Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
File:                     Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft (raw, json)
Hash identifier:          tcMfAYQvxtylfwsswrsv1Ldiw5c4aMhJdUvDc6VJ/2E=
Subject key identifier:   C3:6A:25:4A:EE:74:67:D6:4C:47:CE:B7:BE:47:F7:72:FD:B1:35:68
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Certificate issuer:       /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial:       019629A99BB3CC4EE8B5327B6B61E668F73C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
Manifest number:          0431
Signing time:             Sat 12 Apr 2025 11:01:43 +0000
Manifest this update:     Sat 12 Apr 2025 11:01:43 +0000
Manifest next update:     Sun 13 Apr 2025 11:01:43 +0000
Files and hashes:         1: Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl (hash: a8W00fnfqNGcbChSsXcDEqRUZYzxjnzDR7UOTYFSjCk=)
                          2: G7iDQ4AJCfPlSLJm51qXvFLT34Q.roa (hash: ypV03h6J08o2WIBzZwFVWtQuB9T4WQvABamDXKjZwKk=)
                          3: HRwZymnXLOUIoxoUINYn4to6JUk.roa (hash: pQiZ5yxU+9mvgspIHMzwMKG+1Uq0GJpzfxG88McUc/c=)
                          4: KZgShytB2Dg6qgF16xBAvAwz96A.roa (hash: q4wJLWishIa1PGKUkxxT9s0b4UEcNNHxlEthcKoGKVE=)
                          5: LKybW18495AC5FUMSqSugVc8RwM.roa (hash: jalAzL/PMYw2Pqwd3hLOGRg6ukg06Q+/3Cty6I9RXMc=)
                          6: LknrUTtAEec3_ePoSrQI9a24pv0.roa (hash: 5LCDVstZXT07n5MXzWJORGDSXvB8tmWgOiCs8Dsf9ig=)
                          7: LozgjGA37xFvEWDTYPM2lAwAduA.roa (hash: 8YO3hU1Ao5pQO7Cei7oHHsrN3p6eZUJVpQ+H7w2cew8=)
                          8: Njz6tF05e2JuE_pdVlzt9icM_i0.roa (hash: nLxr25oD4ktf4kRizFewbb9TO/Wnl/IT0Qm+FXkeMF0=)
                          9: OXV0-TxR9fTn7R31A0-Uw0G4ujo.roa (hash: 3WsJ+LJL05UI01VNuUtaF+j1jHQBCRtShSGIP5WWMP8=)
                          10: aSJLBpImrYRI6Qksf9RRvtZ92p4.roa (hash: IwnT2ZkdlNjDPUGhSINR1ImeGfkRN8NOC8Rn8xX20LE=)
                          11: hvyCjD-sr1w6tm5UxwSderd8UxE.roa (hash: yEejB8VN7eRKYdvOBcuTAVJxtwqqoPVaxdtPUz/eqYQ=)
                          12: jnYTysXrOb_StYu-PzKs4M4hD2Q.roa (hash: J4kuRDOOkIbQT59LbGJVlXERckVcWQAPxH2vewJm0Sc=)
                          13: m17bWYxF7RkW5RobPkRzDhAI_e8.roa (hash: OH/jdp2+9NCsG5wvd500csAts9bNZ74vlfpt5dqCAWs=)
                          14: nOQG8M5trDQh4XjFetXQ5gl5hAk.roa (hash: jO9QLXj1bBC/jibhnilQOLleHuZugOPI3ebTy+5yP/A=)
                          15: uUxZil2b159003xfkfWtUQreHkQ.roa (hash: J/52Jbvu/goI1MIOwJZWmsnYU2my4DOGAr8T0IS/l48=)
                          16: uftnC1KeLsiQ9KA49FD6BjMxmho.roa (hash: CAfXuCGSmJgcKWqWFnuYO0NmnG2SgIosksUaMzf1RCU=)
                          17: vgsTODUN4DNu4XsvZWX7_dDziEU.roa (hash: OpvsJv1O2mE0888WpNjBckKl+Q9vODkDoyJf989gi1w=)
                          18: w3q1wrUy3n2NgVQVYrYOx0D0Low.roa (hash: +dMHTvR4ZE8N0MS6osIM+G5u4qHC04WNVeq5GmLIS2A=)
                          19: xzuQISkcD-LDwaStk5Po8cHtiJw.roa (hash: MTlh23S7S0fGqADN5d5jEOMtMCQeo6fF2QEVS5QqY6A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 13 Apr 2025 05:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:29:a9:9b:b3:cc:4e:e8:b5:32:7b:6b:61:e6:68:f7:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
        Validity
            Not Before: Apr 12 11:01:43 2025 GMT
            Not After : Apr 13 11:01:43 2025 GMT
        Subject: CN=c36a254aee7467d64c47ceb7be47f772fdb13568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:34:22:14:b3:ad:0e:2c:7b:cb:9d:bd:98:cf:
                    62:15:c2:a8:b9:58:cd:7c:53:d3:7b:86:15:e3:ce:
                    47:9b:87:d6:68:2d:5c:4d:2d:1c:c6:dc:80:49:29:
                    7d:dc:20:68:63:4e:a6:36:6a:0d:c1:72:b6:df:aa:
                    67:71:79:b1:b0:5d:d5:2f:5d:08:90:41:9a:ce:c2:
                    2f:18:12:2f:6b:de:16:88:74:ab:8e:d5:9f:9b:0c:
                    13:7f:a3:cb:0d:08:08:e6:68:55:95:a2:0c:4f:88:
                    09:ab:6e:9b:01:62:a5:13:4b:41:d5:48:c4:2d:53:
                    ea:21:ed:af:ef:63:38:c7:02:49:b6:19:9c:3a:a2:
                    08:f2:69:ac:46:6d:58:f2:e0:a9:d7:1d:df:d4:42:
                    d7:6f:04:3d:da:df:f1:8f:44:59:27:36:17:a5:32:
                    bb:c5:ce:16:58:b8:47:87:58:d9:ca:d6:5c:3d:87:
                    58:57:a3:c5:f2:29:5f:df:85:ec:23:d3:67:43:22:
                    f2:cd:f6:e8:97:dc:f5:84:39:0d:7e:af:61:49:b6:
                    9a:62:8c:d2:5a:b2:f5:4d:ff:d4:c8:d0:2b:96:12:
                    28:cd:cd:d7:d8:36:4a:3f:ac:13:5a:54:cd:11:fa:
                    35:41:71:89:df:6a:99:e8:54:23:b3:3a:93:9e:55:
                    b6:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:6A:25:4A:EE:74:67:D6:4C:47:CE:B7:BE:47:F7:72:FD:B1:35:68
            X509v3 Authority Key Identifier:
                keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:a4:0d:fe:7e:80:da:77:19:50:7d:20:6c:f3:b3:18:c7:cc:
         39:ea:6f:16:4e:e5:a6:54:da:7d:84:ad:29:f3:8e:c1:fc:4f:
         33:83:8e:b0:5e:06:73:1b:cf:21:08:c2:b1:c5:67:71:2e:a4:
         9b:fd:f9:a1:25:77:02:50:27:d7:06:6f:1c:6e:aa:ce:d2:6b:
         1d:03:37:bb:6b:69:f7:92:34:33:b2:dc:bf:77:4f:f8:c4:27:
         7f:85:54:57:9b:9a:2f:3e:02:79:c5:ed:74:4e:c5:1f:21:7b:
         2d:50:88:f7:9d:e0:57:cc:bd:09:77:7f:2e:85:30:13:b7:b8:
         61:02:21:08:4c:d7:51:7e:ec:e7:d2:a2:5b:15:85:41:14:f0:
         a4:2d:67:4c:5c:7a:4f:31:0a:03:78:3d:d4:43:17:3d:41:00:
         1a:72:23:38:1c:6d:33:6f:4c:80:66:8d:ea:79:47:01:86:9e:
         56:3c:ac:3e:ee:bf:cd:08:2a:0a:44:50:67:ad:a6:d9:81:4b:
         0c:74:23:96:2e:04:2d:3b:53:83:c1:29:b7:c5:37:e8:9f:45:
         fb:cb:c3:af:bb:54:0c:64:d0:73:34:3d:bf:91:44:2e:d3:c7:
         5e:fd:1c:7c:ce:6b:20:8c:c4:9e:66:1f:8e:55:e2:64:6c:ea:
         a3:36:6d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:54:40 2025 by rpki-client