Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft
File:                     XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft (raw, json)
Hash identifier:          Tfa50P9M3iSSqXx/+2D9LuFTap2DthcTc+ixazb/oFA=
Subject key identifier:   62:49:77:6F:5D:D5:92:09:49:D5:B5:2B:2A:23:F7:8A:74:40:DB:3E
Authority key identifier: 5D:3B:B8:48:91:65:1F:20:39:CD:81:B0:B6:09:12:F7:C0:E5:CF:96
Certificate issuer:       /CN=5d3bb84891651f2039cd81b0b60912f7c0e5cf96
Certificate serial:       01964142E6367A3BA2635A84DC36A4C468FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft
Manifest number:          1029
Signing time:             Thu 17 Apr 2025 01:00:25 +0000
Manifest this update:     Thu 17 Apr 2025 01:00:25 +0000
Manifest next update:     Fri 18 Apr 2025 01:00:25 +0000
Files and hashes:         1: EOCWiGvbLbC8SrTdZuW8112GldA.roa (hash: 6TEyJTlSHuy3i9dMVFX2h1KeLM589ScTuB8gZ6GHeEg=)
                          2: XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl (hash: ky93THndOIc8gioDvWxNpgHro/UBAdmg3m7GjmHqw+M=)
                          3: ZSASssxXWzh67IcbvQuSjMbjXlE.roa (hash: 8NFvVB0e1Ed6PcQb0KzEDJBB77MUqbc2YSQy8ySf1Y4=)
                          4: iefIsjicRY6rMPB46yzGeoYmfDY.roa (hash: wYK+cODxbPgs0PQn468rpCusa1e+6M4kLS/qnuHcsvY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 21:57:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:41:42:e6:36:7a:3b:a2:63:5a:84:dc:36:a4:c4:68:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d3bb84891651f2039cd81b0b60912f7c0e5cf96
        Validity
            Not Before: Apr 17 01:00:25 2025 GMT
            Not After : Apr 18 01:00:25 2025 GMT
        Subject: CN=6249776f5dd5920949d5b52b2a23f78a7440db3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:05:f9:2a:21:6e:7b:60:d6:cf:98:bd:e0:56:
                    90:7c:8a:a0:62:4d:06:33:07:bd:8a:a0:73:54:fd:
                    de:40:ef:d7:23:61:83:12:af:71:cd:64:95:a3:83:
                    34:9d:22:9b:ae:a1:6d:3f:8d:8c:66:19:46:90:66:
                    e7:b5:61:8b:33:9c:8e:17:63:ac:cb:6f:ec:5a:1a:
                    76:e8:96:04:b1:64:0a:51:18:01:fc:d5:53:28:1e:
                    8a:05:be:74:4d:1b:e2:a9:74:b1:66:6f:68:fa:bc:
                    87:e4:19:40:53:d9:db:ff:5e:88:83:1a:6b:89:56:
                    d8:82:73:b0:ed:ca:82:f4:23:6f:2f:1d:ad:2a:1f:
                    bb:cb:e6:9c:8e:b0:55:7c:fa:a7:93:ef:6d:5f:02:
                    c0:bf:5a:3b:cf:7b:52:ad:32:63:50:82:bd:99:00:
                    8e:8c:ed:5c:40:f2:16:52:25:bd:6b:e0:7c:bf:d4:
                    fe:ac:a1:3b:9c:37:b9:26:b2:39:08:f7:32:b6:d0:
                    60:a3:37:8d:52:08:7b:a9:f7:1d:6e:ec:1b:d8:34:
                    dd:89:e4:af:84:46:35:23:12:aa:d3:07:ca:d1:5f:
                    b6:a2:b6:62:d3:fc:6f:dd:cb:43:7a:46:c7:6b:5f:
                    be:bb:ee:d1:2d:cb:c2:2a:d0:46:43:4e:de:d5:f7:
                    da:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:49:77:6F:5D:D5:92:09:49:D5:B5:2B:2A:23:F7:8A:74:40:DB:3E
            X509v3 Authority Key Identifier:
                keyid:5D:3B:B8:48:91:65:1F:20:39:CD:81:B0:B6:09:12:F7:C0:E5:CF:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:9a:bd:99:a9:a4:1f:44:bc:67:18:6c:b9:2b:e1:95:e6:47:
         51:3c:91:69:0f:5d:51:72:71:6a:5a:ea:f6:d2:ed:de:70:d7:
         64:76:9f:81:f7:30:42:81:ad:12:6e:7e:17:c9:75:4f:ec:8b:
         ee:68:b1:51:ea:8d:a5:bf:5a:ac:cd:f8:97:d3:25:30:e9:93:
         38:1b:44:ef:e0:8d:2a:79:9e:67:df:a3:2e:be:67:36:b1:b3:
         0e:8b:bd:12:87:3e:50:f0:2f:01:6c:f6:67:71:a6:9b:38:39:
         f3:49:75:59:e1:88:99:21:f9:a1:f9:f7:11:06:b1:84:87:da:
         ef:77:ca:04:be:fb:c7:f8:c0:e8:c3:ad:c9:26:83:12:6a:62:
         90:d8:0a:53:3c:1c:51:83:3c:88:58:d9:f2:27:b8:8b:7a:c9:
         fd:fb:ad:93:89:e3:59:52:a7:e7:a1:2e:b1:be:2e:83:ae:17:
         af:e0:eb:22:e6:45:4b:84:cc:9f:88:90:e2:e5:f2:8c:e7:93:
         44:f7:94:55:81:da:7a:f2:c5:3d:72:1d:a6:9d:ff:6c:df:0a:
         e9:33:28:48:8a:7d:0f:94:14:f6:ad:0e:61:b0:eb:6c:a9:59:
         45:f8:52:f5:94:b5:a3:26:17:13:99:f1:76:76:99:5d:1a:3c:
         0a:3c:ff:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:48:40 2025 by rpki-client