Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/sglyH0VIwmzzYulEqBsazueyS1M.mft
File:                     sglyH0VIwmzzYulEqBsazueyS1M.mft (raw, json)
Hash identifier:          O2jTmc7iRHq+ZIyrn1eMlIV8Igdvp0wqbxGpSYhTEsU=
Subject key identifier:   F6:D3:AF:E9:36:F3:C5:8F:3F:09:40:96:C2:B5:64:C2:C3:2F:2B:4D
Authority key identifier: B2:09:72:1F:45:48:C2:6C:F3:62:E9:44:A8:1B:1A:CE:E7:B2:4B:53
Certificate issuer:       /CN=b209721f4548c26cf362e944a81b1acee7b24b53
Certificate serial:       019652DB73E515E644F0C8123E6D3B6B77ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sglyH0VIwmzzYulEqBsazueyS1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/sglyH0VIwmzzYulEqBsazueyS1M.mft
Manifest number:          1501
Signing time:             Sun 20 Apr 2025 11:00:35 +0000
Manifest this update:     Sun 20 Apr 2025 11:00:35 +0000
Manifest next update:     Mon 21 Apr 2025 11:00:35 +0000
Files and hashes:         1: Kn5YPKTavnkR9we3GavTZvxru0g.roa (hash: xBxCBv93EeHCLyNABUtZ7jn766Ch4SgbtDnPEkzOvDM=)
                          2: aM2Mmp7rYQ9Ds0NTfBSW1lSTHx4.roa (hash: MOXkGsTfJLVwHpeFy8hnMbfGHfgWVvoGY31VFj0P0FE=)
                          3: bELo5qIIpuod7qBLIUKqwA9Ds9w.roa (hash: WzrJgL+uq92c99WVaAJUBgvncMaquptkbbkZrtxJTI8=)
                          4: sglyH0VIwmzzYulEqBsazueyS1M.crl (hash: PTEyCR3OGHxMe81tBQDF6uG68s1ZjQOV4X6vtI/xXC4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/sglyH0VIwmzzYulEqBsazueyS1M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/sglyH0VIwmzzYulEqBsazueyS1M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sglyH0VIwmzzYulEqBsazueyS1M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 11:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:52:db:73:e5:15:e6:44:f0:c8:12:3e:6d:3b:6b:77:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b209721f4548c26cf362e944a81b1acee7b24b53
        Validity
            Not Before: Apr 20 11:00:35 2025 GMT
            Not After : Apr 21 11:00:35 2025 GMT
        Subject: CN=f6d3afe936f3c58f3f094096c2b564c2c32f2b4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:65:5a:c5:61:fc:d6:40:00:6a:6a:fa:0c:05:
                    6d:07:6c:d8:93:ef:ba:56:e1:51:3c:b1:58:26:69:
                    65:17:04:b5:08:10:d8:6b:6a:93:25:2e:f4:e2:93:
                    9e:5c:22:f2:72:44:f5:49:99:a6:ff:2e:c6:4f:74:
                    23:d0:ee:e2:e6:35:76:fa:54:a8:45:70:44:5e:dc:
                    2b:99:66:14:a2:ff:c2:c0:4f:c8:9e:67:8c:32:15:
                    70:ce:d4:e1:e7:60:83:d4:2b:04:18:fe:b5:8e:b3:
                    05:32:2a:43:0d:50:12:41:a9:07:3a:e8:05:63:2d:
                    49:bf:8b:67:48:14:83:25:58:8e:a5:aa:f3:45:df:
                    fd:1f:3f:b1:14:68:4a:41:40:30:dd:51:02:a1:25:
                    da:9d:e0:93:a2:51:d0:04:69:e6:cb:7c:1d:9a:e6:
                    fc:b2:95:37:d9:3b:9a:96:20:a8:a2:aa:53:f0:68:
                    e8:be:1d:2d:2a:24:d4:3e:21:7b:af:b2:10:2d:94:
                    1d:7a:b7:4f:9f:ff:44:de:80:c0:3e:6a:70:a7:ab:
                    55:4d:cd:92:9f:39:54:4e:2f:d5:04:22:ee:9f:e1:
                    39:5c:b0:38:7f:a2:f1:70:6d:48:7b:70:11:4e:4a:
                    fe:78:1d:df:03:d0:4e:e1:01:93:7a:fb:15:30:e2:
                    78:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:D3:AF:E9:36:F3:C5:8F:3F:09:40:96:C2:B5:64:C2:C3:2F:2B:4D
            X509v3 Authority Key Identifier:
                keyid:B2:09:72:1F:45:48:C2:6C:F3:62:E9:44:A8:1B:1A:CE:E7:B2:4B:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sglyH0VIwmzzYulEqBsazueyS1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/sglyH0VIwmzzYulEqBsazueyS1M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/sglyH0VIwmzzYulEqBsazueyS1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:3b:e2:26:c5:2a:24:bf:8a:d9:f6:bf:14:ea:7b:9e:9e:b7:
         72:4e:1b:45:21:fa:12:36:96:9a:d2:69:4a:13:15:c0:02:1e:
         56:d3:25:cc:0a:bf:e5:80:ac:0d:f7:54:f6:55:8b:74:e0:29:
         cd:ee:50:38:f2:1c:81:2a:4a:cf:48:ec:4d:eb:93:07:dc:d5:
         1e:3a:e8:47:bc:cd:50:1e:32:49:25:e7:b9:0f:28:63:29:d2:
         f2:d5:45:b0:0b:78:c4:8d:e2:56:80:c9:c7:32:a1:36:68:02:
         7c:96:c7:71:c7:25:ae:e1:1d:84:08:a2:ef:19:f6:f1:88:f3:
         7a:46:a8:d2:8e:90:6f:a9:61:23:79:72:4c:fb:ab:0e:27:79:
         96:6a:b7:dd:ac:70:43:c9:42:e9:b2:c9:10:7a:9e:f6:04:cf:
         7a:cc:fd:d1:57:64:18:15:6b:bc:ac:a7:61:c3:b4:32:e4:24:
         3a:88:11:2d:52:29:a5:99:78:b3:fc:07:cc:90:da:bb:a5:b9:
         b3:dc:3d:ad:81:15:91:74:24:21:80:af:b9:cb:71:78:8a:f2:
         c6:03:e8:01:4b:3f:b2:3f:f4:9e:8d:7e:d2:ca:c8:d6:3a:93:
         be:f4:b9:c0:1c:af:aa:d1:cd:0c:ee:59:94:fc:e8:e2:2a:28:
         c0:0a:64:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:57:36 2025 by rpki-client