Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/d3953b-b942-4b75-9c9d-985c64fe27ee/1/m7rm4-12beR6umaTu1r4pkiXQxA.mft
File:                     m7rm4-12beR6umaTu1r4pkiXQxA.mft (raw, json)
Hash identifier:          Tx65z4sFIQWpEoIhajEjSk96S/4mCPMj1MOesWcRMIk=
Subject key identifier:   90:D1:1C:EC:3A:F8:B6:9F:E6:F7:8D:72:D1:8E:4F:76:74:E1:80:E1
Authority key identifier: 9B:BA:E6:E3:ED:76:6D:E4:7A:BA:66:93:BB:5A:F8:A6:48:97:43:10
Certificate issuer:       /CN=9bbae6e3ed766de47aba6693bb5af8a648974310
Certificate serial:       01963CF8490747674DB937E81B94AEDD4513
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m7rm4-12beR6umaTu1r4pkiXQxA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/d3953b-b942-4b75-9c9d-985c64fe27ee/1/m7rm4-12beR6umaTu1r4pkiXQxA.mft
Manifest number:          14F3
Signing time:             Wed 16 Apr 2025 05:00:26 +0000
Manifest this update:     Wed 16 Apr 2025 05:00:26 +0000
Manifest next update:     Thu 17 Apr 2025 05:00:26 +0000
Files and hashes:         1: FNI-KOWU4HvYV7s0S8HSH_MAXKs.roa (hash: SxzdVdUSQKrcckNUFu+lpTFeygIkg6UP1Y+6mqUGLxE=)
                          2: JcToINykthxZqkBh7fobFCTKp2I.roa (hash: F1iAfU1wcqbeN+hDEpqORkaihsCsZaQsLdfSqnLvibY=)
                          3: m7rm4-12beR6umaTu1r4pkiXQxA.crl (hash: e3shY+VXe6LwowWz67YNpeCTJNpugTTjbqh+k+OCKAg=)
                          4: tKyKZjLEDoku_61jkuUZJsA6mh0.roa (hash: mS9ELNBChswUREefPfJwkVLPPBkzapMb0K1Iwkj0ZXY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/d3953b-b942-4b75-9c9d-985c64fe27ee/1/m7rm4-12beR6umaTu1r4pkiXQxA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/d3953b-b942-4b75-9c9d-985c64fe27ee/1/m7rm4-12beR6umaTu1r4pkiXQxA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m7rm4-12beR6umaTu1r4pkiXQxA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3c:f8:49:07:47:67:4d:b9:37:e8:1b:94:ae:dd:45:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bbae6e3ed766de47aba6693bb5af8a648974310
        Validity
            Not Before: Apr 16 05:00:26 2025 GMT
            Not After : Apr 17 05:00:26 2025 GMT
        Subject: CN=90d11cec3af8b69fe6f78d72d18e4f7674e180e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:87:30:13:28:1b:dd:aa:34:b1:32:cb:a2:85:
                    8f:d9:96:10:22:1b:f7:d9:23:56:02:2b:32:ef:99:
                    c0:73:94:4a:da:50:2f:85:d4:2a:20:5d:09:60:de:
                    08:37:0a:a4:e9:05:2d:7a:97:8a:2c:97:ed:2c:29:
                    17:7f:c1:0e:69:fb:6c:ad:22:a8:73:10:6b:fd:2e:
                    8e:96:2e:06:38:6f:62:0e:7b:4d:af:dd:79:98:7e:
                    46:b9:89:a0:40:5e:1a:80:69:32:91:04:25:80:bb:
                    26:f3:d4:80:d1:58:9f:e1:1f:a6:be:20:b8:72:f3:
                    0d:84:57:3e:4e:21:20:36:37:3e:93:3e:8e:fb:e4:
                    18:02:df:79:66:9b:60:48:ec:36:5d:54:82:94:24:
                    3a:0a:c3:dd:40:bb:d5:77:d7:28:1d:18:4c:b6:cb:
                    65:7d:1a:01:31:0a:2d:ff:b4:8c:f7:ad:96:f2:29:
                    20:fa:93:bf:5b:05:73:43:0a:1f:2b:21:42:76:40:
                    98:0b:66:36:11:28:f2:0b:91:b3:58:0b:91:d2:4c:
                    9b:f6:d8:50:e7:ce:0b:3d:1b:25:a0:39:cf:0e:23:
                    89:7e:5b:54:24:bd:3e:08:c3:9d:2f:30:2c:07:d6:
                    70:97:f1:52:d9:1a:54:98:43:6f:13:15:9e:ac:8f:
                    0c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:D1:1C:EC:3A:F8:B6:9F:E6:F7:8D:72:D1:8E:4F:76:74:E1:80:E1
            X509v3 Authority Key Identifier:
                keyid:9B:BA:E6:E3:ED:76:6D:E4:7A:BA:66:93:BB:5A:F8:A6:48:97:43:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7rm4-12beR6umaTu1r4pkiXQxA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d3953b-b942-4b75-9c9d-985c64fe27ee/1/m7rm4-12beR6umaTu1r4pkiXQxA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d3953b-b942-4b75-9c9d-985c64fe27ee/1/m7rm4-12beR6umaTu1r4pkiXQxA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:6d:8b:81:8b:cd:ca:ba:de:e3:e5:7a:0d:8b:02:9d:50:43:
         86:39:14:fd:dd:ec:1d:d6:b9:90:67:38:ad:30:1a:b1:6b:8b:
         32:6e:26:4c:3b:4e:c7:36:cf:2b:8c:ae:ab:b1:f2:bd:40:a1:
         27:a7:ce:d3:0d:4c:f9:14:e1:77:97:e0:d8:fd:92:88:c6:25:
         29:61:8b:28:a8:4f:c8:a1:d1:d5:a2:b4:ad:c0:47:8a:51:05:
         19:61:5c:28:9b:82:4f:5e:4f:b3:89:4c:77:00:e5:37:12:80:
         d6:f8:d2:11:40:ab:2a:20:4d:66:e8:ec:31:80:7d:69:3b:b2:
         9e:d1:7b:b9:33:8b:8c:3d:61:19:8f:84:2f:94:ad:0a:53:a8:
         f5:18:93:ad:45:4d:4e:d1:c2:81:8f:12:c5:ea:74:77:3b:35:
         3b:f8:b0:10:01:84:87:42:ba:a8:91:8a:0f:74:66:ba:3f:df:
         92:10:d2:97:bf:7b:7d:1f:74:db:6b:0c:eb:11:bd:90:05:07:
         f7:d6:b4:fe:b4:c4:c0:8a:d5:61:0c:76:08:75:98:18:f3:0a:
         6a:8a:05:f7:3c:06:68:99:45:66:24:52:aa:5c:0b:b1:7b:d2:
         44:fa:a2:2a:26:5d:0c:28:48:31:c2:73:31:bc:a8:98:a6:65:
         b8:41:18:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 07:23:05 2025 by rpki-client