Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft
File:                     7VKTzUpieoRq7WDKf7XVqQGarlE.mft (raw, json)
Hash identifier:          6rtp3JYJ+c6xiwjGnYe5EfeA4blD6aNxPtD8/k50BCA=
Subject key identifier:   5B:9B:DD:81:24:E7:7E:DD:C3:7F:7D:FB:E6:A7:1B:A7:FC:AB:AA:E9
Authority key identifier: ED:52:93:CD:4A:62:7A:84:6A:ED:60:CA:7F:B5:D5:A9:01:9A:AE:51
Certificate issuer:       /CN=ed5293cd4a627a846aed60ca7fb5d5a9019aae51
Certificate serial:       01964F35AD596183A821F46ABB844DC44A7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7VKTzUpieoRq7WDKf7XVqQGarlE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft
Manifest number:          14FD
Signing time:             Sat 19 Apr 2025 18:00:39 +0000
Manifest this update:     Sat 19 Apr 2025 18:00:39 +0000
Manifest next update:     Sun 20 Apr 2025 18:00:39 +0000
Files and hashes:         1: 7VKTzUpieoRq7WDKf7XVqQGarlE.crl (hash: pytd8ix7i1ZMPkeFrs6YuypnvNVe9w2J/BTf256E70c=)
                          2: ISP0TJJTh3tprVicVW974-nq9rI.roa (hash: pUMX+/MC+BS6vpOzP0rNo03/k6W3G+9Ru/0k0Am9kHc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7VKTzUpieoRq7WDKf7XVqQGarlE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 18:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4f:35:ad:59:61:83:a8:21:f4:6a:bb:84:4d:c4:4a:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed5293cd4a627a846aed60ca7fb5d5a9019aae51
        Validity
            Not Before: Apr 19 18:00:39 2025 GMT
            Not After : Apr 20 18:00:39 2025 GMT
        Subject: CN=5b9bdd8124e77eddc37f7dfbe6a71ba7fcabaae9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:24:a4:7e:ff:39:ea:17:58:29:36:1d:3b:db:
                    07:c2:97:c3:45:8a:07:7f:06:b0:78:44:07:93:2d:
                    1b:a6:6e:1f:a0:65:c9:df:fa:4d:c2:f6:4c:8f:76:
                    e8:85:c7:ab:fb:3e:4d:39:83:d7:5d:7e:95:ae:89:
                    c9:c5:96:a7:76:37:65:48:17:26:df:99:21:1b:d7:
                    1a:79:98:77:57:79:c6:ec:72:03:ea:ab:71:8e:73:
                    2c:9d:32:2a:84:bf:24:05:14:b3:88:56:d1:33:83:
                    a1:de:8b:71:1a:82:eb:e6:71:ea:31:7d:1b:73:70:
                    e5:cb:a1:51:36:ec:4b:bb:05:32:f8:dd:1f:e6:7c:
                    47:f8:8b:3c:08:06:46:67:66:b1:4a:07:83:54:5e:
                    d7:0a:ca:15:7b:35:68:61:21:8b:f6:6e:31:7a:fb:
                    95:0f:69:27:aa:3e:40:b2:2a:b0:1f:d1:16:d8:c5:
                    3e:a3:b9:bf:b2:14:e9:62:c8:ba:bd:e6:ac:7b:30:
                    b9:4a:b7:ef:47:5c:40:f5:8e:61:45:1d:44:8f:8f:
                    0d:bd:6e:67:73:63:a8:24:24:aa:c8:6f:b5:9f:9d:
                    07:05:be:4b:97:ff:d5:b1:8c:a0:e1:90:a0:4f:4a:
                    ce:39:e0:6a:7c:61:82:61:93:56:59:d9:46:42:6e:
                    c1:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:9B:DD:81:24:E7:7E:DD:C3:7F:7D:FB:E6:A7:1B:A7:FC:AB:AA:E9
            X509v3 Authority Key Identifier:
                keyid:ED:52:93:CD:4A:62:7A:84:6A:ED:60:CA:7F:B5:D5:A9:01:9A:AE:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7VKTzUpieoRq7WDKf7XVqQGarlE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:78:5c:a8:5a:83:1e:89:4b:5c:af:94:7e:eb:24:d1:f3:27:
         85:bd:0f:89:6e:71:99:15:83:6f:85:3d:d7:ff:bb:ef:31:1d:
         02:8b:d4:f3:d0:02:8c:9f:84:35:99:36:cc:42:7f:2f:fc:0b:
         04:bf:2e:05:0d:77:db:09:37:f4:75:c2:a3:22:d2:e1:19:4d:
         f9:be:42:7c:f0:60:a4:6a:6e:c4:e4:5c:bf:36:17:dc:21:bf:
         5f:ca:bd:a7:22:7a:3a:b2:01:3a:7f:25:33:26:d4:73:45:5f:
         49:28:32:c4:ce:e9:51:56:52:58:43:8e:68:2f:86:80:39:ab:
         9b:66:02:7f:d4:cb:87:62:4b:33:2b:73:cd:87:75:e7:c2:9c:
         ae:69:56:2b:94:89:ef:b7:d1:aa:3b:66:7f:32:f7:3a:05:f3:
         e6:a7:f0:5f:b9:62:c2:1e:9d:c2:08:b8:d3:87:e2:ed:05:f5:
         fe:9d:dd:0d:35:00:8d:5e:1a:25:b2:92:83:b6:9f:15:2b:77:
         63:65:03:95:02:20:13:81:d0:d7:fb:91:50:ff:20:a3:b8:0e:
         68:2b:6c:25:65:99:da:fc:06:42:04:9c:71:c9:36:16:f6:3b:
         90:e9:5b:1c:a2:bf:29:f9:e7:16:85:30:17:29:fb:7c:68:73:
         f2:64:0d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:32:53 2025 by rpki-client