Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft
File:                     4NQ1eE2owhjg_xB83P4kykVpyUk.mft (raw, json)
Hash identifier:          AuPsSGkIfWsZ73GQNFHFX30qsMBBZu5m9VgdxA3GLFI=
Subject key identifier:   62:8B:B8:7E:EA:63:77:94:1D:23:2D:C5:B7:7E:E5:3C:BB:18:B7:85
Authority key identifier: E0:D4:35:78:4D:A8:C2:18:E0:FF:10:7C:DC:FE:24:CA:45:69:C9:49
Certificate issuer:       /CN=e0d435784da8c218e0ff107cdcfe24ca4569c949
Certificate serial:       0196447B6AFE8D551AD89CD287E3607876B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft
Manifest number:          14F6
Signing time:             Thu 17 Apr 2025 16:01:00 +0000
Manifest this update:     Thu 17 Apr 2025 16:01:00 +0000
Manifest next update:     Fri 18 Apr 2025 16:01:00 +0000
Files and hashes:         1: 4NQ1eE2owhjg_xB83P4kykVpyUk.crl (hash: LahhA2z+c5TeGwf+vvGTckjV1gW7MgSeNXyXwatV0sA=)
                          2: PCU_z8etHMahQn2RAV03QXEYQNY.roa (hash: u3wh2VwTq9MZxicFM5jtw2aPgJCWNRgfQ4wq8HW2GwA=)
                          3: dzbMTYGCieBVBPgENTHt9L5KJ8M.roa (hash: ujry7yejU+h1f7YJVtPloSSU466DjjsHF906b9LbjBg=)
                          4: iFRT7pIErYyjSrvBoxfFD5pxtGQ.roa (hash: 5ByeZ/21OPrr4ys4yOkH+9BugOf167l7MKLoGEfw+nA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:44:7b:6a:fe:8d:55:1a:d8:9c:d2:87:e3:60:78:76:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0d435784da8c218e0ff107cdcfe24ca4569c949
        Validity
            Not Before: Apr 17 16:01:00 2025 GMT
            Not After : Apr 18 16:01:00 2025 GMT
        Subject: CN=628bb87eea6377941d232dc5b77ee53cbb18b785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a4:03:f6:ef:90:ad:e3:6f:3b:bb:cd:88:35:
                    a6:d9:e9:ff:ac:8c:0e:ad:57:86:d8:ee:33:21:d1:
                    97:94:7b:b2:d4:91:85:67:47:76:51:b8:05:4c:58:
                    3b:8b:30:83:8b:f4:cc:52:f6:ab:6e:75:b8:56:5a:
                    98:7d:8f:d9:f3:d0:ba:2a:c2:91:ee:c1:21:46:66:
                    55:5b:cc:82:9b:7e:64:e0:1f:c4:ac:f9:10:b5:a0:
                    3b:05:31:32:55:f6:f6:0c:d3:2e:db:a0:4d:60:1e:
                    a5:5a:00:e1:42:e1:4b:c0:b6:ea:71:e6:ce:68:03:
                    33:e5:90:36:e3:26:df:5d:bc:70:c9:f0:a8:d1:04:
                    61:4f:f3:0f:24:17:33:96:29:2c:ad:98:16:e7:85:
                    d7:6a:5b:6a:89:26:60:58:e6:bf:60:83:7e:cf:13:
                    96:21:5d:c8:fb:cb:7b:84:00:32:4c:15:ff:8a:49:
                    88:16:46:38:f9:a3:e9:07:fa:60:db:64:64:cd:02:
                    e7:22:db:c8:a6:cc:62:65:12:9f:fe:01:ac:d8:b0:
                    70:f9:36:97:8e:28:60:dc:c8:2e:a0:83:f2:09:bf:
                    ec:1d:10:dc:a4:94:ea:44:96:c5:20:4b:b3:62:f5:
                    1d:d4:44:25:c8:68:ee:c7:23:5a:95:74:3a:20:f2:
                    f8:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:8B:B8:7E:EA:63:77:94:1D:23:2D:C5:B7:7E:E5:3C:BB:18:B7:85
            X509v3 Authority Key Identifier:
                keyid:E0:D4:35:78:4D:A8:C2:18:E0:FF:10:7C:DC:FE:24:CA:45:69:C9:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:32:79:64:13:36:91:e2:14:7a:8b:55:27:5b:2a:0a:28:28:
         2c:86:1b:63:d5:a3:22:9d:57:0d:d1:dc:eb:f7:b0:13:b2:eb:
         8a:9a:8a:a4:b9:e4:7e:5f:8b:d7:a0:fc:87:fd:cc:49:be:e0:
         ba:63:23:b3:e8:21:27:2a:dd:b8:8b:9e:b3:4d:37:67:f6:26:
         6b:3c:1e:8f:e2:dd:72:19:2c:1c:90:ca:aa:e1:5f:41:31:64:
         b6:41:19:f9:cf:78:4e:66:49:a7:1b:b9:65:6c:b8:d9:44:e7:
         2e:82:8e:58:ca:98:48:da:9c:cf:3e:36:db:19:51:96:e1:98:
         20:f6:1b:b3:04:48:b3:bf:9c:7b:4d:9d:ed:98:da:b4:07:53:
         60:f5:e5:8b:4e:3e:dc:bf:40:00:18:63:ae:29:3f:87:b9:ab:
         1c:29:b6:bc:36:33:10:d5:79:30:03:54:cf:46:6a:b2:f6:cb:
         c3:69:f7:87:ab:72:7c:2e:34:c5:47:1c:86:d9:66:4f:a9:d2:
         c3:5f:8c:f4:ce:d3:1e:8d:ab:4c:3c:f1:8f:ec:48:9d:0b:c6:
         2a:26:3b:76:43:24:2f:94:88:3f:92:6c:67:f8:e8:82:d6:de:
         0d:c5:31:e5:4a:8f:e6:3a:aa:41:03:13:d5:32:b8:b6:9c:a5:
         40:b4:7d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 19:47:02 2025 by rpki-client