Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/d7jPRUsJYtFqSFWAj9OrwVhSu9g.mft
File:                     d7jPRUsJYtFqSFWAj9OrwVhSu9g.mft (raw, json)
Hash identifier:          5V/hcwnmp5gUrDc58ZNLHvRSrl2sQ8nSVSFi3EOTI10=
Subject key identifier:   5B:E3:00:3A:57:1D:E3:ED:57:C2:93:16:87:B6:98:96:61:35:E2:DF
Authority key identifier: 77:B8:CF:45:4B:09:62:D1:6A:48:55:80:8F:D3:AB:C1:58:52:BB:D8
Certificate issuer:       /CN=77b8cf454b0962d16a4855808fd3abc15852bbd8
Certificate serial:       019629E06DB051569BEED743C09D346B542B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d7jPRUsJYtFqSFWAj9OrwVhSu9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/d7jPRUsJYtFqSFWAj9OrwVhSu9g.mft
Manifest number:          14F1
Signing time:             Sat 12 Apr 2025 12:01:35 +0000
Manifest this update:     Sat 12 Apr 2025 12:01:35 +0000
Manifest next update:     Sun 13 Apr 2025 12:01:35 +0000
Files and hashes:         1: GiuN6Z-Ii4hKkVx5VV-IMhBO3QY.roa (hash: iyQ6GAQjxqnJYL88mOpP3XC9PzL+98vR7m7z4r32/XE=)
                          2: I31zSlJ40fjjEolj5beTqF2Vpd4.roa (hash: Og0yQVlIZ0GIVCkTxKf0CrUvb1fixcYPJT0gMrkKe1k=)
                          3: d7jPRUsJYtFqSFWAj9OrwVhSu9g.crl (hash: V2VCdgDSzM/SNimL1NVMnWYFXag/ZHyqTtS9XUg/Q0E=)
                          4: hWqbQCINw_eREZ5Cr4ZVsBmolHg.roa (hash: Udzjv6T0jDHHqGvPVeIEklKJjpCQoCFjU9XymlaTwRA=)
                          5: osKO7b8ccW31sbJ6_t6mywPVBHM.roa (hash: JM2OqJyCoa973ukFnr+UzzosklB0VPL9Ae/5a6wxzDM=)
                          6: pDrGdKgcXes4quzk7Lh5Ka1vr9k.roa (hash: JXmZvN6wvq9s/qrkI9tgKOrpx2n5jQb8xJL6vMObw8g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/d7jPRUsJYtFqSFWAj9OrwVhSu9g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/d7jPRUsJYtFqSFWAj9OrwVhSu9g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d7jPRUsJYtFqSFWAj9OrwVhSu9g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 13 Apr 2025 12:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:29:e0:6d:b0:51:56:9b:ee:d7:43:c0:9d:34:6b:54:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77b8cf454b0962d16a4855808fd3abc15852bbd8
        Validity
            Not Before: Apr 12 12:01:35 2025 GMT
            Not After : Apr 13 12:01:35 2025 GMT
        Subject: CN=5be3003a571de3ed57c2931687b698966135e2df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1e:d4:e0:eb:5d:ef:a0:fa:91:1a:24:52:91:
                    0c:0f:17:84:1c:90:b9:d7:99:2c:ab:14:d0:dd:19:
                    db:ff:36:ad:33:e8:2c:c4:0b:c3:32:e1:23:06:75:
                    6f:48:cd:08:0b:f1:bd:ee:22:e5:c7:ee:04:24:75:
                    aa:ab:96:a1:c4:5f:8b:e9:3b:58:c5:58:61:5c:af:
                    2a:79:c7:1d:2d:62:bd:b4:c2:5f:fc:bb:33:dd:a9:
                    11:11:76:d6:da:f7:6e:2c:0b:03:ab:fe:91:28:18:
                    36:f0:81:94:08:d9:eb:38:05:5e:24:4f:e4:74:9b:
                    58:4b:1c:f0:92:cb:77:26:c1:67:0a:78:0d:69:28:
                    82:1b:3c:5a:c5:75:9c:c4:41:fa:19:87:9b:0f:20:
                    9e:84:4b:b6:e1:91:29:d6:3c:06:33:75:b1:7c:41:
                    2e:c6:ff:44:ed:e9:8c:5c:03:ad:c5:d8:77:fb:a6:
                    2a:31:b0:f8:84:7b:42:d8:cc:84:6d:65:cd:00:0a:
                    e8:7e:88:b9:f1:84:d2:a0:74:9a:f8:e9:9c:c0:1e:
                    79:eb:59:62:5f:9a:9c:75:0b:64:eb:2c:33:f5:f4:
                    7d:19:5f:e4:98:83:d6:e8:6f:17:75:76:42:f3:2c:
                    5c:db:fe:3b:ac:79:91:fd:0b:36:a8:cf:ff:0a:62:
                    1f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:E3:00:3A:57:1D:E3:ED:57:C2:93:16:87:B6:98:96:61:35:E2:DF
            X509v3 Authority Key Identifier:
                keyid:77:B8:CF:45:4B:09:62:D1:6A:48:55:80:8F:D3:AB:C1:58:52:BB:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7jPRUsJYtFqSFWAj9OrwVhSu9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/d7jPRUsJYtFqSFWAj9OrwVhSu9g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/d7jPRUsJYtFqSFWAj9OrwVhSu9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:bc:e9:82:e9:9c:57:20:e8:40:38:b1:b0:3f:6b:9f:e3:c5:
         c9:06:15:51:78:d8:2b:ce:99:46:28:54:49:77:b1:91:a2:0d:
         75:79:1e:dd:42:28:36:41:e0:f3:be:c9:51:42:5c:7e:3d:90:
         95:60:f4:a0:28:0d:c2:37:3a:e7:28:a9:26:4b:9e:c0:df:15:
         93:7a:d5:83:ca:ae:2f:d6:45:af:0b:1c:7a:4a:f8:1f:08:f6:
         72:35:42:de:b2:08:10:f0:2f:ab:ce:58:78:2e:b2:3d:ee:64:
         43:09:c7:9c:1b:41:fd:ed:58:5b:09:15:4b:0c:ad:04:c7:6b:
         39:f0:22:37:6a:2d:9f:b8:a8:13:94:55:cb:03:02:27:9a:32:
         1b:cc:8c:a8:24:91:04:72:f3:07:61:00:95:7d:08:ba:02:30:
         ef:67:2f:e6:47:54:8b:50:ef:d2:83:8e:be:cc:77:1d:1d:2b:
         dc:85:7c:26:df:12:8b:99:05:44:61:09:56:cd:fa:39:26:1a:
         fc:01:47:71:a9:46:c7:5f:bc:39:c6:21:bf:b7:af:eb:c8:46:
         7a:66:3a:a1:e3:03:bf:c1:13:ba:7f:60:c0:46:0e:ca:2c:44:
         c5:13:35:4e:0a:47:06:46:24:a6:bf:b3:06:23:4b:18:47:e9:
         14:dd:05:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 22:24:01 2025 by rpki-client