Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/27fb48-d066-42d9-9432-a05bd228337c/1/mf5n9L9N0mrjFbMae0cs5NXBrmo.mft
File:                     mf5n9L9N0mrjFbMae0cs5NXBrmo.mft (raw, json)
Hash identifier:          yasugXqUV5eiyWbz8J/fhzzrbX/bJ3heCVJfuvngh60=
Subject key identifier:   4A:8F:72:92:99:16:39:A2:3E:B8:BF:70:3E:9A:29:8C:D2:96:3D:B6
Authority key identifier: 99:FE:67:F4:BF:4D:D2:6A:E3:15:B3:1A:7B:47:2C:E4:D5:C1:AE:6A
Certificate issuer:       /CN=99fe67f4bf4dd26ae315b31a7b472ce4d5c1ae6a
Certificate serial:       019652A46C3C16ED1514797706BE429FD2F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mf5n9L9N0mrjFbMae0cs5NXBrmo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/27fb48-d066-42d9-9432-a05bd228337c/1/mf5n9L9N0mrjFbMae0cs5NXBrmo.mft
Manifest number:          14FE
Signing time:             Sun 20 Apr 2025 10:00:29 +0000
Manifest this update:     Sun 20 Apr 2025 10:00:29 +0000
Manifest next update:     Mon 21 Apr 2025 10:00:29 +0000
Files and hashes:         1: DJ9c19i6-KdVhR4wxk4rl1TwOA4.roa (hash: 9EgmYxbySr7FvyMgHaLB4XxWt5JwrgMM/8o6In9Xr3E=)
                          2: mf5n9L9N0mrjFbMae0cs5NXBrmo.crl (hash: KhQV5sIHKXJQFU/nt/XSAkGQM3n6380dEVjFfjpJNvI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/27fb48-d066-42d9-9432-a05bd228337c/1/mf5n9L9N0mrjFbMae0cs5NXBrmo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/27fb48-d066-42d9-9432-a05bd228337c/1/mf5n9L9N0mrjFbMae0cs5NXBrmo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mf5n9L9N0mrjFbMae0cs5NXBrmo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 10:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:52:a4:6c:3c:16:ed:15:14:79:77:06:be:42:9f:d2:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99fe67f4bf4dd26ae315b31a7b472ce4d5c1ae6a
        Validity
            Not Before: Apr 20 10:00:29 2025 GMT
            Not After : Apr 21 10:00:29 2025 GMT
        Subject: CN=4a8f7292991639a23eb8bf703e9a298cd2963db6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8c:a7:b8:93:44:b6:32:7b:96:a5:80:c0:ba:
                    70:17:bc:a7:65:cc:ab:d1:ea:c2:52:48:9b:6e:06:
                    1c:e5:e9:46:d2:e3:b5:14:df:f2:fa:03:2c:f4:5e:
                    18:4a:a1:b8:84:87:bb:3d:d3:a2:39:08:0c:81:a0:
                    c4:4e:84:8b:a8:3b:8f:31:0b:25:3b:21:2b:4c:8c:
                    31:5a:48:bc:2f:b9:3f:79:d0:a8:fc:d4:d1:04:6f:
                    8b:82:97:d2:83:20:27:15:04:dd:b6:3c:23:1f:22:
                    49:ee:93:87:40:2d:6e:30:1c:79:82:de:ae:24:2f:
                    46:fc:3d:2e:9d:de:3e:0c:b5:50:11:bc:b4:12:99:
                    69:bc:a9:92:ed:e1:f7:bc:b1:dd:2a:63:55:dc:e5:
                    92:5d:b6:db:a2:92:14:8d:4d:7a:da:10:ba:d0:4e:
                    51:b6:90:d7:14:ec:a0:93:f6:54:86:5b:43:be:36:
                    f0:9c:2d:62:4b:3f:bd:61:2b:55:7e:fa:93:59:59:
                    28:3f:33:0b:26:38:6a:1e:e2:05:fc:6b:64:c6:db:
                    60:0a:6d:f0:0b:5f:10:a9:c5:72:f0:b8:55:a5:48:
                    6f:bf:d4:90:4c:36:53:66:bb:16:25:6e:7c:40:ed:
                    db:2b:ae:ad:ad:e8:3f:ec:c1:d5:c0:a8:61:74:d9:
                    7f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:8F:72:92:99:16:39:A2:3E:B8:BF:70:3E:9A:29:8C:D2:96:3D:B6
            X509v3 Authority Key Identifier:
                keyid:99:FE:67:F4:BF:4D:D2:6A:E3:15:B3:1A:7B:47:2C:E4:D5:C1:AE:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mf5n9L9N0mrjFbMae0cs5NXBrmo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/27fb48-d066-42d9-9432-a05bd228337c/1/mf5n9L9N0mrjFbMae0cs5NXBrmo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/27fb48-d066-42d9-9432-a05bd228337c/1/mf5n9L9N0mrjFbMae0cs5NXBrmo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:b5:d8:38:79:d1:e4:86:0e:9d:86:89:f2:cb:a8:66:8a:77:
         4e:f9:a8:1a:45:3b:ef:cf:ba:ab:41:a6:3a:f7:fa:24:7b:10:
         75:56:e2:55:be:77:cc:eb:43:c3:ae:31:41:43:41:79:5f:97:
         42:7d:48:6d:04:4a:24:7e:53:a0:f7:b6:02:51:f6:d0:54:b6:
         d5:7e:f8:5a:1a:56:11:ef:11:41:2a:7e:26:59:3b:de:ef:d3:
         5b:6f:a0:16:72:3f:b5:6e:73:67:37:2c:09:6a:25:de:cf:ef:
         ea:c7:93:2d:73:14:d9:7a:1b:27:f5:52:a2:f3:f6:e2:06:4f:
         63:e3:96:3b:dd:1c:48:47:ec:ae:cf:50:83:60:ca:b3:39:3d:
         82:7c:25:cd:d5:44:fe:68:1f:85:df:69:3d:98:cf:26:48:6b:
         b8:59:1a:da:e7:e2:a7:80:a9:70:5a:25:77:17:59:0d:34:b6:
         d2:5d:75:65:98:80:25:50:de:3a:19:fb:f2:17:14:aa:94:23:
         0d:1d:40:40:6e:73:42:41:98:c0:cc:4f:9d:0b:82:16:41:44:
         6d:7d:ef:0e:13:80:27:c1:ee:a4:64:42:98:71:39:14:a4:a9:
         f3:ba:a3:79:0b:32:79:49:ab:8f:62:d9:a4:46:22:73:f7:5d:
         65:4d:3e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:11:59 2025 by rpki-client