:1d:a5:8f:29:1c:71:75:6c:
         8f:14:10:05:17:6c:a9:0e:e1:64:04:83:4f:51:63:49:86:07:
         14:f2:59:d4:6d:63:8d:b0:01:81:2f:39:ac:fb:b7:e0:6a:f4:
         a6:8b:51:38:0f:86:c7:ce:f1:d6:98:0c:72:e7:98:80:ef:84:
         8c:8b:fe:04:62:2c:44:27:89:99:d0:6c:fb:2a:81:83:95:0f:
         b6:fb:43:e1:9c:ab:b8:23:9a:0a:43:04:b8:24:6d:3c:c8:53:
         56:00:e8:2c:5f:9e:19:cd:5e:4d:1d:5c:35:f8:a9:88:37:af:
         c9:d5:14:37:7a:86:6a:e2:d5:cd:32:2a:81:de:9a:0b:16:b8:
         64:7f:5f:28:8d:9c:15:e6:99:fc:86:e6:95:11:6b:fc:25:2c:
         9f:88:db:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 20:07:39 2025 by rpki-client