Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.mft
File:                     SUqFZSdrSiUbpXPdbV9fh4I469I.mft (raw, json)
Hash identifier:          q92QtZQzh5xtJV32KTWnHXIczWqOjqZ8b3FdBNL7KII=
Subject key identifier:   34:18:69:79:76:1F:84:91:09:34:43:1A:A6:14:76:E2:17:34:C6:0E
Authority key identifier: 49:4A:85:65:27:6B:4A:25:1B:A5:73:DD:6D:5F:5F:87:82:38:EB:D2
Certificate issuer:       /CN=494a8565276b4a251ba573dd6d5f5f878238ebd2
Certificate serial:       01964C6B36F9EE4FA6E081D0C705C10F42AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SUqFZSdrSiUbpXPdbV9fh4I469I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.mft
Manifest number:          1076
Signing time:             Sat 19 Apr 2025 05:00:16 +0000
Manifest this update:     Sat 19 Apr 2025 05:00:16 +0000
Manifest next update:     Sun 20 Apr 2025 05:00:16 +0000
Files and hashes:         1: SUqFZSdrSiUbpXPdbV9fh4I469I.crl (hash: ZCc1Sc41Kt9zrsyEZ4VxNxajiG4nfvUuhlrof5rMQ0M=)
                          2: colowNm5_qh5Va7chPSOw1VK1ck.roa (hash: nloDqYvIeZi3RS1elNvQ7LOm+0c8P6a1rYXwvCChzp0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SUqFZSdrSiUbpXPdbV9fh4I469I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4c:6b:36:f9:ee:4f:a6:e0:81:d0:c7:05:c1:0f:42:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=494a8565276b4a251ba573dd6d5f5f878238ebd2
        Validity
            Not Before: Apr 19 05:00:16 2025 GMT
            Not After : Apr 20 05:00:16 2025 GMT
        Subject: CN=34186979761f84910934431aa61476e21734c60e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b3:bd:e0:b7:f0:94:b8:b3:54:05:63:dd:08:
                    63:8c:71:89:76:dc:6d:94:9c:b7:af:26:62:f5:c2:
                    9e:05:e2:69:49:8a:1c:49:94:7d:95:ac:6c:62:b4:
                    66:e6:5e:02:39:e4:5c:5d:d7:88:ff:ab:f4:c1:3c:
                    cd:f7:8e:9e:90:fc:3b:33:1f:00:08:e4:f2:c9:30:
                    fd:39:3b:78:42:f7:0e:51:8f:dc:24:0f:ec:d0:41:
                    5c:55:23:42:7a:80:7c:db:cd:59:26:1c:90:fb:69:
                    73:1e:a7:cd:1d:68:a4:11:83:47:6c:7d:44:85:3b:
                    65:de:e9:cb:85:9f:43:1e:29:04:02:0f:a2:b0:73:
                    ed:33:8b:bd:89:45:58:ca:2e:ae:58:1a:e0:66:fe:
                    a9:23:60:16:c8:48:8d:84:3f:9a:9a:c8:94:4a:a0:
                    e0:e5:85:a0:f7:58:ad:75:6d:5a:96:d6:e3:5a:01:
                    75:9d:fe:77:51:60:85:8f:17:3d:28:5f:a8:a9:a3:
                    8c:89:41:22:ca:6b:75:c1:2b:6e:a6:e0:7f:42:e5:
                    ac:cc:32:90:0d:1f:56:5a:b5:3b:ca:a0:e8:c1:49:
                    a8:b6:df:3a:dc:6a:d3:b9:46:ca:5f:7a:4b:89:d4:
                    6e:01:89:39:eb:34:47:cb:ab:27:5d:7d:52:75:fa:
                    85:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:18:69:79:76:1F:84:91:09:34:43:1A:A6:14:76:E2:17:34:C6:0E
            X509v3 Authority Key Identifier:
                keyid:49:4A:85:65:27:6B:4A:25:1B:A5:73:DD:6D:5F:5F:87:82:38:EB:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SUqFZSdrSiUbpXPdbV9fh4I469I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:f5:02:40:6d:c3:70:1c:53:2a:43:20:49:a2:a5:5a:80:6f:
         29:78:60:ab:49:e2:35:c3:57:c8:68:08:96:f6:b9:64:5b:c2:
         cf:41:2a:dc:83:d4:77:20:08:cd:ab:c0:12:dd:cf:1d:67:6f:
         59:ce:2e:f0:b3:e4:19:62:00:de:09:19:12:41:49:b3:40:c8:
         15:10:5a:ce:b2:88:1c:49:54:81:f8:1b:c3:89:84:e0:36:71:
         ba:56:d9:d3:dd:be:cb:7d:24:4a:75:01:40:35:73:8d:c1:38:
         4d:a7:46:2a:ef:05:48:93:ec:33:37:53:2a:fc:83:27:e6:e8:
         0b:1e:f8:97:a7:a5:31:b9:70:f1:b0:60:ab:6d:89:cf:e8:ab:
         4b:d4:6c:68:ec:89:7b:a0:55:2b:bf:52:8d:27:8b:ab:20:59:
         bb:8b:60:da:98:2d:aa:0f:9b:2b:82:8f:c6:08:1b:87:4d:e6:
         3e:56:e9:64:c2:d1:11:c3:06:ef:93:38:06:e7:86:b9:9c:d2:
         d8:42:02:44:cf:fe:df:02:5e:fc:33:ef:e9:9c:41:66:38:aa:
         13:8e:4b:d1:18:e7:ff:4b:d5:03:65:22:c1:8c:3a:37:7f:6c:
         83:89:f6:49:e4:ca:9e:07:33:59:53:e1:b6:b9:67:10:70:59:
         90:32:95:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:21:18 2025 by rpki-client