Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/0217e6-d2c3-46f8-8e49-3f1439a15f1b/1/qDCEoJ7dz1VtGbO3NVyd7-CiePU.mft
File:                     qDCEoJ7dz1VtGbO3NVyd7-CiePU.mft (raw, json)
Hash identifier:          9kazzdoWnSFTqiCanL9GdMQVU13jTkwtHNOIbpXLBcI=
Subject key identifier:   D5:37:1F:46:26:A7:1B:42:E6:60:A9:AD:12:25:C8:84:1B:40:02:07
Authority key identifier: A8:30:84:A0:9E:DD:CF:55:6D:19:B3:B7:35:5C:9D:EF:E0:A2:78:F5
Certificate issuer:       /CN=a83084a09eddcf556d19b3b7355c9defe0a278f5
Certificate serial:       01964632A52AA1BBCC0ED40AE110BEAADDD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qDCEoJ7dz1VtGbO3NVyd7-CiePU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/0217e6-d2c3-46f8-8e49-3f1439a15f1b/1/qDCEoJ7dz1VtGbO3NVyd7-CiePU.mft
Manifest number:          0A51
Signing time:             Fri 18 Apr 2025 00:00:46 +0000
Manifest this update:     Fri 18 Apr 2025 00:00:46 +0000
Manifest next update:     Sat 19 Apr 2025 00:00:46 +0000
Files and hashes:         1: FHgmJVzT42MAfIzapVC9e2NA_iY.roa (hash: ZFuf9CA7YgoKL9WKUlfIU4bCNAlr9XJKo81l94myN/w=)
                          2: qDCEoJ7dz1VtGbO3NVyd7-CiePU.crl (hash: H0NbUboireYpbBx7Pols1L0JHf88vVrKDKXZVOPh/zU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/0217e6-d2c3-46f8-8e49-3f1439a15f1b/1/qDCEoJ7dz1VtGbO3NVyd7-CiePU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/0217e6-d2c3-46f8-8e49-3f1439a15f1b/1/qDCEoJ7dz1VtGbO3NVyd7-CiePU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qDCEoJ7dz1VtGbO3NVyd7-CiePU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 00:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:46:32:a5:2a:a1:bb:cc:0e:d4:0a:e1:10:be:aa:dd:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a83084a09eddcf556d19b3b7355c9defe0a278f5
        Validity
            Not Before: Apr 18 00:00:46 2025 GMT
            Not After : Apr 19 00:00:46 2025 GMT
        Subject: CN=d5371f4626a71b42e660a9ad1225c8841b400207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:9e:1a:98:25:eb:60:87:2d:9c:df:ad:ec:69:
                    90:71:4d:be:b6:ba:d4:5d:1b:44:33:38:63:5c:73:
                    19:fd:45:15:c2:bf:58:31:e5:4f:34:e1:02:9c:b8:
                    df:99:2f:a4:12:c0:04:54:cf:e8:54:39:87:df:7e:
                    ba:32:f6:40:dc:e0:f9:85:30:2d:3f:ab:e6:f7:b5:
                    57:be:81:e8:42:18:b6:f5:9e:e9:68:62:05:6a:f9:
                    ef:9b:59:69:35:d7:5f:55:86:32:ae:93:da:9f:ff:
                    2f:5a:be:5e:fb:8e:ee:aa:31:c4:2e:83:73:fd:64:
                    fd:8c:d1:5c:33:66:d2:aa:5d:7a:ff:72:49:bf:bc:
                    6b:4e:be:bb:72:d8:1b:66:3e:b6:cf:3c:b9:fb:06:
                    22:52:00:ed:be:06:d7:e5:6a:e0:58:0b:6d:07:1a:
                    26:c7:ca:5d:7f:50:dc:3c:9b:58:bf:46:70:67:84:
                    1f:10:74:38:3d:70:fe:f0:14:ce:9f:8e:57:dd:d7:
                    a8:c7:d5:ef:6f:1f:c6:d8:26:3b:b6:e8:24:14:60:
                    9c:da:15:d5:96:0a:d1:7d:8a:ba:6c:0a:ce:17:ec:
                    a6:f3:b0:c9:df:ca:95:a4:7b:47:a5:60:57:36:85:
                    ea:93:bf:e1:db:49:75:d2:02:35:e2:96:6f:fd:e9:
                    69:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:37:1F:46:26:A7:1B:42:E6:60:A9:AD:12:25:C8:84:1B:40:02:07
            X509v3 Authority Key Identifier:
                keyid:A8:30:84:A0:9E:DD:CF:55:6D:19:B3:B7:35:5C:9D:EF:E0:A2:78:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qDCEoJ7dz1VtGbO3NVyd7-CiePU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0217e6-d2c3-46f8-8e49-3f1439a15f1b/1/qDCEoJ7dz1VtGbO3NVyd7-CiePU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0217e6-d2c3-46f8-8e49-3f1439a15f1b/1/qDCEoJ7dz1VtGbO3NVyd7-CiePU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:56:c9:e0:1a:aa:7f:b3:27:63:34:6d:c7:9a:9d:70:c9:3e:
         e4:04:22:c8:d0:7b:0c:6f:38:71:e1:23:ec:fd:32:4e:3e:f0:
         c2:c5:f3:f5:fd:fc:22:58:ce:53:7a:d8:c1:0a:f7:64:bd:a2:
         ad:d7:e9:7e:e0:4c:dc:05:17:76:0a:40:1e:c6:f6:a2:3e:17:
         e2:d8:99:be:1e:92:0d:01:13:32:24:ce:23:a1:37:09:f5:4e:
         73:31:ab:a6:f5:90:01:00:e5:cb:79:49:e4:2b:2c:3a:7d:c5:
         1f:c5:fd:b4:63:fa:ae:fb:21:b8:e2:a3:06:8b:47:c5:45:e6:
         76:05:08:91:e5:8a:2d:d0:f8:6b:64:11:f6:ea:04:65:ee:dc:
         29:a4:de:21:3a:68:49:37:f5:4a:27:7d:6f:2e:db:70:e0:d5:
         2f:7f:fb:ca:88:50:ac:ca:17:c0:ba:05:e0:90:d6:9e:71:80:
         e3:9f:c0:aa:7c:8a:57:24:f8:5f:3e:1e:17:d0:b5:53:4b:8f:
         fb:46:ca:d2:f5:be:48:5d:47:91:98:6b:5a:d5:e1:b4:cb:ff:
         5e:57:3e:5c:81:d3:ba:03:30:d9:14:10:12:ae:77:a5:2f:f3:
         a4:45:33:bc:c1:dd:7d:73:f6:4d:ec:b3:02:d6:39:f2:84:aa:
         5a:a1:51:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:53:57 2025 by rpki-client